Privacy Policy

Information We Collect

• Account Information: When you sign in (e.g., via Google), we receive basic profile information such as your name, email address, and profile image as provided by your identity provider.
• Content You Upload: Images and related prompts or selections you submit to generate headshots, along with generated outputs and related metadata.
• Usage Data: Log data, device information, approximate location (based on IP), and interactions with the Services used for analytics and service improvement.
• Payment Information: Payments are processed by our third‑party provider (e.g., Stripe). We do not store full payment card details. We may receive limited information related to your purchase (e.g., subscription status).
• Cookies and Similar Technologies: We use cookies/local storage to maintain sessions, remember preferences, and analyze usage.

How We Use Information

• Provide, operate, and improve the Services.
• Process transactions and manage subscriptions.
• Personalize features (e.g., remember your preferences).
• Monitor usage, detect, prevent, and address technical issues.
• Communicate with you about updates, security, and support.
• Comply with legal obligations and enforce our terms.

Legal Bases (EEA/UK)

If you are in the EEA/UK, we process personal data under these legal bases: to perform a contract (provide the Services), with your consent (where required), for our legitimate interests (e.g., security, analytics), and to comply with legal obligations.

Sharing of Information

We share information with third parties that help us operate and improve the Services, including:

• Cloud and Storage Providers(e.g., AWS or similar) to host and store images and data.
• Payment Processors (e.g., Stripe) to process payments and manage subscriptions.
• AI/Generation Vendors (e.g., model providers) to generate outputs from your uploaded content.

We may also share information to comply with laws, protect rights, or in connection with a business transaction (e.g., merger, acquisition).

Data Retention

We retain information as long as necessary to provide the Services, comply with legal obligations, resolve disputes, and enforce our agreements. You may request deletion of your account‑associated content, subject to certain exceptions.

Security

We take reasonable technical and organizational measures designed to protect your information. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

International Transfers

Your information may be processed in countries other than your own. Where required, we use appropriate safeguards to protect your information in connection with such transfers.

Your Rights

Depending on your location, you may have rights to access, correct, delete, or restrict the use of your personal information, and to object to processing or request portability. You may also withdraw consent where we rely on consent.

To exercise your rights, contact us using the details below. We may request verification of your identity before responding.

Children’s Privacy

The Services are not directed to children under 13 (or the age of digital consent in your country). We do not knowingly collect personal information from children. If you believe a child has provided us personal information, please contact us.

Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated version and revise the "Last updated" date above. Your continued use of the Services indicates your acceptance of the updated policy.

Contact Us

If you have questions about this Privacy Policy or our practices, contact us at contact@depthra.com.