Privacy Policy

1. Data Controller

The data controller responsible for the processing of your personal data is:

2. Information We Collect

We collect information primarily to provide and improve our Service. This information falls into the following categories:

3. How We Use Your Information

We use your personal data for the following purposes:

• To Provide the Service: Processing your Input Photos to generate professional headshots.
• Account Management: Creating and managing your account, including processing payments and subscriptions.
• Communication: Sending you updates, notifications, and responding to your inquiries.
• Service Improvement: Analyzing usage patterns to improve and optimize the Service.
• Legal Compliance: Fulfilling our legal obligations and enforcing our Terms and Conditions.

4. Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Consent: By uploading your photo and using the Service, you explicitly consent to the processing of your biometric data (Input Photos) for headshot generation.
• Contract Performance: Processing is necessary to provide the Service you have subscribed to.
• Legitimate Interest: Improving our Service, preventing fraud, and ensuring the security of our platform.
• Legal Obligation: Complying with applicable laws and regulations.

5. Data Sharing and Disclosure

We do not sell, rent, or trade your personal data. We may share your information with:

• Service Providers: Third parties who assist us in operating the Service, such as payment processors, hosting providers, and analytics tools.
• Legal Compliance: If required by law, court order, or governmental authority, or to protect our legal rights.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred to the acquiring entity.

6. Data Retention

• Input Photos: We retain your Input Photos only for as long as necessary to generate your headshots and maintain your account. You may request deletion at any time.
• Account Data: We keep your account information for as long as you maintain an active subscription, or as required by law.
• Usage Data: Automatically collected data is typically retained for a period necessary for analytics and service improvement.

7. Your Rights

Under the General Data Protection Regulation (GDPR) and applicable laws, you have the following rights:

• Right to Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete data.
• Right to Erasure: Request deletion of your personal data, subject to certain exceptions.
• Right to Restrict Processing: Request limitation of how we use your data.
• Right to Data Portability: Request transfer of your data to another service provider.
• Right to Object: Object to processing based on legitimate interests or for direct marketing.
• Right to Withdraw Consent: Withdraw your consent for processing at any time, without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us at support@headshotset.com.

8. Cookies

We use cookies and similar tracking technologies to enhance your experience on the Service. Cookies help us:

• Remember your login information
• Analyze how you use the Service
• Personalize your experience

You can control cookies through your browser settings. However, disabling cookies may affect the functionality of the Service.

9. Data Security

We implement industry-standard security measures to protect your personal data from unauthorized access, disclosure, alteration, or destruction. However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

10. International Data Transfers

Your data may be transferred to and processed in countries outside the European Economic Area (EEA). When we do so, we ensure that adequate safeguards are in place, such as Standard Contractual Clauses, to protect your data in accordance with GDPR.

11. Children's Privacy

The Service is not intended for individuals under the age of 18. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child, we will take steps to delete it promptly.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting the updated policy on this page and updating the "Effective Date" above. Your continued use of the Service after any changes constitutes your acceptance of the revised policy.