Privacy Policy

1. Introduction

GetProStudio ("we," "our," or "us") respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered professional headshot generation service and website located at getprostudio.com (the "Service").

By using our Service, you consent to the collection and use of information in accordance with this Privacy Policy.

2. Information We Collect

Personal Information

When you create an account or use our Service, we may collect:

• Account Information: Name, email address, password (encrypted)
• Payment Information: Billing details processed through Stripe (we do not store payment card details)
• Contact Information: Information you provide when contacting customer support

Content and Usage Information

• Uploaded Images: Personal photographs you upload for headshot generation
• Generated Content: AI-created headshots and related metadata
• Usage Data: Credit consumption, generation history, feature usage
• Preferences: Style selections, settings, and customization choices

Technical Information

• Device Information: Browser type, operating system, device identifiers
• Log Data: IP address, access times, pages viewed, features used
• Cookies and Tracking: Session data, authentication tokens, user preferences

3. How We Use Your Information

We use the collected information for the following purposes:

Service Provision

• Generate professional headshots from your uploaded photos
• Process AI-powered image refinements and edits
• Manage your account, credits, and subscription
• Provide customer support and respond to inquiries

Service Improvement

• Analyze usage patterns to improve our algorithms and features
• Monitor service performance and troubleshoot issues
• Develop new features and enhance user experience
• Conduct research and development on AI technologies

Business Operations

• Process payments and manage billing
• Send important service updates and notifications
• Comply with legal obligations and enforce our terms
• Protect against fraud, abuse, and security threats

4. Information Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information in the following limited circumstances:

Service Providers

• Google Gemini AI: Your uploaded images are processed by Google's AI service to generate photos
• Stripe: Payment processing and billing management
• AWS/Cloudflare: Secure file storage and content delivery
• Email Services: Transactional emails and communications

Legal Requirements

We may disclose your information when required by law, legal process, or to:

• Comply with court orders, subpoenas, or legal proceedings
• Protect our rights, property, or safety, or that of others
• Investigate fraud, security issues, or Terms violations
• Respond to government requests or law enforcement

Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity, subject to this Privacy Policy.

5. Data Security

We implement comprehensive security measures to protect your information:

Technical Safeguards

• Encryption: Data encrypted in transit (HTTPS/TLS) and at rest
• Access Controls: Role-based access and authentication systems
• Secure Storage: Images stored on secure AWS S3-compatible infrastructure
• Regular Updates: Security patches and system maintenance

Operational Security

• Employee access limited to authorized personnel only
• Regular security audits and vulnerability assessments
• Incident response procedures for security breaches
• Secure development practices and code reviews

While we strive to protect your information, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security.

6. Data Retention

We retain your information for as long as necessary to provide our services and fulfill the purposes outlined in this Privacy Policy:

Account Data

• Active Accounts: Retained while your account is active
• Deleted Accounts: Personal data deleted within 30 days of account deletion
• Payment Records: Retained for legal and tax compliance (typically 7 years)

Content Data

• Uploaded Images: Deleted when you delete your account or upon request
• Generated Headshots: Retained until account deletion or specific deletion request
• Usage Logs: Aggregated data retained for service improvement (anonymized)

7. Your Privacy Rights

Depending on your location, you may have certain rights regarding your personal information:

General Rights

• Access: Request information about the personal data we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal data (subject to legal obligations)
• Portability: Request a copy of your data in a structured, machine-readable format

California Residents (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act:

• Right to know what personal information is collected, used, shared, or sold
• Right to delete personal information held by us
• Right to opt-out of the sale of personal information (we do not sell personal information)
• Right to non-discrimination for exercising privacy rights

European Residents (GDPR)

If you are in the European Union, you have rights under the General Data Protection Regulation:

• Right to access, rectify, erase, restrict, or object to processing
• Right to data portability
• Right to withdraw consent where processing is based on consent
• Right to lodge a complaint with a supervisory authority

Exercising Your Rights

To exercise any of these rights, please contact us at support@getprostudio.com. We will respond to your request within a reasonable timeframe and as required by applicable law.

8. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience:

Types of Cookies

• Essential Cookies: Required for website functionality and security
• Authentication Cookies: Keep you logged in and maintain session state
• Preference Cookies: Remember your settings and customizations
• Analytics Cookies: Help us understand how the service is used

Cookie Management

You can control cookies through your browser settings. Note that disabling certain cookies may affect website functionality and your user experience.

9. Children's Privacy

Our Service is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children under 18. If we become aware that we have collected personal information from a child under 18, we will take steps to delete such information promptly.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.

10. International Data Transfers

Our Service is operated from Kentucky, United States. If you are accessing our Service from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States.

We take appropriate measures to ensure that any international transfers comply with applicable data protection laws and that your personal information receives adequate protection.

11. Third-Party Links and Services

Our Service may contain links to third-party websites or integrate with third-party services. We are not responsible for the privacy practices or content of these third parties. We encourage you to review their privacy policies before providing any personal information.

Key third-party integrations include:

• Google Gemini AI: Subject to Google's privacy policy and terms
• Stripe: Subject to Stripe's privacy policy and terms
• AWS/Cloudflare: Subject to their respective privacy policies

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by:

• Posting the updated Privacy Policy on our website
• Updating the "Last Updated" date at the top of this policy
• Sending email notifications for significant changes (where appropriate)

Your continued use of the Service after any changes indicates your acceptance of the updated Privacy Policy.

13. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:

We will respond to your privacy-related inquiries and requests within 30 days or as required by applicable law.

14. Effective Date

This Privacy Policy is effective as of the date stated at the top of this document and applies to all information collected by GetProStudio on or after that date.