BotQNAScope and service operator
This policy applies to BotQNA Smart Suite and its professional, passport, and visa photo workflows. The service operator identified in the contact section is responsible for BotQNA’s processing. Third-party providers process data under their own terms and privacy notices.
Account and sign-in data
When you sign in with Google, GitHub, or another supported provider, BotQNA receives a verified provider identifier, email address, display name, and profile image. BotQNA never receives your provider password. This information is used to create and secure your account, associate generated photos with you, and prevent abuse.
Portraits, settings, and generated photos
Your source portrait, selected photo type, background, crop, attire, expression, lighting, and retouching settings are processed to create the requested image. Generated originals, watermarked previews, and related metadata are stored so you can review, unlock, download, or delete results.
Service providers and data transfers
Source portraits and generation instructions are sent to the configured image provider to perform AI image editing. Authentication, hosting, storage, networking, email, payment, and security providers may process technical data as necessary to operate the service. Data may be processed outside your country of residence.
Technical data, cookies, analytics, and security logs
BotQNA uses essential session cookies to keep you signed in and Google Analytics 4 to measure page visits and product-funnel events such as sign-in, photo generation, checkout, unlocking, and downloading. Analytics events do not include portraits, generated photos, email addresses, OAuth codes, asset identifiers, or full error text. In regions where consent is required, analytics and advertising storage remain denied until the Google consent interface reports permission. The service may also process IP address, request time, endpoint, response status, duration, model identifier, file count, order status, and similar operational data for authentication, rate limiting, debugging, security, and reliability.
Purposes and legal bases
Data is processed to provide requested photo generation and account features, secure the service, enforce weekly limits, process paid unlocks, diagnose failures, comply with law, and respond to privacy requests. Depending on your location, processing relies on contract performance, legitimate interests, legal obligations, or consent where required.
Retention and deletion
Locked previews and related originals are automatically deleted after 7 days. Unlocked originals are retained for 90 days unless you delete them earlier. Operational logs are retained only for a period reasonably required for security and troubleshooting. Deleting a photo removes its stored preview, original, and database record, subject to short-lived backups or legal duties.
Disclosure and sale of data
BotQNA does not sell personal data. Information is disclosed only to service providers needed to operate the product, when you direct the disclosure, during a legitimate corporate transaction, or when reasonably necessary to comply with law, protect users, investigate abuse, or defend legal rights.
Your choices and privacy rights
You can delete generated photos from the photo workspace and sign out to end the active session. Depending on applicable law, you may request access, correction, deletion, restriction, portability, or objection, and may complain to a competent supervisory authority. Account-level deletion is handled through the privacy contact below.
Security, children, and sensitive images
BotQNA uses access controls, secure production cookies, transport security, rate limiting, and isolated asset access. No online service is completely secure. Do not upload images you are not authorized to process or images containing unnecessary sensitive information. The service is not directed to children under the minimum digital-consent age in their jurisdiction.
Changes and contact
Material changes will be reflected by updating the date on this page and, where required, providing additional notice. Privacy and account-deletion requests should be sent to the operator using the contact details shown below.