Last updated: December 3, 2024
TL;DR: We only collect what we need to provide our service. Your photos are encrypted, never
shared with third parties, and you can delete them anytime. We don't sell your data.
1. Information We Collect
Personal Information
When you create an account with SharpPersona, we collect:
- Email address (for account creation and communication)
- Name (optional, for personalization)
- Payment information (processed securely through our payment providers)
Photos and Generated Content
To provide our AI headshot service, we collect and process:
- Photos you upload to generate headshots
- AI-generated headshots we create for you
- Metadata associated with your photos (upload time, generation settings)
Usage Information
We automatically collect certain information about how you use our service:
- Device information (browser type, operating system)
- Usage patterns (features used, time spent)
- Technical data (IP address, cookies for functionality)
2. How We Use Your Information
We use your information solely to:
- Provide our service: Generate AI headshots from your photos
- Account management: Create and maintain your account
- Customer support: Respond to your questions and issues
- Service improvement: Analyze usage to improve our AI models and user experience
- Communication: Send important service updates (not marketing, unless you opt-in)
3. Photo Security and Storage
Your photos are secure: All uploaded and generated photos are encrypted both in transit and at
rest using industry-standard AES-256 encryption.
Storage Duration
- Original photos: Stored for 30 days after upload, then automatically deleted
- Generated headshots: Stored permanently until you request account deletion
- Account data: Retained until you request deletion
Access Controls
- Only authorized personnel can access photo storage systems
- All access is logged and monitored
- Photos are never used for training our AI models without explicit consent
4. Information Sharing
We do not sell, rent, or share your personal information or photos with third parties, except in
these limited circumstances:
Service Providers
We work with trusted service providers who help us operate our service:
- Cloud hosting: Secure servers for storing and processing data
- Payment processing: Stripe and PayPal for handling payments
- Email service: For sending account-related communications
All service providers are bound by strict confidentiality agreements and can only use your data to provide
services to us.
Legal Requirements
We may disclose information if required by law, such as:
- Responding to valid legal requests (subpoenas, court orders)
- Protecting our rights and property
- Ensuring user safety and preventing fraud
5. Your Rights and Controls
Data Access and Portability
- View all personal data we have about you
- Download your generated headshots
- Request a copy of your data in a portable format
Data Deletion
- Delete individual photos anytime from your account
- Request complete account deletion
- All data is permanently deleted within 30 days of your request
Communication Preferences
- Opt out of marketing emails (service emails will continue)
- Update your communication preferences in account settings
6. Cookies and Tracking
We use cookies and similar technologies for:
- Essential functionality: Keeping you logged in, remembering preferences
- Analytics: Understanding how our service is used (anonymized data)
- Performance: Optimizing loading times and user experience
You can control cookies through your browser settings, but some features may not work properly if disabled.
7. International Data Transfers
Your data may be processed in countries other than your own. We ensure adequate protection through:
- Standard contractual clauses approved by data protection authorities
- Adequacy decisions for countries with equivalent privacy laws
- Certification schemes like Privacy Shield successors
8. Data Retention
We retain your information only as long as necessary:
- Account data: Until you delete your account
- Original photos: 30 days maximum
- Generated photos: Until you request account deletion
- Usage logs: 12 months for security and improvement purposes
9. Children's Privacy
SharpPersona is not intended for users under 18. We do not knowingly collect personal information from children.
If we discover we have collected information from a child, we will delete it immediately.
10. Security Measures
We implement comprehensive security measures:
- Encryption: All data encrypted in transit and at rest
- Access controls: Multi-factor authentication for all staff
- Regular audits: Security assessments and penetration testing
- Incident response: Procedures for handling any security issues
11. Changes to This Policy
We may update this privacy policy to reflect changes in our practices or legal requirements. We will:
- Notify you of significant changes via email
- Post the updated policy on our website
- Update the "Last modified" date at the top
12. Contact Us
If you have questions about this privacy policy or our data practices:
Questions about your data? We're here to help. Contact us anytime about your privacy rights or
how we handle your information.