Trust center
Portrait work touches real faces and real consent. These constraints are written down because they are the product.
PortraitKey contains no generation model and calls none. Jobs run at your provider, under your key, on your bill - described in the manifest before they run.
A dataset cannot exist without a declared rights basis. Revocation and deletion are first-class actions, and deletion produces a receipt.
Provider outputs ship only after passing a human-run evaluation gate with numeric thresholds. The tool never self-approves.
Reference and review images live in the browser session. PortraitKey uploads nothing, anywhere, ever.
No analytics SDKs, no session recording, no third-party pixels. Requests are fonts and the site's static files.
Manifest costs are computed from the rates you enter and labeled as estimates. No number is dressed up as a provider quote.
Delete
The trust view in the studio deletes the local workspace in one click. Because there is no server copy, nothing remains to anonymize afterward.