Privacy Policy
Last updated: Last updated: October 22, 2026
Table of Contents
Introduction
At ProfessionalHeadshot.io, we take your privacy seriously. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our AI photo generation service.
By using our Service, you agree to the collection and use of information in accordance with this policy.
Information We Collect
We collect the following types of information:
Personal Information
- Email address (for account creation and communication)
- Name (optional, for personalization)
- Payment information (processed securely through Clink or PayPal; Stripe for earlier transactions)
Photos
- Photos you upload for AI model training
- Generated AI photos from our service
- Metadata associated with uploaded photos (file size, format)
Usage Data
- IP address and browser information
- Pages visited and features used
- Time and date of visits
- Diagnostic and performance data
How We Use Your Information
We use your information for the following purposes:
- Service Delivery: To train AI models and generate your photos
- Account Management: To create and maintain your account
- Payment Processing: To process transactions securely
- Customer Support: To respond to inquiries and resolve issues
- Service Improvement: To analyze usage patterns and enhance our platform
- Communication: To send order confirmations, updates, and important notices
Photo Upload and Processing
Your photos are handled with the utmost care and security.
What We Do:
- Send photos over encrypted (HTTPS) connections
- Use your photos only to train your own private AI model and generate your headshots
- Delete your uploaded selfies as soon as your model finishes training
- Share photos only with the processors listed under Third-Party Services, solely to run the Service
- Never use your photos to train models for other users
What We Don't Do:
- Sell or license your photos to third parties
- Use your photos for marketing without permission
- Share your photos on social media or public galleries
- Include your photos in our general AI training datasets
Photo Safety FAQ
Are AI headshot generators safe to use?
It depends on what the service does with your selfies. At ProfessionalHeadshot.io your photos are used only to train your own private AI model and generate your headshots. They are never sold, never used in marketing without your permission, and never used to train models for other people.
How long do you keep my uploaded selfies?
We delete your uploaded selfies as soon as your AI model finishes training and headshot generation begins. If you upload photos but never start an order, they are deleted automatically after 30 days.
Where are my photos stored?
Photos are stored on Cloudflare R2, which encrypts stored files at rest, and every transfer uses HTTPS. Each photo sits at a long, random, unlisted link that we never publish. Your trained AI model is kept in separate private storage that only our backend can read.
Who else can see my photos?
Only the processors needed to run the service: Replicate trains your model and runs our photo quality check, and fal.ai generates your headshots from your model. If you use Photo Studio features, the photos you pick are processed by Kie.ai. We do not share your photos with anyone else.
Are my photos used to train AI for other people?
No. Each customer gets a separate private model that is trained only on their own selfies. Your photos are never added to a shared training dataset.
Can I delete my photos and AI model?
Yes. Deleting a project in your dashboard removes its photos right away. To delete your whole account, including your AI model, email support@professionalheadshot.io.
Data Storage and Security
We use the following measures to protect your data:
- Photo Storage: Photos are stored on Cloudflare R2. Cloudflare encrypts stored files at rest, and all transfers use HTTPS.
- Unlisted Links: Each photo is served from a long, random, unlisted URL. We don't publish these links, but anyone who has a photo's exact link can open it, so don't share your links if you want to keep a photo private.
- Private Models: Your trained AI model is kept in private storage that only our backend can read.
- Account Data: Account and order records are stored in a managed PostgreSQL database (Neon).
- Access Controls: Limited staff access on a need-to-know basis
Third-Party Services
We use the following third-party services:
Clink, PayPal and Stripe (Payment Processing)
New card and wallet checkouts are processed by Clink. PayPal processes purchases made through our separate PayPal option, and Stripe continues to handle earlier transactions. We never store your full credit card details on our servers. See Clink's Privacy Policy.
Replicate (AI Training and Processing)
Your selfies are sent to Replicate to train your private AI model. Replicate also runs our photo quality check, which uses an OpenAI vision model hosted on Replicate, and some photo editing features. Files sent to Replicate are kept according to Replicate's own data retention policy.
fal.ai (Headshot Generation)
fal.ai runs your private model to generate your headshots. It receives your trained model and returns the generated photos. It does not receive your original selfies.
Kie.ai (Photo Studio Features)
If you use Photo Studio features such as outfit try-on or scene changes, the photos you choose for that feature are sent to Kie.ai for processing.
Cloudflare R2 and Neon (Storage)
Photos are stored on Cloudflare R2. Account and order data are stored in a Neon PostgreSQL database.
Resend (Email)
We use Resend to send account and order emails. It receives your email address.
Analytics
We use Google Tag Manager to load analytics tools, plus our own first-party page-view tracking. We do not record which search terms or referring pages brought you to the site. You can block analytics with browser extensions or privacy settings.
Data Retention
- Uploaded Selfies: Deleted as soon as your model finishes training. If you upload photos but never start an order, they are deleted automatically after 30 days.
- Training Archives: The bundle of selfies we prepare for training is deleted automatically after 30 days.
- Deleted Photos: Photos you delete from your dashboard are permanently removed within 30 days.
- Generated Headshots: Kept in your dashboard so you can download them again, until you delete the project or ask us to delete your account. Deleting a project removes its photos immediately.
- Your AI Model: Kept so you can generate more headshots later. We delete it when you ask us to delete your account.
- Account Data: Retained while your account is active
- Payment Records: Kept for 7 years for tax and legal compliance
To permanently delete your account, AI model and all photos, email support@professionalheadshot.io.
Your Rights
You have the following rights regarding your personal data:
- Access: Request a copy of all data we hold about you
- Rectification: Correct any inaccurate or incomplete information
- Deletion: Delete a project and its photos yourself from your dashboard, or email us to delete your account, AI model and all associated data
- Data Portability: Receive your data in a machine-readable format
- Opt-Out: Unsubscribe from marketing communications at any time
To exercise these rights, contact us at support@professionalheadshot.io
Changes to Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes via email or through the Service.
Continued use of the Service after changes are posted constitutes acceptance of the updated policy.
Contact Us
If you have questions about this Privacy Policy or your data, please contact us:
support@professionalheadshot.io