Rembrandt Lens
Calibrating studio optics...
12%
Calibrating studio optics...
Effective Date: August 29, 2026
Rembrandt Lens (“Rembrandt Lens,” “Company,” “we,” or “us”) respects your privacy. This Privacy Policy (“Policy”) describes how we process Personal Data that we gather through our website (“Website”) and when we provide our services (together, the “Services”). It also tells you about your rights and choices with respect to your Personal Data, and how you can contact us if you have any queries or concerns.
An account is required to request portrait generation. We process source photos as temporary inputs to complete your request. Generated portraits and saved wardrobe images are kept privately in your account while it remains active, and you can delete them from your account.
In this Policy, “Personal Data” means any information relating to an identified or identifiable natural person. This corresponds to “Personal Information” under the California Consumer Privacy Act (“CCPA/CPRA”) and equivalent terms under other applicable privacy laws.
This Policy applies to all users of the Services, regardless of location. If you are located in the European Economic Area (“EEA”), United Kingdom, or Switzerland, or in California or another US state with comprehensive privacy legislation, please see the jurisdiction-specific sections below for additional information about your rights.
Registration and Profile Information. If you sign up for an account, we may ask you for your name, email address, and any other information that you add to your account profile, such as biographical details or preferences.
Source Photos, Saved Wardrobe and Background Images, and Prompts. When you use the Services, you may submit photos, text prompts, wardrobe images, and custom background images. Source photos are temporary inputs used to complete a generation request. Generated portraits and wardrobe or background images you choose to save are associated with your account. You are responsible for ensuring you have the rights and permissions necessary to submit this content.
Face Data. Certain photo generation features allow you to upload photos of yourself for the purpose of generating AI-generated portrait content. Photos uploaded through these features (collectively, “face data”) are processed to generate the AI content you request and protect the Service. Depending on the applicable law of your jurisdiction, face data may be considered biometric data, biometric information, or Sensitive Personal Information.
We do not use submitted photos to identify or authenticate individuals. We process them to fulfill the generation request you make and to keep the Service secure. We do not sell, lease, trade, or otherwise profit from face data.
You can stop future photo processing by not submitting new source photos and can request deletion of saved account content through your account settings or by contacting us at rembrandt.lens@gmail.com. Deletion requests are handled as described in Section 4.
Communications. If you contact us directly, we may receive additional Personal Data about you, such as your name, email address, and the contents of a message or attachments that you may send to us.
Feedback Data. We may collect information about your experiences with our Services, including survey responses, ratings, and other feedback you choose to submit.
Payment Information and Purchase History. We gather transaction information, such as records of credit packs purchased and credit usage. Payment card information is collected and processed directly by our third-party payment processor (Stripe) and is not stored by Rembrandt Lens.
Marketing Data. If you sign up for our mailing list, you may provide us with your name and email address. You may opt out of marketing communications at any time by clicking the unsubscribe link in any marketing email we send.
Usage Information. To help us understand how you use our Services and to improve them, we automatically receive information about your interactions, such as your IP address, device type, browser type and version, pages you view, how long you spend on a page, and the dates and times of your visits. We may derive approximate location information from your IP address.
Cookies and Similar Technologies. We use cookies and similar technologies to ensure that our Services function properly, remember your session, and understand how the Service is used. For details, see Section 11 (Cookies and Tracking Technologies).
Third-Party Login Information. When you connect or log in to the Services with a third-party service (e.g., Google), you direct the service to send us information such as your registration and profile information as controlled by that service or as authorized by you via your privacy settings at that service. Our use and disclosure of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
We will only process your Personal Data based on a valid legal ground. The table below describes our primary purposes and the legal grounds we rely on.
| Purpose | Description | Legal Ground |
|---|---|---|
| Providing the Services | We use account information, source photos, prompts, and settings to authenticate you, process your request, deliver generated portraits, maintain your private library, and process one-time credit purchases. | Performance of a contract |
| Support and communications | We use contact details and account information to provide support, send service messages, and respond to requests. | Performance of a contract; Legitimate interest |
| Security and fraud prevention | We use limited account, device, and usage information to protect accounts, prevent abuse, and enforce our Terms. | Legitimate interest; Legal obligation |
| Service measurement and improvement | We use usage information and feedback to understand reliability and improve the Service. Optional analytics or advertising technologies may be subject to separate consent and choice requirements under applicable law. | Legitimate interest; Consent (where required) |
| Administrative and legal purposes | We use information to enforce this Policy, protect our rights, and comply with applicable law. | Legal obligation; Legitimate interest |
We may disclose your Personal Data to third parties in the following circumstances:
We take measures to delete your Personal Data or keep it in a form that does not permit identifying you when this information is no longer necessary for the purposes for which we process it, unless we need to retain certain information as required by law.
Source photos. We process source photos as transient inputs for the generation request you make. We delete those temporary source inputs after use or expiry. Source photos are not kept in your portrait library.
