Privacy Policy

1. Introduction

AIHeadshotGen ("we," "our," or "us") operates the website aiheadshotgen.com and provides AI-powered headshot generation services. This Privacy Policy explains how we collect, use, protect, and disclose your information when you use our service, including our professional headshot generation and image processing tools.

2. Information We Collect

2.1 Photos and Generated Content

• Original Photos: Images you upload for AI headshot generation
• Generated Images: AI-created professional headshots
• Processing Metadata: Basic technical data about image processing
• Temporary Storage: Images are stored temporarily for processing and automatically deleted

2.2 Account and Contact Information

• Email Address: For account creation and service communication
• Name: For billing and account identification (when provided)
• Authentication Data: Login credentials and session information
• Support Communications: Messages and support requests

2.3 Payment and Financial Information

• Billing Information: Name, billing address, and invoice details
• Payment Methods: Last 4 digits of payment cards for identification
• Transaction Records: Payment history and transaction details
• Subscription Data: Plan details and billing cycles

2.4 Technical and Usage Information

• Device Information: Browser type, operating system
• Network Data: IP address for security and functionality
• Usage Analytics: Pages visited, features used
• Error Logs: Technical errors for service improvement

3. How We Use Your Information

3.1 Service Provision

• Core Services: Generate professional AI headshots
• Account Management: Maintain user accounts and preferences
• Customer Support: Provide assistance and resolve issues
• Service Delivery: Deliver generated images

3.2 Payment Processing and Billing

• Transaction Processing: Process payments for services
• Billing Management: Generate invoices and manage subscriptions
• Refund Processing: Handle refund requests when applicable
• Fraud Prevention: Basic fraud detection and prevention

3.3 Legal and Compliance

• Legal Requirements: Comply with applicable laws and regulations
• Records Keeping: Maintain necessary business records
• Legal Requests: Respond to valid legal processes

3.4 Service Improvement

• Analytics: Analyze usage patterns to improve the service
• Performance Monitoring: Monitor service performance
• Feature Development: Develop new features and improvements

3.5 What We DON'T Do

4. Data Security and Protection

4.1 Payment Security

• Third-Party Processors: Stripe and PayPal handle payment data securely
• No Card Storage: We do not store complete credit card information
• Encrypted Transmission: All payment data is transmitted using HTTPS/SSL
• Tokenization: Payment processors use tokenization for card data

4.2 Data Protection Measures

• HTTPS Encryption: All data transmission is encrypted
• Secure Storage: Data at rest is protected with encryption
• Access Controls: Limited access to personal data on need-to-know basis
• Regular Updates: We keep our systems updated with security patches

4.3 Temporary Storage and Deletion

All uploaded photos and generated images are stored temporarily for processing purposes only. Images are automatically deleted after processing is complete. This ensures your visual data is not permanently stored on our systems.

5. Data Sharing and Third Parties

5.1 Payment Processors

• Stripe: Payment processing for credit card transactions
• PayPal: Alternative payment method processing

5.2 Service Providers

• Cloud Infrastructure: Secure hosting and infrastructure providers
• Analytics Services: Website analytics for service improvement
• Email Services: Transactional email delivery

5.3 Legal Requirements

• Legal Compliance: When required by valid legal process
• Safety and Security: To protect our users and service

6. Your Privacy Rights

6.1 GDPR Rights (European Union)

• Right to Access: Request information about your personal data
• Right to Rectification: Correct inaccurate information
• Right to Erasure: Request deletion of your data
• Right to Data Portability: Receive your data in a portable format
• Right to Object: Object to certain data processing

6.2 California Privacy Rights (CCPA)

• Right to Know: Information about personal data collection
• Right to Delete: Request deletion of personal information
• Right to Opt-Out: We don't sell personal information
• Right to Non-Discrimination: Equal service regardless of privacy choices

6.3 How to Exercise Your Rights

7. Cookies and Tracking

7.1 Essential Cookies

• Session Management: Maintain user sessions
• Security: Security features and CSRF protection
• Functionality: Remember user preferences

7.2 Analytics Cookies

• Google Analytics: Website usage analytics (anonymized)
• Performance Monitoring: Service performance tracking

7.3 Cookie Control

You can control cookies through your browser settings. Note that disabling essential cookies may affect service functionality.

8. Children's Privacy

Our service is not intended for individuals under 18 years of age. We do not knowingly collect personal information from anyone under 18. If you believe a child has provided personal information to us, please contact us at support@aiheadshotgen.com.

9. Data Retention

9.1 Account Deletion

When you delete your account:

• Account data is removed from active systems
• Email address is removed from our mailing systems
• Payment records are retained only as required by law
• Analytics data is anonymized

10. International Data Transfers

Your data may be processed in different countries. We take appropriate measures to ensure your data remains protected, including:

• Adequate Protections: We ensure appropriate safeguards are in place
• Service Provider Agreements: Contractual protections with all processors
• Industry Standards: Following recognized international standards

11. Security Incidents

In the event of a security incident that affects your personal data, we will:

• Take immediate steps to contain and assess the incident
• Notify relevant authorities as required by law
• Inform affected users if required by law or if there is significant risk
• Take steps to prevent similar incidents

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or through our website. Your continued use of our service after changes constitutes acceptance of the updated policy.

13. Contact Information

For questions about this Privacy Policy, please contact us:

14. Legal Compliance

This Privacy Policy is designed to comply with applicable privacy laws, including:

• GDPR: General Data Protection Regulation (European Union)
• CCPA: California Consumer Privacy Act
• Other Local Laws: Applicable privacy laws in jurisdictions where we operate