Privacy Policy for AwesomeHeadshot.pro

AwesomeHeadshot.pro ("we," "us," or "our"), operated by a sole trader based in Colchester, UK, respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website awesomeheadshot.pro (the "Service"), an AI-powered headshot generator. By using the Service, you agree to the terms of this Privacy Policy.

We comply with the UK General Data Protection Regulation (UK GDPR), EU GDPR (for EU users), and other applicable laws. If you do not agree with this Privacy Policy, please do not access the Service.

1. Information We Collect

We collect the following data:

Personal Data

• Name and email address (for account creation, notifications, and support).
• Gender (optional, for headshot customization).
• Uploaded photos (selfies submitted for headshot generation; processed temporarily and deleted after use).
• Email and password (for account authentication).
• Payment information (handled securely by Stripe; we do not store card details).

Usage Data

• Automatically collected data, such as IP address, browser type, device information, pages visited, and time spent on the Service, via Google Analytics with IP anonymization enabled.
• Cookies and similar technologies for session management and analytics (see our Cookie Policy).

2. How We Use Your Information

We use your data to:

• Provide the Service (e.g., process selfies, generate 30 headshot options, allow download of 10).
• Process payments and send transaction confirmations via Stripe.
• Communicate about your account, updates, or support requests.
• Send promotional emails about new features or offers (if you opt in).
• Improve the Service via anonymized analytics (e.g., fixing bugs, optimizing user flow).
• Comply with legal obligations (e.g., UK GDPR, EU GDPR).

3. Legal Basis for Processing (UK GDPR/EU GDPR)

We process your data based on:

• Consent: For photo uploads, account creation, and marketing emails (you can withdraw consent anytime).
• Contract: To fulfill our agreement to provide headshots.
• Legitimate Interests: For analytics and service improvements, balanced with your privacy rights.

4. Sharing Your Information

We share your data only with:

• Third-Party Processors:
  • Replicate (AI processing for headshot generation).
  • Supabase (hosting and storage, potentially in the US).
  • Stripe (payment processing).
  • Google Analytics (anonymized analytics).
  These providers are bound by Data Processing Agreements to protect your data.
• Legal Authorities: If required by law or to protect our rights.

We do not sell your personal data.

5. Data Retention

• Uploaded Photos and Generated Headshots: Deleted within 30 days after download or session end, unless you opt to store them in your account. We'll email you 7 days before deletion to save or generate more.
• Account Data (Name, Email, Gender): Kept indefinitely while your account is active, unless you request deletion.
• Usage Data: Anonymized and retained for up to 12 months for analytics.
• Payment Data: Handled by Stripe; we retain only transaction IDs for 7 years per tax laws.

6. International Data Transfers

Your data may be transferred to the US (e.g., Supabase, Replicate servers). We ensure safeguards via:

• Data Processing Agreements with Standard Contractual Clauses.
• Explicit user consent during signup.

7. Your Rights (UK GDPR/EU GDPR and Others)

You have the right to:

• Access, correct, or delete your personal data.
• Restrict or object to processing.
• Data portability.
• Withdraw consent for marketing or data processing.
• Complain to a supervisory authority (e.g., UK ICO at www.ico.org.uk).

Contact us at support@awesomeheadshot.pro to exercise these rights. For California users (CCPA), you may request data deletion or opt out of data sharing.

8. Cookies

We use cookies for session management and analytics (via Google Analytics with IP anonymization). You can manage preferences via our cookie consent popup. See our Cookie Policy for details.

9. Security

We use industry-standard measures (e.g., encryption, secure servers via Supabase) to protect your data. However, no method is 100% secure.

10. Children's Privacy

The Service is for users 16 and older. We do not knowingly collect data from users under 16. If we learn we have, we'll delete it promptly.

11. Changes to This Privacy Policy

We may update this policy. Changes will be posted here with an updated date. Continued use constitutes acceptance.

12. Contact Us

For questions or to exercise your rights, contact:

• Email: support@awesomeheadshot.pro

This Privacy Policy complies with UK GDPR, EU GDPR, and best practices for SaaS apps.