Legal
Privacy Policy
How Headshot.ltd collects, uses, stores, and protects your personal information and photos.
Introduction
Headshot.ltd ("Headshot.ltd," "we," "us," or "our") operates an online service that turns your uploaded photos into AI-generated professional headshots. This Privacy Policy explains what information we collect, how we use it, who we share it with, and the choices available to you.
By creating an account, uploading photos, or using our website and applications, you agree to the practices described in this policy. Please also read our Terms of Service, which govern your use of the service.
Information we collect
We collect information in three broad categories: information you provide, information generated when you use the service, and technical information collected automatically.
Account information — such as your email address, display name, and authentication credentials (including information received if you sign in with Google).
Uploaded photos — selfies or portraits you submit so we can analyze your face and generate headshots.
Generated images — professional headshots and related outputs we create for you.
Job and usage data — selections you make (backgrounds, attire, plans), generation history, and dashboard activity.
Payment-related information — transaction identifiers, plan purchased, and payment status. Payment card details are processed by our payment providers; we do not store full card numbers on our servers.
Communications — messages you send to us for support or legal requests.
Technical data — IP address, browser type, device information, cookies, and similar logs used to operate and secure the service.
How we use your information
We use the information we collect only to operate, improve, and protect Headshot.ltd. Specifically, we use it to:
Create and manage your account and authenticate you.
Process your uploaded photos and generate headshots you request.
Validate photo quality, detect faces, and deliver the styles and outputs you select.
Process one-time payments and maintain purchase records.
Show your generation history in your dashboard for a limited retention period.
Respond to support requests, enforce our terms, and comply with law.
Monitor performance, debug errors, and protect against fraud or abuse.
We do not train AI models on your photos
Your uploaded photos and generated headshots are used solely to provide the service to you — for example, as reference material to create your portraits in a given session. We do not use your uploads or outputs to train, fine-tune, or improve general-purpose or proprietary AI models.
Third-party AI infrastructure providers we use are engaged to perform inference (processing) on your behalf for your specific request. We configure our service so that your photos are treated as customer content for delivery of results, not as training data.
Your ownership of photos and outputs
You retain ownership of the photos you upload. Subject to your compliance with our Terms of Service, you also receive full ownership and commercial usage rights in the headshots we generate for you. We do not claim ownership over your uploads or your generated portraits.
To deliver the service, you grant us a limited license to host, process, transmit, and temporarily store your content — as described in our Terms of Service. That license exists only so we can generate and deliver your results.
Where processing happens & third-party services
Image processing occurs on our servers and on infrastructure operated by vetted third-party providers. These providers process data on our instructions and only as needed to deliver the service. Categories of providers include:
Cloud hosting and database providers — to run our application and store account and job metadata.
Object storage providers — to store uploaded and generated images securely.
AI inference providers — to run image generation, background processing, and related model operations on your photos for your specific job.
Payment processors — to handle one-time checkout transactions. We do not operate our own payment network.
Authentication providers — such as Google, if you choose to sign in with Google.
Email and support tools — if you contact us.
We may update the specific vendors we use over time, but we will continue to require appropriate contractual and security safeguards for personal data and photos processed on our behalf.
Storage, security & retention
We store uploaded photos and generated headshots using industry-standard security measures, including encrypted transport (HTTPS/TLS) and access controls on our infrastructure. No method of transmission or storage is completely secure; we work to protect your data but cannot guarantee absolute security.
We retain information only as long as needed for the purposes described in this policy:
Uploaded source photos — typically deleted within 7 days after upload, unless a longer period is needed to complete an in-progress job or resolve a support issue.
Generated headshots — typically deleted within 30 days after creation, unless you download them sooner or we need to retain them briefly for support, billing records, or legal compliance.
Immediate deletion — you may request deletion of your uploads or generated images sooner by contacting us at the email below. We will honor verified requests where technically and legally feasible.
Account and billing records — retained as needed for accounting, fraud prevention, and legal obligations, even after photos are deleted.
Google Sign-In
If you sign in with Google, we receive basic profile information from Google (such as your name, email address, and verified email status) as permitted by your Google account settings and Google's policies. We use this information only to create and manage your Headshot.ltd account.
Google's use of your information is governed by Google's Privacy Policy. You can revoke our access through your Google account permissions at any time.
Payments
All purchases on Headshot.ltd are one-time payments. We do not sell subscriptions unless clearly stated otherwise at checkout.
Payments are processed by third-party payment providers. Those providers collect and process payment information according to their own privacy policies and PCI-DSS requirements. We receive limited transaction data (such as confirmation that payment succeeded and the plan purchased) to fulfill your order.
International data transfers
Headshot.ltd may process and store information in the United States and other countries where we or our providers operate. Data protection laws in those countries may differ from those in your jurisdiction. Where required, we implement appropriate safeguards for cross-border transfers.
Your rights & choices
Depending on where you live, you may have rights to access, correct, delete, or export personal information, or to object to or restrict certain processing. You can:
Update account details in your profile settings where available.
Request deletion of your photos or account by emailing us.
Opt out of non-essential marketing emails using the unsubscribe link in those messages.
Lodge a complaint with your local data protection authority if you believe we have handled your data improperly.
To exercise your rights, contact us at team@headshot.ltd. We may need to verify your identity before fulfilling a request.
Children's privacy
Headshot.ltd is not directed to children under 16, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us and we will delete it.
Changes to this policy
We may update this Privacy Policy from time to time. When we do, we will revise the "Effective date" at the top of this page and, for material changes, provide additional notice where appropriate. Your continued use of the service after changes take effect constitutes acceptance of the updated policy.
Contact us
If you have questions about this Privacy Policy or our data practices, email us at team@headshot.ltd.