Privacy Policy

Last updated: May 2026

1. Information We Collect

When you use WorkShot, we may collect:

• Uploaded Photos: Photos you upload for headshot generation are processed by our AI service and stored temporarily in secure cloud storage (Cloudflare R2).
• Generated Images: AI-generated headshots are stored for download and deleted after a defined retention period.
• Usage Data: We collect anonymous usage analytics (via Google Analytics 4) to improve our service. Analytics data is aggregated and not linked to your uploaded photos.
• Session Data: Anonymous browser session identifiers used for fair-use limit enforcement. These do not contain personal information.

2. How We Use Your Information

• To generate professional headshots from your uploaded photo.
• To provide and improve our service.
• To enforce fair-use limits during the beta period.

3. Photo Processing and Third-Party AI Services

When you upload a photo, it is sent to a third-party AI image generation provider (APIMart) to produce your headshot. The provider processes the image solely to fulfill your request and does not retain your photo beyond the processing period. We do not send your photo to any other third party.

Uploaded photos and generated headshots are stored in Cloudflare R2 object storage. Access to stored images is controlled by session-based authentication — images are not publicly accessible without a valid session link.

4. Sensitive Data Notice (Facial and Biometric Images)

Facial images are considered sensitive personal data under many privacy laws (including GDPR Art. 9 and state biometric privacy laws). We take extra care to protect your privacy:

• Uploaded photos are processed securely and deleted within 30 days after generation.
• Generated headshots are available for download for 30 days and then permanently deleted from our storage.
• We never use your uploaded photos or generated images for AI model training, machine learning datasets, or algorithmic improvement.
• We never share your images with third parties for marketing, advertising, or any purpose beyond delivering your headshot.
• We do not perform facial recognition, facial feature extraction, or biometric template creation on your photos.

5. AI Disclosure

All headshots generated by WorkShot are created using artificial intelligence. The results are AI-generated images based on your uploaded photo and should not be represented as actual photographs taken by a photographer. See our Disclaimer for details on limitations and prohibited uses.

6. Data Retention and Deletion

• Uploaded photos: Automatically deleted within 30 days after generation.
• Generated headshots: Available for 30 days, then permanently deleted from storage.
• Session data: Session identifiers expire after your browser session ends.
• Analytics data: Retained by Google Analytics under their standard data retention policy.

You may request immediate deletion of your photos and generated images at any time, even before the 30-day retention period ends. See Section 7 below.

7. Your Rights and Deletion Requests

You have the right to:

• Request deletion of your uploaded photos and generated images at any time by contacting support@workshot.work with "Deletion Request" in the subject line.
• Request a copy of your stored data.
• Opt out of analytics tracking by using browser-based opt-out tools or ad-blockers.

We process deletion requests within 48 hours. Once deleted, photos and images cannot be recovered.

8. Advertising

WorkShot may display advertisements through Google AdSense. These ads may use cookies to serve personalized content. Ad personalization can be managed through Google Ad Settings. We do not share your photos or facial images with Google or any ad network.

9. Contact

For privacy-related inquiries or deletion requests, contact support@workshot.work or visit our Contact page.