HeadshotAI
Back to home

Privacy Policy

Last updated: April 2026

1. What we collect

When you use HeadshotAI we collect the following information:

  • Your email address (via Google sign-in or magic link)
  • The photos you upload for headshot generation
  • Payment information processed through Stripe (we never store card numbers)
  • Basic usage data such as which styles you selected

2. How we use your data

We use your data solely to provide and improve the HeadshotAI service:

  • To generate your AI headshots using Google Gemini Imagen
  • To send you your results and transactional emails
  • To process payments and issue receipts via Stripe
  • To maintain your account and order history if you are signed in

We do not sell your data to third parties or use it for advertising.

3. Third-party services

We rely on the following trusted third parties:

  • Cloudinary — temporary storage of your uploaded photos during generation
  • Google Gemini Imagen — AI processing to generate your headshots
  • Stripe — secure payment processing
  • Google OAuth — optional sign-in via your Google account

Each of these services has their own privacy policy governing how they handle data.

4. Photo storage and deletion

Your uploaded photos are stored temporarily on Cloudinary during the generation process. Generated headshots are available for download immediately after generation. We do not permanently store your original photos on our servers beyond what is needed to complete your order.

5. Cookies

We use session cookies only to maintain your authentication state when you are signed in. We do not use tracking cookies or third-party advertising cookies.

6. Your rights

You have the right to request access to, correction of, or deletion of your personal data. To exercise these rights, please contact us. We will respond within 30 days.

7. Changes to this policy

We may update this Privacy Policy from time to time. We will notify signed-in users of material changes by email. Continued use of the service after changes constitutes acceptance of the updated policy.