Generated portraits and wardrobe images. These are stored privately while your account remains active so that you can access them in your dashboard. You can delete individual portraits or wardrobe images at any time. Closing your account starts deletion of your account content and private media, subject to limited retention required by law.
| Data Category | Retention Period |
|---|---|
| Account, profile, and preference information | While your account is active; deleted or de-identified after verified account deletion, except where law requires retention |
| Source photos / face data | Temporary generation inputs; deleted after use or expiry |
| Generated portraits and saved wardrobe images | Private to your account while it is active; deletable by you at any time |
| Payment and transaction records | Retained only as required for tax, accounting, fraud prevention, dispute handling, or other legal obligations |
| Analytics and usage data | Retained only as needed for security, service operation, and measurement, subject to applicable law and your choices |
| Marketing and communication preferences | Until you opt out or we no longer need them; we may retain a minimal suppression record to honor opt-out requests |
Deletion from active systems is performed as part of our account-deletion process. Limited copies may remain temporarily in secure backups or where retention is required by law, until they are overwritten or no longer required.
If you are a California resident, you have the following rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act:
To submit a CCPA request, contact us at rembrandt.lens@gmail.com. We will verify your identity before fulfilling your request.
We do not knowingly sell or share the Personal Data of consumers under the age of 16.
If you reside in Colorado, Connecticut, Virginia, Utah, Oregon, Texas, Montana, or another US state with comprehensive privacy legislation, you may have rights similar to those described in Section 6, including rights to access, correct, and delete your Personal Data, and to appeal our decisions regarding your requests.
Certain US jurisdictions may treat face data as biometric data or provide additional protections for it. We maintain a written face data retention schedule and destruction policy, which is set forth in Section 4 of this Privacy Policy. We do not sell, lease, trade, or otherwise profit from face data.
To exercise your rights, contact us at rembrandt.lens@gmail.com. If we deny your request, you may appeal by contacting us at the same address.
If you are located in the European Economic Area (“EEA”), United Kingdom (“UK”), or Switzerland, you have the following rights under the General Data Protection Regulation (“GDPR”) and equivalent data protection laws:
Cross-Border Transfers. Our Services are hosted in the United States. When we transfer your Personal Data outside the EEA, UK, or Switzerland, we use transfer safeguards required by applicable law.
To exercise these rights, contact us at rembrandt.lens@gmail.com.
Our Services use artificial intelligence to generate portrait content in response to your inputs.
Third-Party AI Providers. We use third-party AI model providers, including Google APIs, to generate the outputs you request. We transmit the inputs needed to fulfill that request and use provider services under their applicable terms and privacy policies.
No Automated Decision-Making or Profiling. As part of the Service, we do not engage in automated decision-making and/or profiling that produces legal or similarly significant effects on you.
Our Services may contain links to or integrations with other websites, products, or services that we do not own or operate. We are not responsible for the privacy practices of these third parties. This Policy does not apply to your activities on these third-party services. We encourage you to read their privacy policies before providing any information to them.
We use cookies and similar technologies to keep the Services functioning, maintain sessions, and understand how the Services are used. Cookies are small text files containing a string of alphanumeric characters.
Functional Cookies. Some cookies are strictly necessary to make our Services available to you. We cannot provide you with the Services without this type of cookie.
Optional analytics and advertising technologies. We may use analytics, advertising, and referral technologies to measure site performance and marketing effectiveness. These non-essential technologies may be subject to consent and choice requirements under applicable law.
You can manage cookies through your browser settings. Where available, use our consent controls to update your non-essential tracking preferences.
We use administrative, technical, and organizational safeguards designed to protect Personal Data, including access controls for account content and private media. However, because no electronic transmission or storage of information can be entirely secure, we can make no guarantees as to the security or privacy of your information.
We have put in place procedures designed to address breaches of Personal Data. In the event of a breach, we will notify you of breaches affecting your Personal Data in accordance with applicable law.
We do not knowingly collect, maintain, or use Personal Data from children under 18 years of age, and no part of our Services is directed to children. If you learn that a child has provided us with Personal Data in violation of this Policy, then you may alert us by emailing us at rembrandt.lens@gmail.com. We comply with the Children's Online Privacy Protection Act (“COPPA”) and do not knowingly collect Personal Data from children under 13.
We may update this Policy from time to time to reflect changes in our privacy practices. If we modify this Policy, we will indicate the date of the latest revision at the top of this Policy. If we materially change the ways in which we use or disclose Personal Data previously collected from you through the Services, we will notify you through the Services or by email. Your continued use of the Services after the effective date of any updated Policy constitutes your acknowledgment of, and agreement to, the updated Policy.
Rembrandt Lens is the data controller for the processing of Personal Data described in this Policy. Should you have any queries regarding this Policy, about our processing of your Personal Data, or if you wish to exercise your rights, please contact us: