Privacy Policy
Last updated: June 2026
Your photos & biometric data
The selfies you upload are used only to generate your headshots. We treat facial images as sensitive biometric data and only process them with your explicit consent, which you give before uploading.
Automatic deletion
We never store your photos on our own servers — they pass through only to generate your headshots. The AI infrastructure that processes them automatically deletes uploads and generated images within 30 days. Deleting your account removes your account data (sign-in, purchase history and usage records) immediately; photos already in the generation pipeline expire on the same 30-day clock. For anything else, email us at the address below.
Children's photos
Our baby and children portrait features are for parents and legal guardians only. By uploading a child's photo you confirm you are that child's parent or legal guardian and consent to the processing described here — we require this confirmation before any child's photo is processed. Children's photos get the same protections as everything else (never stored on our servers, never used to train models, never sold, automatic 30-day deletion). Our service is not directed at children and we do not knowingly collect information from anyone under 13; accounts may only be created by adults.
Where data is processed
Image generation runs on professional Western-hosted AI infrastructure. We do not sell your photos or use them to train public models.
Your own apparel & logos
If you upload photos of yourself wearing branded apparel (for example, your own organization's gear), you confirm you own that apparel and the resulting headshot is for your personal use.
Service providers we use
A small number of trusted providers process data on our behalf, each only for the purpose listed: Magica (AI image generation — receives your photos to create your headshots, auto-deletes within 30 days), Clerk (sign-in and account management), Stripe (payments — we never see your card number), Vercel (website hosting), Resend(transactional email, like "your photos are ready"), Prodigi (print fulfillment — receives your chosen photo and shipping address only if you order prints), PostHog (aggregate analytics, only after you accept cookies), and Upstash(abuse protection — stores only short-lived request counters, never photos). We don't sell your data to anyone.
Cookies & similar technologies
We use a small number of essential and analytics cookies. Clerk sets cookies to keep you securely signed in. Stripe sets cookies during checkout to process payments and help prevent fraud. Vercel Analytics and PostHog provide privacy-friendly, aggregate usage measurement — loaded only after you accept cookies, with no session recording and with on-screen text masked, so your photos and the details you type are never captured. The essential cookies are required for the service to work; you can block cookies in your browser settings, though some features may stop working.
Contact
Questions? Email hello@profilephoto.help.