Privacy Policy
Effective date: June 2026 · Last updated: June 2026
ProshotReady ("we," "our," or "us") operates the website proshotready.io. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI headshot generation service.
By using ProshotReady, you agree to the collection and use of information in accordance with this policy. If you have questions or concerns, please contact us at privacy@proshotready.io.
Email Address
When you create an account, we collect your email address. This is used to authenticate you, deliver your completed headshots, and send service-related notifications. We do not sell your email address to third parties.
Photos & Selfies You Upload
To generate your AI headshots, you upload photos or selfies of yourself. These photos are stored securely in Supabase Storage and transmitted to our AI processing provider (fal.ai) solely to train a personalized LoRA model and generate your headshots. We do not share your uploaded photos with third parties for marketing, advertising, or any purpose beyond generating your headshots. Your photos are never used to train public AI models.
Generated Images
The AI-generated headshots produced from your uploaded photos are stored securely in Supabase Storage and are accessible only to you. These images are retained so you can download them at any time within the retention window described in Section 4 below.
Payment Information
All payments are processed by Stripe. We do not store your full credit card number, CVV, or other sensitive payment details on our servers. Stripe receives and securely handles all payment data under their own privacy policy and PCI-DSS compliance program. We only retain a transaction record and Stripe customer identifier.
Usage Data
We may collect standard web analytics information (browser type, pages visited, time spent, referring URLs) to improve our service. This data is aggregated and not linked to individual identities.
AI Processing & Headshot Generation
Your uploaded photos are used exclusively to train a personalized AI model that generates your headshots. This model is created for you only and is not shared with, or accessible to, other users.
Email Delivery of Results
We use your email address to deliver your completed headshots, send order confirmations, and provide account-related notifications via our email provider, Resend. We do not send unsolicited marketing email without your consent.
Service Improvement
Aggregated, anonymized usage data may be used to improve service quality, fix bugs, and enhance the user experience. We do not use your personal photos for this purpose.
Photo Consent and AI Processing. By uploading a photo to ProshotReady, you grant ProshotReady a limited, non-exclusive, royalty-free license to process your photo solely for the purpose of generating AI headshots for your personal or commercial use. We do not sell, share, or use your photos to train public AI models.
This section describes in detail how your photos are processed, where they are stored, and when they are deleted. Please read it carefully.
Processing by fal.ai
Your uploaded photos are transmitted securely to fal.ai, our AI infrastructure provider, for the purpose of training a personalized LoRA (Low-Rank Adaptation) model based on your likeness. This model is then used to generate your professional headshots. fal.ai processes images exclusively as directed by ProshotReady and is contractually prohibited from using your photos for any other purpose, including training its own public or shared AI models. fal.ai's handling of your data is also governed by their Privacy Policy.
Storage in Supabase
Both your uploaded training photos and your generated headshots are stored in Supabase Storage, a secure cloud storage platform. Access is protected by row-level security (RLS) policies so that only your authenticated account can access your files. No other user or third party can view your stored images through ProshotReady.
Automatic Deletion After 90 Days
Your uploaded photos and all associated data are automatically deleted from Supabase Storage within 90 days of upload. This deletion is permanent and irrecoverable. We do not retain your original photos beyond this window. You may also request early deletion at any time by contacting us at privacy@proshotready.io.
No Biometric Data Sales
We do not sell, rent, license, or trade your photos, facial data, or any biometric data derived from your images to any third party under any circumstances.
By uploading images to ProshotReady, you represent and warrant that: (1) you own the image or have explicit rights to use it; (2) the image depicts only yourself or individuals who have provided written consent; (3) the image does not depict minors. You agree to indemnify, defend, and hold harmless ProshotReady, its officers, directors, employees, and agents from any claims, damages, losses, or expenses (including legal fees) arising from images you upload. ProshotReady reserves the right to terminate accounts that upload unauthorized images.
We retain different categories of data for different periods. The table below summarizes our retention schedule:
LoRA Model Weights
The personalized AI model (LoRA weights) trained from your uploaded photos is retained on fal.ai's infrastructure only as long as needed to complete your headshot generation. These model weights are deleted within 90 days of creation and are never reused, repurposed, or shared.
Uploaded Training Photos
The original photos and selfies you upload are automatically deleted from Supabase Storage within 90 days of upload, regardless of whether you have downloaded your generated headshots.
Generated Headshot Images
Your AI-generated headshots are retained for 30 days from the date of generation unless you have downloaded them. If you download your headshots, the copies on our servers are eligible for earlier deletion. After 30 days, generated images are automatically and permanently purged from our servers. We strongly recommend downloading your headshots promptly.
Account & Transaction Data
Your email address and payment transaction records are retained for as long as your account is active and for a reasonable period thereafter to comply with legal and tax obligations.
We use the following third-party services to operate ProshotReady. Each has its own privacy policy and data handling practices:
- StripeOur payment processor. Handles all payment transactions under PCI-DSS compliance. We do not store your card details. Subject to Stripe's Privacy Policy.
- SupabaseOur database, authentication, and storage provider. Stores your account information, headshot metadata, and both uploaded and generated images securely with row-level security controls. Subject to Supabase's Privacy Policy.
- fal.aiOur AI processing provider. Receives your uploaded photos to train your personalized LoRA model and generate your headshot images. fal.ai processes images only as directed by us and does not use your photos to train its own public models. Subject to fal.ai's Privacy Policy.
- ResendOur transactional email provider. Used to deliver headshot completion emails and account notifications. Subject to Resend's Privacy Policy.
Regardless of your location, you have the following rights regarding your personal data. Users in the European Union (EU) and California have additional rights under the GDPR and CCPA respectively, as described below.
- Access: Request a copy of the personal data we hold about you, including your uploaded photos and generated headshots.
- Deletion (Right to be Forgotten): Request deletion of your account and all associated data, including uploaded photos, LoRA model weights, and generated headshots, at any time. We will fulfill verified deletion requests within 30 days.
- Correction: Request correction of inaccurate personal information we hold about you.
- Data Portability: Request a copy of your generated headshots in a common downloadable format (JPEG/PNG).
- Opt-Out of Communications: Opt out of non-essential communications at any time via the unsubscribe link in any email or by contacting us directly.
- CCPA — Do Not Sell: We do not sell your personal information. California residents have the right to know what personal information is collected, to request deletion, and to opt out of any sale (which we do not engage in).
- GDPR — Restrict Processing: EU residents may request that we restrict the processing of their personal data in certain circumstances.
To exercise any of these rights, please email privacy@proshotready.io. We will respond within 30 days.
We implement industry-standard security measures to protect your data, including:
- Encrypted data transmission (HTTPS/TLS) for all requests
- Secure, access-controlled Supabase Storage for uploaded and generated images
- Row-level security policies restricting data access to authenticated account owners
- Role-based access controls limiting which staff can access user data
- Automatic deletion schedules to minimize data retention
However, no method of transmission over the Internet is 100% secure. If you believe your data has been compromised or you have discovered a security vulnerability, please contact us immediately at privacy@proshotready.io.
We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting the new policy on this page with an updated effective date and, where appropriate, by email. Continued use of ProshotReady after changes constitutes acceptance of the updated policy.
If you have any questions about this Privacy Policy or how we handle your data, please contact us: