Legal
Privacy Policy
Last updated: 9 August 2026
Introduction
myKADR is committed to protecting your personal data. This Privacy Policy explains what data we collect, how we use it, how we protect it, and your rights as a data subject. We process personal data in accordance with applicable data protection legislation, including GDPR where applicable.
Data We Collect
- —Facial photographs (biometric personal data) — uploaded voluntarily for portrait generation
- —Email address — for order management and result delivery
- —Technical data — IP address, browser type (standard server logs)
Cookies and Analytics
Analytics are provided by Yandex Metrica (counter 108769618). The service uses cookies to collect anonymised visit statistics: landing pages, referral sources, and activity on the site. You may disable analytics cookies by pressing “Turn off analytics” in the cookie banner — Yandex Metrica is then not loaded. Declining analytics cookies does not restrict access to any features of the service.
Legal Basis for Processing
We process your personal data on the basis of your explicit consent, provided at the time of placing your order. You have the right to withdraw consent at any time by contacting info@mykadr.com. Please note that withdrawal of consent will make it impossible to fulfill your order. Processing of biometric data (facial photographs) is based on your separate, explicit informed consent.
Data Sharing
To fulfill your order, your data is shared with the following sub-processors under data processing agreements:
- —Higgsfield Inc. (USA) — portrait generation
- —Supabase Inc. (Germany) — data and photo storage
- —Anthropic PBC (USA) — automated photo analysis
- —Resend Inc. & Amazon Web Services/SES (USA) — email delivery
- —Vercel Inc. (USA) — application hosting
- —Inngest Inc. (USA) — order processing orchestration
Your data is shared solely for the purpose of order fulfillment. We do not sell your data, share it for marketing purposes, or use it to train publicly available AI models.
International Data Transfers
Some of your data is processed by sub-processors located outside the European Economic Area, including the United States. Such transfers are conducted on the basis of your explicit consent and, where applicable, under appropriate safeguards in accordance with GDPR Article 46.
Retention Periods
- —Uploaded photographs (facial photos) — deleted within 30 days after order completion
- —Generated portraits — deleted within 30 days after order completion
- —Derived AI model (Soul ID) — stored by the processor (Higgsfield) until the subject withdraws consent; upon withdrawal the operator requests its deletion
- —Email and order data — retained for 12 months after order completion, then permanently deleted
- —Consent records (timestamps, IP) — retained for 12 months after order completion
- —Technical logs — retained for no more than 90 days
Security
All data is transmitted over encrypted connections (SSL/TLS). Access to personal data is strictly limited to personnel and services directly involved in fulfilling your order.
Your Rights
Under applicable data protection law, you have the right to:
- —Access your personal data
- —Request correction of inaccurate data
- —Request erasure of your data (right to be forgotten)
- —Withdraw consent to processing
- —Lodge a complaint with the supervisory authority (Office of Roskomnadzor for Krasnoyarsk Krai, 24.rkn.gov.ru)
To exercise any of these rights, contact: info@mykadr.com. We will respond within 30 calendar days.
Changes to This Policy
We may update this Privacy Policy from time to time. The date of the most recent update is shown at the top of this page. Continued use of the service following any changes constitutes acceptance of the updated Policy.
Contact
For all data protection enquiries:
info@mykadr.com