Privacy Policy

BusinessHeadshots.ai (“we”, “us”) turns your selfies into professional headshots. Because our whole product is built around photos of your face, we keep this policy short, plain, and honest. The one-sentence version: your photos are used to generate your headshots - nothing else - and we never sell your data.

What we collect

• Account details - your email address, an optional name, and a password (stored only as a secure hash; we cannot see it).
• Your photos - the selfie you upload for your free preview and the reference photos (front, left, right) you add to your profile.
• Generated images - the headshots we create for you, saved to your private gallery.
• Payment records - payments are processed by Stripe. Your card details go directly to Stripe and never touch our servers; we keep only the purchase record (amount, credits, date).
• Technical data - IP addresses (used for abuse prevention and rate limiting) and essential cookies (see below).

How your photos are processed

To generate a headshot, your reference photo(s) and your chosen style options are sent over an encrypted connection to fal.ai, which hosts the Seedream image model built by ByteDance. That is the only AI provider we send your photos to. It is used under API terms that do not permit your content to be used to train their models. We do not use your photos to train any models, we do not use them in our marketing unless you have expressly opted in to be featured (see below), and we do not share them with anyone except the processors needed to run the service.

What we never do

• We never sell or rent your personal data or photos.
• We never use your photos for advertising or model training, unless you have expressly opted in to be featured.
• We never run third-party ad trackers on this site.

Featured customers

If you expressly accept our featured-customer offer, you license us to show your before-and-after photos, first name and LinkedIn profile in our marketing and on social media. When you accept, we keep our own copies of those photos together with a record of your consent (your name, email address, IP address, the exact wording you agreed to, and when), and this record and the copies are retained even if you later delete your account, because they are the proof of the licence. You can withdraw at any time by emailing [email protected]; we will take down published posts and delete the copies. None of this applies unless you ticked the featured-customer consent box.

Cookies

We use essential cookies only: one that keeps you signed in, and one anonymous identifier that remembers your free preview before you create an account. No analytics or advertising cookies.

Storage and retention

Your photos and generated headshots are stored securely for as long as your account is active, so your gallery stays available to you. You can replace your reference photos at any time - replaced photos are no longer used for generation. Purchase records are retained as required for accounting and tax purposes.

Who we share data with

Only the processors required to operate the service: fal.ai (image generation), Stripe (payments), Resend (email), and our hosting provider (infrastructure). Each receives only what it needs to perform its function.

Your rights

You can access, correct, export, or delete your data - including every photo and generated image - at any time by emailing [email protected]. Account deletion removes your photos and gallery permanently, except copies of photos you have expressly licensed us to feature and the consent record behind them, which are kept until you withdraw that consent (see Featured customers above). Depending on where you live, these rights may be backed by laws such as the GDPR or CCPA; we honour them for everyone regardless of location.

Security

All traffic is encrypted in transit (HTTPS). Passwords are hashed with bcrypt. Access to your images is restricted to your account. No system is perfectly secure, but if we ever become aware of a breach affecting your data, we will notify you promptly.

Children

The service is not intended for anyone under 16, and we do not knowingly collect data from children.

Changes

If we make material changes to this policy, we'll update the date above and, for significant changes, notify you by email or an in-app notice.

Contact

Questions about privacy? Email [email protected].