Privacy Policy

Last updated: July 28, 2026

This privacy policy ("policy") will help you understand how HeadshotsByAI ("us", "we", "our") uses and protects the data you provide to us when you visit and use HeadshotsByAI.com ("website", "service").

We reserve the right to change this policy at any given time, of which you will be promptly updated. If you want to make sure that you are up to date with the latest changes, we advise you to frequently visit this page.

What User Data We Collect

When you visit the website, we may collect the following data:

• Location
• Session duration
• Session time
• IP address
• Your name and email address.
• Data profile regarding your online behavior on our website.

Why We Collect Your Data

We are collecting your data for several reasons:

• To better understand your needs.
• To improve our services and products.
• To send you promotional emails containing the information we think you will find interesting.
• To contact you to fill out surveys and participate in other types of market research.

Safeguarding and Securing the Data

HeadshotsByAI.com is committed to securing your data and keeping it confidential. HeadshotsByAI.com has done all in its power to prevent data theft, unauthorized access, and disclosure by implementing the latest technologies and software, which help us safeguard all the information we collect online.

Our Cookie Policy

Once you agree to allow our website to use cookies, you also agree to use the data it collects regarding your online behavior (analyze web traffic, web pages you spend the most time on, and websites you visit).

The data we collect by using cookies is used to customize our website to your needs. After we use the data for statistical analysis, the data is completely removed from our systems.

Please note that cookies don't allow us to gain control of your computer in any way. They are strictly used to monitor which pages you find useful and which you do not so that we can provide a better experience for you.

If you want to disable cookies, you can do it by accessing the settings of your internet browser.

Links to Other Websites

Our website contains links that lead to other websites. If you click on these links HeadshotsByAI is not held responsible for your data and privacy protection. Visiting those websites is not governed by this privacy policy agreement. Make sure to read the privacy policy documentation of the website you go to from our website.

Restricting the Collection of your Personal Data

At some point, you might wish to restrict the use and collection of your personal data. You can achieve this by doing the following:

When you are filling the forms on the website, make sure to check if there is a box which you can leave unchecked, if you don't want to disclose your personal information.

If you have already agreed to share your information with us, feel free to contact us via email and we will be more than happy to change this for you.

HeadshotsByAI does not sell your personal information. We disclose information to service providers only when necessary to operate the service, fulfill your requests, protect the service, or comply with the law. These providers include hosting, cloud storage, database, payment, email, analytics, and artificial-intelligence processing providers.

Google Photos and Google User Data

When you choose "Import from Google Photos," HeadshotsByAI uses the Google Photos Picker API and requests the photospicker.mediaitems.readonly permission.

Data we access

HeadshotsByAI accesses only the photos that you explicitly select in the Google Photos Picker. We do not access or scan your complete Google Photos library. We also temporarily access limited information needed to validate and import selected photos, such as file name, media type, file size, dimensions, and creation information.

How we use Google user data

Selected photos are used only to:

• Import the photos into your HeadshotsByAI account;
• Validate and prepare them for processing;
• Train an AI model personalized specifically to you; and
• Generate the AI headshots that you request.

Google Photos data is not used to train or improve a generalized, shared, or non-personalized artificial-intelligence model. It is not used for advertising, retargeting, credit decisions, data brokerage, or any purpose unrelated to the HeadshotsByAI features requested by the user.

Aggregated, anonymized, and derived data

HeadshotsByAI does not create, access, use, or disclose aggregated or anonymized datasets from Google Photos user data. Data derived from selected Google Photos is limited to the specific user's personalized AI model and the headshots that user requests. We do not combine Google Photos data or its derivatives across users, and we do not use it to create, train, or improve generalized or shared AI models.

Service providers and disclosures

To provide the requested import, storage, personalized model training, and headshot-generation features, we disclose selected photos and related data only to service providers acting on our behalf:

• Vercel, for application hosting and request processing;
• Cloudflare R2, for image storage;
• Supabase, for database and storage services; and
• fal.ai, for personalized AI-model training and headshot generation.

These providers may process Google user data only as needed to provide the user-facing HeadshotsByAI features requested by the user. We do not sell Google user data or disclose it to advertising platforms, data brokers, or information resellers.

We may also disclose information when required by law, to investigate security incidents or abuse, or as part of a corporate transaction after obtaining any consent required by Google's policies and applicable law.

How we protect Google user data

Google user data is transmitted using HTTPS/TLS and is protected at rest using the security controls and encryption provided by our storage and database providers. Access to imported photos and related data is limited through authentication and access controls to the user who imported them and to authorized systems and service providers that need the data to deliver the requested HeadshotsByAI features.

Google OAuth access tokens are kept only in temporary application memory during the active import flow and are not persistently stored. Requests to import selected media require both an authenticated HeadshotsByAI session and the temporary Google access token. We do not intentionally include Google access tokens, Google Photos Picker session links, media download URLs, or raw Google provider responses in application logs or analytics.

The use of information received from Google Photos APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Retention and deletion

Google OAuth access tokens are held only temporarily during the active import session. HeadshotsByAI does not persistently store Google Photos access tokens or Google Photos refresh tokens. Google Photos Picker sessions and temporary previews are deleted or released after completion, cancellation, or timeout.

Copies of photos imported from Google Photos and their associated metadata are retained while they remain in your HeadshotsByAI account and are needed to provide the requested service. You may delete an individual source photo or photo group from the Photos section of your account.

If selected photos have already been used to create a personalized model or generated headshots, related training files, the personalized model, and generated results may be retained while the associated gallery or account remains active. Google Photos data is never used to train a model beyond the specific user's personalized model.

You may delete your account from the Account page or request deletion by emailing support@headshotsbyai.com. Account deletion initiates deletion of associated Google Photos imports and related data from HeadshotsByAI's active databases and storage systems. Limited information may be retained when required for security, fraud prevention, legal compliance, or dispute resolution.