Privacy Policy

We're committed to protecting your privacy and being transparent about how we handle your data.

Privacy at a Glance

Auto-Delete: Your photos are automatically deleted within 24 hours after processing.
Secure Processing: All data is encrypted and processed in secure environments.
Limited Human Review: Photos are processed by AI; human review only occurs for error resolution when you request support.
Your Control: Download or delete your data anytime through your account.

Information We Collect

Personal Information

  • Email address (for account creation and communication)
  • Name (for personalization and account management)
  • Payment information (processed securely through our payment providers)
  • Profile photos you upload for headshot generation

Technical Information

  • IP address and device information
  • Browser type and version
  • Usage data and analytics
  • Cookies and similar tracking technologies

Generated Content

  • AI-generated headshots created from your photos
  • Processing logs and generation metadata
  • Quality metrics and improvement data

How We Use Your Information

Service Delivery

  • Generate professional headshots using AI technology
  • Process payments and manage your account
  • Deliver your completed headshots via email
  • Provide customer support and technical assistance

Service Improvement

  • Analyze usage patterns to improve our AI models
  • Enhance user experience and website functionality
  • Develop new features and services
  • Conduct quality assurance and testing

Communication

  • Send order confirmations and delivery notifications
  • Provide important service updates and announcements
  • Respond to your inquiries and support requests
  • Send promotional content (with your consent)

Data Protection & Security

Security Measures

  • End-to-end encryption for all data transmission
  • Secure cloud storage with enterprise-grade protection
  • Regular security audits and vulnerability assessments
  • Access controls and authentication protocols

Data Processing

  • Photos are processed in secure, isolated environments
  • AI processing occurs on encrypted servers
  • No human review of your personal photos
  • Automated deletion of source photos after processing

Third-Party Security

  • Payment processing through PCI-compliant providers
  • Cloud infrastructure with SOC 2 Type II certification
  • Regular third-party security assessments
  • Compliance with industry security standards

Data Retention & Deletion

Automatic Deletion

  • Source photos: Deleted within 24 hours after processing
  • Generated headshots: Available for download for 30 days
  • Processing data: Removed after 7 days
  • Account data: Retained while account is active

User-Requested Deletion

  • Request immediate deletion of all your data
  • Account closure and data purging within 48 hours
  • Confirmation of deletion provided via email
  • Some data may be retained for legal compliance

Legal Retention

  • Transaction records: 7 years for tax purposes
  • Support communications: 3 years
  • Security logs: 1 year
  • Anonymized analytics: Indefinitely

Information Sharing & Disclosure

We Do Not Sell Your Data

  • Your personal information is never sold to third parties
  • Photos and generated content remain private to you
  • No sharing with advertisers or marketing companies
  • Strict internal access controls

Limited Sharing Scenarios

  • Service providers (AI image generation, payment processing, cloud hosting)
  • Legal compliance (court orders, regulatory requirements)
  • Business transfers (mergers, acquisitions)
  • Emergency situations (safety, fraud prevention)

AI Image Generation

  • We use Astria.ai, a third-party AI image generation service, to create your headshots. When you upload your photos, they are securely transferred to Astria.ai for processing.
  • Astria.ai processes your photos to train a personalized AI model and generate the headshots. They are contractually obligated to handle your data with strict confidentiality and security measures.

Service Providers

  • All providers sign strict data processing agreements
  • Limited access only for specific service functions
  • Regular audits of third-party security practices
  • Immediate termination for policy violations

Your Privacy Rights

Access & Control

  • View all personal data we have about you
  • Download your data in a portable format
  • Correct inaccurate or incomplete information
  • Delete your account and all associated data

Communication Preferences

  • Opt out of promotional emails at any time
  • Choose notification preferences in your account
  • Unsubscribe links in all marketing communications
  • Granular control over communication types

Regional Rights

  • GDPR rights for EU residents
  • CCPA rights for California residents
  • Right to data portability and erasure
  • Right to object to processing

Questions About Your Privacy?

We're here to help. If you have any questions about this privacy policy or how we handle your data, please don't hesitate to reach out.