Privacy Policy | HeadshotPhoto AI Headshot Generator

Last updated: 22 September 2026

At Headshot Photo, a product of BitQit Private Limited, we are committed to protecting your privacy and ensuring the security of your personal data. This Privacy Policy outlines the types of personal information we collect, how we use and share this information, and the choices you have regarding our use of your information.

This Privacy Policy applies to the Headshot Photo website at www.headshotphoto.io and to the Headshot Photo application at app.headshotphoto.io, together referred to as "Headshot Photo", "our Website", "our app" or "our services".

By using our services, you agree to the collection and use of information as described in this Privacy Policy.

1. Information We Collect

We collect several types of information to provide and improve our services to you:

1.1 Personal Information

When you use our AI-generated headshot service, we may collect:

Contact Information: Such as your name, email address, and phone number.
Account Information: The details needed to create and secure your account. If you create your account with "Sign in with Google", this information comes from your Google Account — see section 4 below for exactly what we receive and how we use it.
Payment Information: Billing details, including credit card numbers, for processing transactions securely.
Uploaded Images: Photos that you upload to generate headshots using our AI tool.

1.2 Usage Information

We collect information about how you interact with our Website, including:

IP address and browser type.
Pages you visit and actions you take on the Website.
Device information such as operating system and browser settings.

2. How We Use Your Information

We use the information we collect for the following purposes:

2.1 To Provide Our Services

Process your orders and transactions.
Generate and deliver AI-powered headshots based on your uploaded images.
Customize and improve your experience on our Website.

2.2 To Communicate with You

Send updates on your orders, service changes, or new features.
Respond to your inquiries and provide customer support

2.3 For Marketing Purposes

With your consent, we may use your contact information to send promotional offers or product updates. You can opt-out of marketing communications at any time by following the unsubscribe instructions provided in the emails.

2.4 For Security and Legal Purposes

To protect our Website, business, and users from fraud, malicious activity, and unauthorized access.
To comply with legal obligations and protect our legal rights.

We do not sell or rent your personal information to third parties. However, we may share your information with trusted third parties as described below:

3.1 Service Providers

We use third-party service providers to facilitate our services, such as:

Payment Processors: For secure payment transactions.

Cloud Storage Providers: To store and process your uploaded images.

All service providers are contractually obligated to protect your information and use it only for the purpose of providing services to Headshot Photo.

3.2 Legal Requirements

We may disclose your personal information if required by law or to respond to valid legal requests, including court orders or government regulations.

4. Signing In with Google (Google User Data)

Headshot Photo offers "Sign in with Google" as one optional way to create and access your account. Using it is entirely your choice — you can also create an account with an email address instead. This section describes exactly what data we receive from your Google Account, how we use it, who we share it with, how we protect it, and how long we keep it.

4.1 What Google user data we access

When you choose to sign in with Google, we ask Google only for the basic sign-in scopes openid, userinfo.email and userinfo.profile. Through these scopes we receive:

Your Google Account identifier (a unique ID used to recognise your account).
Your primary Google email address and whether Google has verified it.
Your basic profile details: display name, given and family name, profile picture URL and locale.

We do not request, receive or store data from Gmail, Google Drive, Google Photos, Google Calendar, Google Contacts, or any other Google service. We never receive your Google password.

4.2 How we use Google user data

We use the Google user data listed in section 4.1 only to provide and improve the user-facing features of Headshot Photo, specifically to:

Create your Headshot Photo account and sign you in on return visits.
Identify your account and link it to your orders and generated headshots.
Send you transactional messages such as order confirmations and headshot delivery notifications, and respond to your support requests.
Detect and prevent fraud, abuse and unauthorised access to your account.

We do not use Google user data for advertising or ad targeting, we do not sell or rent it, and we do not use it to train AI models. Your Google profile picture is not used to generate headshots; headshots are generated only from photos you deliberately upload.

We do not sell, rent or transfer Google user data to third parties for advertising, resale, credit assessment or any purpose unrelated to running Headshot Photo. Google user data is shared only with:

Our authentication provider (Clerk), which operates the sign-in flow and stores your account record on our behalf.
Our transactional email provider, which delivers account and order emails to your Google email address.

These providers act as our processors under contract, may use the data only to provide services to Headshot Photo, and may not use it for their own purposes. We may also disclose Google user data where we are legally required to, as described in section 3.2 (Legal Requirements) above.

4.4 How we protect Google user data

Google user data is encrypted in transit using TLS and encrypted at rest. OAuth tokens issued by Google are stored in encrypted form, are never exposed to other users, and are used only for the purposes described in section 4.2. Access by our staff is restricted to the personnel who need it to operate the service and provide support.

4.5 How long we keep Google user data, and how to delete it

We keep Google user data for as long as your Headshot Photo account is active.
You can disconnect Headshot Photo from your Google Account at any time at myaccount.google.com/permissions. This revokes our access to your Google Account for the future.
You can ask us to delete your account and the associated Google user data by emailing hello@headshotphoto.io. We delete it from our production systems within 30 days of the request, and from encrypted backups within a further 90 days, except where we are required by law to retain a record (for example, tax and invoicing records).

4.6 Limited Use

Headshot Photo's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

5. Training Data & Image Retention

We do not use your uploaded images to train our AI models.
Training images are automatically deleted from our servers within 7 days after headshots are successfully generated.
You may delete your generated headshots at any time directly from your account.
You retain full ownership and intellectual property rights over the headshots generated for you.

6. Your Rights

Depending on your location, you may have the following rights regarding your personal information:

Access: Request a copy of the personal information we hold about you.
Correction: Request corrections to any inaccurate information.
Deletion: Request the deletion of your personal information.
Opt-Out: Opt-out of marketing communications at any time.

To exercise these rights, please contact us at hello@headshotphoto.io

7. Security

We take data security seriously and use industry-standard measures to protect your information from unauthorized access, disclosure, or destruction. This includes encryption of sensitive data such as payment information.

Despite these efforts, no method of transmission over the Internet or electronic storage is completely secure. Therefore, while we strive to protect your personal information, we cannot guarantee its absolute security.

8. Children's Privacy

Our services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children under 18. If you believe that we have inadvertently collected information from a minor, please contact us immediately, and we will take steps to delete such information.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Last updated" date, and we will notify you via email or other methods if there are significant changes, including any change to how we access, use, store or share Google user data. Please review this Privacy Policy periodically for any updates.

10. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at: hello@headshotphoto.io