Privacy Policy

Account Information

When you create an account, we collect your name, email address, and authentication credentials. If you sign in with Google, we receive your basic profile information from Google.

Photos & Generated Images

We temporarily process the photos you upload to generate headshots. Original uploads are automatically deleted from our servers within 24 hours of processing. Generated images are stored in your account until you choose to delete them.

Payment Information

Payment processing is handled by Stripe. We do not store your full credit card number, CVV, or banking details. We retain only transaction IDs, amounts, and purchase history.

Usage Data

We collect anonymized usage data including pages visited, features used, generation counts, and performance metrics to improve the Service.

We use your information to:

• Provide, maintain, and improve the Service
• Process your headshot generations and account transactions
• Send important account notifications and updates
• Provide customer support and respond to inquiries
• Detect, prevent, and address fraud or abuse
• Analyze usage patterns to improve our AI models and user experience

We do not use your uploaded photos or generated images to train our AI models unless you explicitly opt in to our improvement program.

We do not sell your personal information. We share data only in these limited circumstances:

• Service Providers: We use trusted third-party services (Firebase for authentication, Stripe for payments, cloud hosting for image processing) that process data on our behalf under strict contractual obligations.
• Legal Requirements: We may disclose information when required by law, legal process, or government request.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, user data may be transferred as part of that transaction.

We implement industry-standard security measures to protect your data:

• All data is encrypted in transit (TLS 1.3) and at rest (AES-256)
• Images are processed in isolated, secure environments
• Access to user data is restricted and logged
• Regular security audits and penetration testing
• SOC 2 Type II compliant infrastructure

While we strive to protect your information, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.

• Uploaded photos: Automatically deleted within 24 hours of processing
• Generated images: Retained in your account until you delete them or close your account
• Account data: Retained while your account is active and for 30 days after deletion
• Payment records: Retained for 7 years as required by financial regulations

You have the right to:

• Access your personal data and request a copy
• Correct inaccurate or incomplete information
• Delete your account and associated data
• Export your data in a portable format
• Object to data processing for marketing purposes
• Withdraw consent at any time where processing is based on consent

To exercise these rights, contact us at privacy@aiheadshotpro.com or through your account settings.

We use the following types of cookies:

• Essential cookies: Required for authentication and core functionality
• Analytics cookies: Help us understand how users interact with the Service (anonymized)
• Preference cookies: Remember your settings like theme preference

We do not use advertising cookies or cross-site tracking. You can manage cookie preferences through your browser settings.

Your data may be processed in the United States and other countries where our service providers operate. We ensure appropriate safeguards are in place through Standard Contractual Clauses and similar mechanisms to protect your data regardless of where it is processed.

The Service is not intended for users under 18 years of age. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, contact us immediately and we will delete it.

We may update this Privacy Policy from time to time. We will notify registered users of material changes via email at least 30 days before they take effect. The "Last updated" date at the top indicates the most recent revision.

For privacy-related inquiries, contact our Data Protection team: