Photographs of your face.

The photographs you upload. Reference pictures of a person, and a garment image if you try one on. They are stored privately, which means the storage refuses a request that does not carry a signed link, and the links this site hands your browser expire.

The photographs this site makes from them. Same storage, same rule.

Your email address, because an account needs one, and a record of your credits and the jobs you ran, because that is what a balance is.

Not your card. Payment goes to Stripe, which is the seller of record for anything bought here. Card numbers never reach this site.

Not your IP address either, only a scrambled label made from it. When a free photograph is made, the address it came from is put through a keyed one-way function and the result is stored on that job. It cannot be turned back into an address, it matches nothing outside this site, and rotating our key makes every stored label meaningless. It exists for one purpose: to stop one person taking the whole day’s free allowance and leaving nothing for anyone else.

To make the photographs you asked for, to keep your account and your balance, and to answer you when you write in. The legal basis is the contract between us: you cannot be sent a photograph of yourself without a photograph of yourself.

Three things this site does not do, stated because the category is full of products that do. Your photographs are not used to train any model. They are not shown to anyone else, sold, or used to advertise this product. No face recognition runs on them, and nothing here tries to work out who you are.

Your photographs stay until you delete them or delete your account. There is no timer that quietly removes what you paid for, and there is no archive kept after you ask for it to go.

An upload that never finished, because a tab closed or a connection dropped, is deleted within the hour by a job that exists for exactly that.

Delete a photograph from your gallery and it is gone. Delete the account, on your account page, and everything goes with it: the photographs, the people you uploaded, the credits, the account itself. You confirm by a link sent to your address, and it cannot be undone.

A running subscription is stopped at the same time so that it cannot renew. Stripe keeps its own record of what was paid, because a payment record is not ours to delete.

You can also ask for a copy of what is held, ask for a correction, or object to any of it, by writing to support@headshotstudioai.com. If you are in the EU or the UK and you think this has been handled badly, you can complain to your national data protection authority.

One, and it is the one that keeps you signed in. Nothing here follows you to other sites, and there is no advertising network on any page, which is why this site has never shown you a consent banner.

Visits to the public pages are counted, by Vercel Web Analytics, and it sets no cookie of any kind. What it records is the page, where the link came from, the country and city, and which browser and device: enough to know that a hundred people read the pricing page and two of them came from the same forum. It stores no identifier that could follow you here from anywhere else.

The signed-in pages are excluded outright rather than merely anonymised, because their addresses carry things worth protecting: the page for one of your uploaded people has that person’s identifier in it. Nothing from behind the sign-in is counted at all.