Privacy Policy

Overview

This Privacy Policy explains how Business Headshots collects, uses, stores, shares, and protects personal information when you use our website, account system, AI headshot workflows, editing tools, and related services.

If you do not agree with this Privacy Policy, please do not use the service.

Information We Collect

We may collect the following categories of information:

• Account Information: name, email address, login credentials, and account preferences.
• Uploaded Photos and Project Data: source photos, generation settings, selected styles, background and outfit preferences, project metadata, and support-related notes.
• Generated Results: preview headshots, HD outputs, export variants, and related metadata such as resolution, timestamps, and download counts.
• Payment Information: billing and transaction metadata handled through our payment processors. We do not store full card numbers.
• Support and Communications Data: messages you send us, feedback, deletion requests, and customer support records.
• Technical and Usage Data: IP address, browser type, device information, referrers, and usage logs needed to operate, secure, and improve the service.

How We Use Information

We use personal information to:

• provide, operate, and maintain the service;
• create AI-generated headshots, edits, exports, and other requested outputs;
• process payments and deliver orders;
• authenticate users and secure accounts;
• respond to support requests and service communications;
• prevent abuse, fraud, unauthorized access, and other misuse;
• maintain service quality, debug issues, and improve the product;
• comply with legal obligations and enforce our terms.

AI Processing and Model Use

When you upload photos, we and our service providers may process those images to generate the headshots, edits, or exports you request.

As a general rule:

• we do not use customer uploads or generated results to train our own general-purpose AI models;
• we do not sell customer photos or generated headshots;
• third-party AI and infrastructure providers may process images solely to provide the requested service, subject to their own terms, security controls, and legal obligations.

If we ever introduce a workflow that materially changes this model-use policy, we will update this Privacy Policy before applying that change.

Retention and Deletion

We retain different categories of data for different periods, depending on why the data was collected and what is required to provide the service.

• Uploaded source photos: are intended to be retained only for a short service window, not indefinitely. In the ordinary course, we aim to remove or de-identify source photos within 7 days after delivery confirmation, unless you request earlier deletion, we need a limited additional period for support, reruns, fraud prevention, or security review, or a longer retention period is required by law.
• Free sample tool: the source photo is processed in memory for the single sample request and is not added to a headshot project or stored in object storage. Only the watermarked sample result is stored, normally for up to 24 hours. To enforce one sample per account and limit repeated sign-ups, we may retain an irreversible photo fingerprint, a hashed browser-device-network risk identifier, a separate hashed network identifier for rolling 24-hour abuse checks, and the account-level usage record. The raw IP address, User-Agent, and browser device identifier are not stored in the sample record.
• Generated outputs: may remain available in your account longer than source photos so you can review, export, or download them. You may remove individual generated headshots from the project interface where available, or request broader deletion of generated outputs, subject to backup cycles, system logs, security records, and legal retention requirements.
• Account, payment, and compliance records: may be retained longer where reasonably necessary for tax, accounting, fraud prevention, dispute resolution, or legal compliance.

If you want your account data, uploaded photos, or generated outputs deleted, you may contact us and we will take reasonable steps to remove or anonymize the relevant data, subject to backup cycles, system logs, security records, and legal retention requirements.

Example Wall and Optional Public Display

We do not publicly display your generated headshots by default.

If we offer an examples gallery, showcase, or similar public surface:

• your result images will only be displayed if you give clear permission for that use;
• example consent may be withdrawn for future display;
• we may need a limited period to process and complete removal from already-synced marketing surfaces, caches, or backups.

Sharing and Service Providers

We may share information with trusted service providers who help us run the service, such as providers for:

• hosting and infrastructure;
• object storage;
• authentication and security;
• payment processing;
• transactional email;
• AI image generation or processing;
• analytics and customer support.

We may also disclose information:

• when required by law, subpoena, court order, or valid governmental request;
• to protect the rights, security, and integrity of our users, our company, or the public;
• in connection with a merger, acquisition, financing, sale of assets, or similar corporate transaction.

International Transfers

Depending on where you use the service from, your information may be processed in countries other than your own. Where required, we use appropriate safeguards for cross-border transfers.

Data Security

We use technical and organizational measures designed to protect personal information against unauthorized access, loss, misuse, alteration, or disclosure. No system is perfectly secure, and we cannot guarantee absolute security.

Your Rights and Choices

Depending on where you live, you may have rights to:

• access personal information we hold about you;
• correct inaccurate information;
• request deletion of personal information;
• object to or restrict certain processing;
• withdraw consent where processing is based on consent;
• request portability of certain information.

You may also opt out of promotional emails by using the unsubscribe link in those emails. We may still send service, billing, security, or account-related messages.

Children

The service is intended for adults. You may not use the service to upload photos of minors or to create headshots for minors through this workflow.

Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the date above and post the revised version on this page.

Contact

If you have questions about this Privacy Policy or want to exercise a privacy-related request, please contact us.