How Linvi handles your data.

Linvi is a small, founder-run business that provides an AI-powered personal-brand generation service — LinkedIn banners, headshots, a headline, an About section and a brand guide — at linvi.ai. For the purposes of data-protection law (including the EU General Data Protection Regulation, GDPR), Linvi is the data controller for the personal data described in this policy.

For anything related to your data, contact us at alex@linvi.ai. We are a small team, so a human will actually read and answer your email.

• Account email. Used to sign you in (magic-link login) and to send you transactional emails about your account and your generations.
• Questionnaire answers. What you tell us about your work, audience, goals, story and personality. This is the raw material your brand is written from.
• Uploaded face photos. The reference photos you upload so the AI can generate banners and headshots that look like you. These are the most sensitive thing we hold and they get their own section below.
• Generated assets. The banners, headshots, text and brand-guide PDF we create for you, stored so you can view, regenerate and re-download them.
• Payment data. Payments are handled entirely by Stripe. We never see or store your card number. We keep records of what you purchased and a credit ledger that tracks how generation credits are added and spent.
• Basic web analytics. We use Vercel Web Analytics, which is cookieless and gives us aggregate page-view statistics — not a profile of you.
• Support correspondence. If you email us, we keep the thread so we can help you.

That is the full list. We do not collect data from data brokers, we do not run advertising trackers, and we do not sell or rent personal data to anyone.

This is the part most people actually want to know about, so here it is in plain language:

• Why we need photos. Your uploaded photos are used solely as identity references so the AI can generate banners and headshots of you — your face, in new professional settings. No photos, no likeness.
• Uploading is your consent. Because photos of your face are sensitive, we rely on your explicit consent to process them. By uploading a photo, you consent to it being used for this one purpose: generating your own brand assets. We do not use your photos for anything else.
• Where they live. Photos are stored in private storage buckets (on Supabase). They are not publicly accessible; access is via short-lived signed links generated for you or for the generation pipeline.
• Who sees them. To generate images, your reference photos are transmitted to our AI image providers — fal.ai and OpenAI — as inputs to the generation request. Your questionnaire answers (not your photos) are sent to Anthropic for AI text generation. These providers process the data to fulfil our request; see the processor table below.
• No model training. We do not use your photos — or anything else you give us — to train AI models, and we do not permit our providers to use data we send them for training under the API terms we use them on.
• How long we keep them. Your photos stay in storage while your account is active, so you can keep generating new assets from them without re-uploading. We are honest about this: we do not currently delete photos automatically on a timer. Deletion is in your control, as follows.
• Deleting them. You can delete reference photos yourself at any time in the app (on the Studio page). For full deletion of your account and all associated data — photos, answers, generated assets — email alex@linvi.ai and we will delete it. At this stage that is a manual process on our side, but it is a real one.

We do not run our own data centres. Like almost every modern product, Linvi is built on a small set of specialised providers ("processors"), each of which handles data only to provide its service to us:

If we add or change a processor, we will update this table and the date at the top of this page.

• Account data, photos and generated assets are kept while your account is active, so the product keeps working for you. They are deleted when you delete them in-app or when you ask us to delete your account.
• Purchase records (what you bought, when, and the associated credit ledger) are kept as long as we are legally required to for tax and accounting purposes, even after account deletion.
• Support emails are kept for as long as they are useful for helping you, and deleted on request.

We expect customers in the EU and we honour GDPR rights for everyone, regardless of where you live. You have the right to:

• Access — ask for a copy of the personal data we hold about you.
• Rectification — have inaccurate data corrected.
• Erasure — have your data deleted (see the photo section above; the same applies to everything else).
• Portability — receive your data in a portable format.
• Objection — object to processing we base on legitimate interest, and withdraw consent at any time for processing we base on consent (withdrawing consent does not affect processing that already happened).

To exercise any of these, email alex@linvi.ai from the address on your account. We will respond within one month. You also have the right to lodge a complaint with your local data-protection supervisory authority.

Our legal bases for processing are:

• Performance of a contract — generating and delivering your brand assets, managing your account, credits and purchases.
• Consent — processing your uploaded face photos for AI image generation (given when you upload them, withdrawable by deleting them or asking us to).
• Legitimate interest — cookieless aggregate analytics and keeping the service secure.
• Legal obligation — retaining purchase records for tax and accounting.

Anything in this policy unclear, or anything you want done with your data? Email alex@linvi.ai.

If we make material changes to this policy we will update this page and the "Last updated" date, and for significant changes affecting your photos we will tell you by email before they take effect.