Privacy Policy
Last updated: 13 October 2026
1. Who we are
OneLastImage (onelastimage.com) makes formal portraits for a funeral and for the home from one everyday photo that you upload. For customers in Hong Kong we are the data user of your personal data under the Personal Data (Privacy) Ordinance (Cap. 486). Questions or requests: hello@onelastimage.com
2. What we collect
Your account: your email address. If you sign in with Google, also the name and profile picture Google shares with us. The photos: the photo you upload and the portraits we make from it. Your answer about the person in the photo: has passed away and you are family, is you, or is alive and agrees. Your choices: man or woman, and the backgrounds, clothes and expressions you pick. Orders: what you bought, the amount and the payment status. Card details are handled by our payment provider, Airwallex. We never see or store your full card number. Messages you send us. Error reports: the page, browser type and time when something goes wrong, so we can fix it.
3. Why we use it
To make the photos you order and show you previews. To run your account and sign you in. To take payment and send order emails, such as "your photos are ready" and reminders before photos are deleted. To answer your questions, and to make an order again when you ask for the free redo. To prevent misuse. To meet our legal duties. We only send you marketing emails if you agree to them, and you can stop them at any time.
4. The photo of the person
You may upload a photo only in one of the three cases you are asked about before you start: the person has passed away and you are family, the person is you, or the person is alive and agrees. We keep your answer with the order. If the person is alive and is not you, please tell them that their photo is processed by the service providers of section 5, some of them outside Hong Kong, and upload it only if they agree. We use the photos only to make the portraits you ordered. To see how closely a finished portrait looks like the person in your photo, our system compares facial features automatically. The features are worked out in memory and not stored; we keep only one similarity number per portrait. We never use your photos to train any AI model, never sell them, and never show them in public or use them in our marketing without your separate written permission.
5. Who processes your data for us
We use these service providers. Some are outside Hong Kong, so your data may be transferred abroad. They may use the data only to provide their service to us. Vercel: runs our website. Supabase: database and sign-in (Singapore). Cloudflare R2: private storage for photos. fal.ai: makes the portraits and the print files with AI, using an image model of OpenAI (United States). We switch off its storage of your photo, and its copy of each result is deleted after one hour. Airwallex: takes payments. Resend: sends our emails (United States). Google: only if you choose to sign in with Google.
6. How long we keep it
Photos not bought: your uploaded photo and previews are deleted 14 days after they are made. Photos bought: the photo you uploaded, the finished portraits and their print files are kept for 90 days after the order, so you can download them again, then deleted permanently. We email you before they are deleted. Account details: kept while your account is open. Order and payment records: kept as long as the law requires for business records (in Hong Kong generally 7 years). They do not include photos. Error reports: deleted after 30 days.
7. How we protect it
Data travels over encrypted connections (HTTPS). The photos we store are kept in private storage, and your gallery is shown only after you sign in. Only the few people who run the service can reach the data, and only when needed.
8. Your rights
You can ask to see the personal data we hold about you and to correct it. We will reply within 40 days, as the Hong Kong Ordinance requires. You can ask us to delete your account, photos and portraits at any time. You can stop marketing emails at any time. Write to hello@onelastimage.com.
9. Cookies and browser storage
We use only what the site needs to work: a cookie that keeps you signed in, one that remembers your language, and browser storage that remembers a discount code you opened. We do not use advertising or tracking cookies.
10. Changes
If we change this policy, we update this page and its date. If the change is important, we also tell you by email.