Development build
Selected images are represented by temporary browser URLs. Refreshing or closing the tab clears the preview. Demo job records contain configuration and timestamps, not image bytes.
Production design
Before launch, uploaded photos will use private storage, server-side file validation, metadata removal, expiring access links, and documented deletion periods. Analytics will not receive images, face features, or private file URLs.
Your choices
Production users will be able to request deletion and contact support about stored uploads or outputs. The final retention window will be shown before a real generation request is submitted.