Privacy Policy

1. Who we are

AIHeadshotLab ("we," "us," "our") operates aiheadshotlab.com and dashboard.aiheadshotlab.com (the "Service"), which generates AI headshots from photos you upload. This policy explains what information we collect, why, and who else handles it on our behalf. Our legal entity is [COMPANY LEGAL NAME], [COMPANY ADDRESS].

2. What we collect

• Account information: your email address, used to sign you in via a passwordless "magic link" (we never see or store a password).
• Photos you upload ("samples"): the reference photos you provide to train your AI model.
• AI-generated headshots ("images"): the output photos our AI processing partner generates from your samples.
• Payment information: if you purchase credits, payment is processed entirely by Stripe. We never receive or store your full card number — we only receive confirmation that a payment succeeded and how many credits it corresponds to.
• Usage and operational logs: technical records of key events (e.g. a training request succeeding or failing) used for troubleshooting and reliability, which may include your user ID and email.
• Cookies: a session cookie to keep you signed in, and cookies set by Stripe during checkout. We do not use advertising or cross-site tracking cookies.

3. How we use it

We use your information solely to:

• Train an AI model on your uploaded photos and generate headshots from it;
• Process credit purchases and maintain your account balance;
• Email you when your headshots are ready;
• Diagnose and fix problems with the Service;
• Comply with legal obligations (e.g. tax/accounting records for payments).

We do not sell your data or use your photos to train models for anyone else.

4. Who we share it with

We use the following service providers ("subprocessors") to operate the Service. Each only receives the data it needs to perform its function:

• Astria (astria.ai) — receives your uploaded photos to train the AI model and generate headshots. This is the core of the Service and cannot be disabled.
• Supabase — hosts our database and handles authentication.
• Vercel — hosts the application and stores your uploaded photos (via Vercel Blob) until they're deleted per our retention policy below.
• Stripe — processes payments if you purchase credits.
• Resend — delivers the "your headshots are ready" email, if configured.

We do not share your photos or account information with any other third party, and we don't sell personal information.

5. Data retention

Uploaded photos and AI-generated headshots are automatically deleted from our own storage 30 days after your project is created — this happens automatically, you don't need to request it. Your account and project history remain visible after that; only the photo files themselves are removed.

Astria, our AI processing partner, separately retains data on its own platform per its own policy (at the time of writing, also up to 30 days) — [CONFIRM CURRENT ASTRIA RETENTION POLICY DIRECTLY WITH ASTRIA BEFORE PUBLISHING THIS PAGE, THEIR TERMS MAY CHANGE]. Billing records are retained as required for tax and accounting purposes.

You can request deletion of your account and all associated data sooner by emailing support@aiheadshotlab.com.

6. Your rights

You can request access to, correction of, or deletion of your personal information at any time by emailing support@aiheadshotlab.com. [ADD ANY JURISDICTION-SPECIFIC RIGHTS LANGUAGE HERE IF YOU LATER SERVE EU/UK/CA USERS — E.G. GDPR OR CCPA — ONCE THAT APPLIES TO YOU.]

7. Children's privacy

The Service is not directed to anyone under 18. We do not knowingly collect information from children.

8. Changes to this policy

We may update this policy from time to time. We'll update the "Last updated" date above when we do.

9. Contact

Questions about this policy? Email support@aiheadshotlab.com.