Your photos & privacy

Data controller: Sintro srls, Via Fibreno 11, 00199 Roma (RM), Italia; C.F. e P.IVA 18698501006; REA RM-1800651; capitale sociale € 1,00 i.v. Contact: foto@still.sintro.io.

What we process and why

We process the reference photographs you upload, generated photographs, your chosen settings and delivery email to provide the service you request. The contractual basis covers order fulfilment and support. We use order and payment information for administration and applicable legal obligations. In the European Economic Area, the United Kingdom, Switzerland and Quebec, optional analytics, referral attribution and advertising measurement start only if you accept them. Elsewhere they are on by default and you can turn them off at any time from Privacy settings in the footer. We treat a Global Privacy Control signal from your browser as a request to turn them off, including advertising measurement, wherever you are. Turning them off, or rejecting them, does not prevent a purchase.

For the optional CV products, the source document, career details and job advertisement you provide are processed to prepare your CV. Do not upload information you do not have permission to share. Photo uploads are intended for adults and must show you.

Photographs and AI providers

Still uses your reference photos to create and check the results through its image providers. We do not train a dedicated model for each customer. Files in Still’s private storage expire after 30 days; you can delete an order’s photos earlier from your gallery. Provider processing and retention are described in our privacy notice.

Image generation uses fal.ai (Seedream) and, for Cinematic portraits, Google Gemini (Nano Banana Pro). Google Gemini also checks uploaded and generated images and processes CV content. References may be transferred as expiring signed links or image data. We do not claim that external providers keep no data or that their retention equals our 30-day storage rule.

Advertising measurement

Google Ads is a separate optional choice. In the European Economic Area, the United Kingdom, Switzerland and Quebec it sets no cookies and uses no click identifiers until you accept Advertising measurement in Privacy settings, and a purchase, or a step such as starting or signing in, made before that reaches Google Ads only as a cookieless signal; elsewhere it is on by default and turns off if you decline it there or if your browser sends a Global Privacy Control signal. When enabled, it uses advertising click identifiers and cookies such as _gcl_au and _gcl_aw (normally up to 90 days) to connect ads to completed purchases. After payment, an isolated measurement page sends the amount and currency paid and a separate transaction identifier to prevent duplicates. It does not send uploaded photographs, CV content, email addresses or private order links. Ad personalisation and enhanced conversions are disabled. Still stores a receipt marker in local storage for up to 182 days to avoid resending a purchase. OpenAI Ads (ChatGPT ads) follows the same optional choice: when enabled, we pass OpenAI the click reference it already attached to the ad's link, to connect that click to a completed sign-up or purchase; we never send OpenAI your email, name or a photograph. Meta (Facebook and Instagram ads) follows the same optional choice: when enabled, our server tells Meta when someone who came from a Meta ad signs up or completes a purchase, with the amount and currency, the click identifiers Meta set (such as _fbc and _fbp), your IP address and browser, and your email address in hashed (SHA-256) form so Meta can match the event to the ad; we never send Meta a photograph, a CV or an unhashed email. If you link a Meta ad to our Google Analytics reports, Meta may also see aggregated results from Google Analytics for its own ads. Rejecting or withdrawing advertising consent clears these identifiers and stops future advertising measurement.

Other recipients

Cloudflare hosts the application and private file storage. Stripe or Polar, depending on your country, operates the payment checkout; Still stores order references and status rather than complete card details. Resend delivers order and sign-in emails. It now also delivers product emails, such as a reminder after you sign up; these emails record which of their links you click, to measure and improve them. When optional measurement is on, Google Analytics, PostHog’s EU service and Still’s own event endpoint receive public-page usage and attribution data. Separately, Still’s server keeps a daily count of public page visits, the name of the website a visit came from (never the page or search terms), and how many privacy choices were made, grouped only by day and by whether the visit came from a region where measurement needs your consent first. This count sets no cookie, stores nothing in your browser and keeps no IP address, browser details or identifier of any kind, so it cannot tell who visited or recognise a return visit. The support chat at support.sintro.io uses Chatwoot and loads only when you ask to open it.

Still's server also counts, per day, how many visits reach each step of the sign-up and checkout pages, which buttons are pressed and how far pages are scrolled, grouped only by page, language, country, phone or computer, whether the visit came from an ad, and, for a visit that did not, the broad category of site it came from (for example an AI assistant, a social network or a search engine, never the exact page or search terms). Nothing is stored in or read from your browser for this and no personal data is kept, so, like the visit count, it needs no consent (the French CNIL exemption for audience measurement; the German TDDDG, section 25).

Some suppliers may process data outside the European Economic Area. The supplier contracts, applicable transfer mechanism and administrative retention schedule must still be confirmed by the controller; contact us for the current information before submitting data if this affects your decision.

Retention and deletion

Files in Still’s private storage are scheduled to expire 30 days after creation. From an authenticated gallery, “Delete this order’s photos” removes that order’s files and cancels its active generation. Separate purchases and reshoots have their own order controls: delete those too, or ask us for a broader request. Download anything you want to keep first.

Photo deletion does not erase payment records, customer correspondence, earlier recipient downloads or copies held by suppliers under their terms. For access to, correction, deletion or an export of your personal data, contact foto@still.sintro.io. We may ask for proportionate proof of identity and explain any legal reason for retaining a record.

Reviews

If you leave a review in your gallery, we publish your star rating, your review and the first name you enter on still.sintro.io, marked as a verified purchase. Every rating is published alike; we remove a review only for abuse or at your request. We publish it because you chose to; ask foto@still.sintro.io to change or remove it at any time. If you also post it on Trustpilot, Trustpilot's own terms and privacy notice apply there.

Teams and events

Each participant uploads their own references. The organiser can access generated results for the group; reference uploads are not exposed through the organiser gallery. Share group invitations and downloaded photographs carefully.

Your rights

Where applicable, you may request access, rectification, erasure, restriction and portability, and object to processing. You can turn optional measurement off, or withdraw consent you gave, using Privacy settings in the footer without affecting the lawfulness of earlier processing. You may lodge a complaint with the Italian Garante per la protezione dei dati personali or your competent supervisory authority. We do not use the photo-generation service to make decisions about your eligibility for a job, credit or similar matters.

Right to object

We are legally required to separately inform you about your right to object. Under the European GDPR, you have the right to object to us processing your personally identifiable information for direct marketing purposes. If you file an objection with us, we are legally required to immediately halt the processing of said information for said purpose. You can file an objection using the e-mail address at the end of this privacy policy.

Opting out

In addition to our core services, we provide various extra services to improve your experience. This includes the sending of newsletters, contacting you for customer satisfaction surveys, et cetera. At any point, you may opt out of these kinds of services. For our contact via e-mail, you can click the link at the bottom of any of our e-mails to change your preferences. You can also reply "stop" to any of our e-mails.

See Cookies & browser storage for the optional identifiers and how to disable them.