Privacy Policy

1. Introduction

Crispshot is operated by 1601297 B.C. LTD., a company incorporated under the laws of British Columbia, Canada. References to "Crispshot", "we", "our", or "us" in this Privacy Policy refer to 1601297 B.C. LTD.

We are committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our AI headshot service.

2. Information We Collect

Account Information

When you create an account, we collect:

• Name
• Email address
• Password (encrypted)

Content You Submit

When you use the Service, you provide:

• A photograph of a face, uploaded as the source for a headshot
• Style, framing and resolution choices, and any name you enter

A photograph of a face is personal data, and in some jurisdictions it is biometric data. We treat uploads accordingly: they are used to produce your headshots and for nothing else.

Generated Headshots

We store the headshots produced for you, together with the model run identifier and credit cost, so they remain available in your library. Deleting a shot deletes the upload behind it.

Usage Data

We automatically collect:

• Device information (browser type, operating system)
• Log data (access times, pages viewed)
• Feature usage patterns

Payment Information

Payment processing is handled by Stripe. We do not store your credit card details. Stripe's privacy policy applies to payment transactions.

3. How We Use Your Information

We use your information to:

• Provide and maintain the Service
• Run the image model on the photograph you submit
• Send important account notifications
• Process payments and manage credits
• Improve our Service and develop new features
• Respond to your support requests

4. AI Processing

Your uploaded photograph is transmitted to a third-party model provider in order to generate your headshots. This processing:

• Occurs only when you start a run
• Sends only the photograph and style instruction required for that run
• Does not share your photograph or results with other users
• Happens over encrypted connections
• Is not used by us to train models

Third-party providers operate under their own terms and retention policies. Do not upload a photograph you are not comfortable transmitting to an external processor, and do not upload photographs of other people without their consent.

5. Data Sharing

We do not sell your personal data. We may share data with:

• Service Providers: Third parties that help us operate the Service (hosting, AI processing, payments)
• Legal Requirements: When required by law or to protect our rights
• Business Transfers: In connection with a merger, acquisition, or sale of assets

6. Data Security

We implement security measures including:

• Encryption of data in transit (HTTPS)
• Encryption of sensitive data at rest
• Secure password hashing
• Regular security audits
• Access controls for personnel

However, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.

7. Data Retention

We retain your data for as long as your account is active. You can request deletion of your account and associated data at any time. Some data may be retained for legal or business purposes (e.g., transaction records).

8. Your Rights

Depending on your location, you may have the right to:

• Access your personal data
• Correct inaccurate data
• Delete your data
• Export your data
• Object to certain processing
• Withdraw consent

To exercise these rights, contact us at [email protected].

9. Cookies

We use essential cookies for:

• Authentication (keeping you logged in)
• Security (preventing fraud)
• Preferences (remembering your settings)

We do not use advertising or tracking cookies.

10. Children's Privacy

The Service is not intended for users under 16 years of age. We do not knowingly collect data from children. If you believe we have collected data from a child, please contact us.

11. International Transfers

Your data may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for such transfers.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or through the Service.

13. Governing Law

This Privacy Policy is governed by the laws of British Columbia, Canada. As a resident of British Columbia, Canada, 1601297 B.C. LTD. complies with applicable Canadian federal and provincial privacy legislation, including PIPEDA.

14. Contact Us

For questions about this Privacy Policy or our data practices, contact us at [email protected].

1601297 B.C. LTD. (operating as Crispshot)
British Columbia, Canada