Your face is for your shoot—not an ad audience.

Promptography uses your authorized reference images to create and quality-check one private First Look. Image pixels, face measurements, recovery codes, and payment identifiers are excluded from advertising and product analytics events.

01 / Data

What we process and why.

References and directionWe process 4–8 authorized photos and your written brief only to produce, quality-check, deliver, support, refund, and delete your order.

Self-match quality measurementAutomated models compare your generated frames only with your own references so weak results can be rejected. We do not identify you, compare you with other people, or add your face to a recognition database.

Order and accounting recordsWe keep the minimum consent, state-transition, PayPal, refund, dispute, security, and tax records required to operate the service and meet legal obligations. Those records are separated from deleted image pixels.

Site measurementSession analytics (Microsoft Clarity) measure how pages are used for every visitor so we can fix what is broken; those recordings exclude your photos, face measurements, recovery codes, and payment details. Advertising and funnel analytics events are default-deny and may run only after the corresponding consent is granted. When enabled, they may measure page and funnel activity through configured providers such as GA4, PostHog, Plausible, Meta, TikTok, or X. Withholding consent does not block the service. With your analytics-and-ads consent, we send Meta the purchase event plus the checkout browser's user-agent and its Meta _fbp/_fbc identifier (or _fbc formed from the Meta click ID when first observed) solely for attribution, deduplication, and ad measurement; never photos, face data, recovery codes, or PayPal IDs. Those browser signals remain attached to the consented purchase-event record for provider delivery and audit; they do not change the image-retention clocks.

02 / Deletion clocks

Two clocks, stated in advance.

Reference images are deleted within 24 hours after the order reaches terminal delivery or refund processing. The private delivered gallery is deleted 30 days after delivery. A refund or deletion request never depends on keeping image pixels longer than those clocks.

Deletion is replay-safe and checked against the private asset manifest. If an object cannot be removed on schedule, the order enters a support-required state rather than being reported as deleted. Backups and provider caches expire under their own bounded operational cycles and are not restored for ordinary product use.

03 / Control

Access, correction, deletion, and objection.

EmpathyLabs.ai operates Promptography and is the data controller. Email mat@empathylabs.ai to request access, correction, deletion, restriction, portability, or objection. Include no more identity data than necessary. Your recovery code is a private capability: do not publish it or place it in a URL.

Service providers may process data in the United States or other countries under their contracts and applicable transfer safeguards. We do not sell your reference images, generated images, face measurements, or recovery capability, and we do not use them to train general-purpose models.

A short-lived private shoot.

References: 24 hours · Gallery: 30 daysStart First Look