Privacy Policy
Effective March 16, 2026
1. Introduction
Verashot ("we", "our", or "us") operates the Verashot platform, an AI-powered professional headshot generation service. This Privacy Policy explains how we collect, use, store, and protect your personal data when you use our service.
By using Verashot, you agree to the collection and use of information as described in this policy.
2. Information We Collect
Account information
When you sign in with Google, we receive your name, email address, and profile photo from Google OAuth.
Photos you upload
Portrait photos you submit for AI headshot generation are stored in Firebase Storage and transmitted to Replicate's API for AI model training and image inference. These photos are the primary data used to generate your headshots.
Payment information
Payments are processed entirely by Stripe. Verashot does not store your card numbers, CVV, or full payment details on our servers.
Usage data
We automatically collect standard server log data, including your IP address, browser type, pages visited, and timestamps. This data is used for security monitoring and service improvement.
3. How We Use Your Information
- Generating professional AI headshots from your uploaded photos
- Processing and fulfilling your payments
- Sending transactional emails (order confirmation, completion notifications)
- Improving the service and diagnosing technical issues
- Complying with applicable legal obligations
4. Third-Party Services
Verashot relies on the following third-party services to operate. Each has its own privacy policy governing how they handle your data:
| Service | Purpose | Privacy Policy |
|---|---|---|
| Firebase / Google | Authentication, database, file storage | policies.google.com/privacy |
| Replicate | AI model training and image inference | replicate.com/privacy |
| Stripe | Payment processing | stripe.com/privacy |
Your uploaded photos are transmitted to Replicate's API for AI processing. Replicate's own data practices apply to data processed through their platform.
5. Data Retention
- Uploaded photos and trained AI models are retained until you delete the project or close your account.
- Generated headshots remain available until the project is deleted.
- Account data (name, email) is retained until you close your account.
- When a project or account is deleted, data is removed from Firebase Storage and Firestore. Deletion of the corresponding AI model from Replicate is also performed at that time.
6. Your Rights (EEA / GDPR)
If you are located in the European Economic Area, you have the following rights under the General Data Protection Regulation (GDPR):
- Access — request a copy of the personal data we hold about you.
- Rectification — request correction of inaccurate data.
- Erasure — request deletion of your data ("right to be forgotten").
- Portability — receive your data in a structured, machine-readable format.
- Restriction — request that we limit how we process your data.
- Objection — object to processing based on our legitimate interests.
To exercise any of these rights, contact us at support@verashot.net . EEA users also have the right to lodge a complaint with their local Data Protection Authority.
7. Data Security
We use HTTPS for all data in transit, Firebase Security Rules to restrict access to Firestore and Storage, and Stripe's PCI-compliant infrastructure for payment data. While we take reasonable precautions to protect your information, no security system is impenetrable. We encourage you to use a strong, unique password for your Google account.
8. Children's Privacy
Verashot is not directed to children under the age of 13. We do not knowingly collect personal data from children. If we become aware that a child under 13 has provided us with personal data, we will delete it promptly. If you believe a child has submitted data to our service, please contact us at support@verashot.net .
9. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated via email or an in-app notification. Your continued use of Verashot after changes take effect constitutes your acceptance of the updated policy.
10. Contact
For privacy-related questions or to exercise your rights, contact us at:
Email: support@verashot.net
Company: Verashot