HeadShotIQ Privacy Policy

Updated 10/21/26

This Privacy Policy explains how HeadShotIQ, LLC ("HeadShotIQ," "we," "our," or "us") collects, uses, stores, shares, and protects information when you use the HeadShotIQ website, web application, and services (collectively, the "Services"). Our full Terms of Use are available at Terms of Use & Policies.

HeadShotIQ values user privacy. We do not sell, rent, or trade user data.

Uploaded images are used solely to operate and deliver the Services, including generating analysis outputs and maintaining your uploaded image library within your account. You may delete your account and its data at any time from your Profile page, or by contacting privacy@headshotiqapp.com.

What We Collect

Profile Information: When you create an account, we collect basic account information such as your email address and any optional profile details you choose to provide.
Google Account Information: If you choose to sign in with Google, we receive information described in the "Google Sign-In" section below.
Headshots/Images: Uploaded images are processed and stored securely to provide the requested features. Images remain accessible within your account unless deleted.
Analysis Output: HeadShotIQ generates and stores AI-generated outputs associated with uploaded images. These outputs are interpretive, informational, and remain accessible within your account unless deleted.
Payment Information: Payments are processed by Stripe, our third-party payment provider. HeadShotIQ does not store or have access to full payment card details. We may receive limited transaction information necessary to confirm purchases.
Device & Usage Data: Technical information such as device type, operating system, app version, and usage diagnostics may be collected automatically to maintain and improve service performance.
Support/Communications: If you contact support, we may retain your contact information and message content solely to respond and provide assistance.
Optional Communication: If you opt in, we may send service-related updates or educational content. You may unsubscribe at any time.

Google Sign-In

You may create an account or log in with your Google account. This is optional; you may instead sign up with an email address and password.

What Google user data we access

When you sign in with Google, we request only the basic sign-in permissions (your email address and basic profile information). With your permission, Google shares the following with us:

Your email address
Your name
Your profile picture
A unique Google account identifier

We do not request access to your Gmail, Google Drive, Google Photos, contacts, calendar, or any other Google service.

How we use Google user data

We use this information only to:

Create your HeadShotIQ account and log you in
Display your name and profile picture within your account
Send service-related messages about your account to your email address

We do not use Google user data for advertising, and we do not use it to train, develop, or improve artificial intelligence or machine learning models.

How we store and share Google user data

Google user data is stored with your account by our authentication and database provider (Supabase), which processes it solely on our behalf to operate the Services. We do not sell, rent, or trade Google user data, and we do not share it with any other third party, except where required by law. Google user data is not sent to our AI service provider; only the images you upload are processed to generate analysis results.

Retention and deletion of Google user data

We keep Google user data for as long as your account exists. When you delete your account from your Profile page, your Google user data is permanently deleted from our active systems, together with your images and analysis outputs. You may also request deletion by contacting privacy@headshotiqapp.com. You can remove HeadShotIQ's access to your Google account at any time from your Google Account settings at myaccount.google.com/permissions.

Limited Use

HeadShotIQ's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Image Processing & User Consent

1. Purpose of Processing

Uploaded images are processed solely to deliver the core features of the Services, including headshot analysis, role matching, and first-impression insights. Processing may involve trusted third-party AI service providers (currently Google LLC, via the Google Gemini API) that act on our behalf to generate analysis results. HeadShotIQ does not use uploaded images for model training, advertising, or resale.

2. User Ownership & Permissions

By uploading an image, you represent that you own the image or have the legal right to use it. You consent to the automated processing of the image as necessary to provide the Services. Uploading images without appropriate rights or permissions violates our Terms of Use and may result in account restrictions, removal of content or HeadShotIQ exercising any other rights remedies available under law and equity.

3. Storage & Retention

Uploaded images are stored securely and remain associated with your account until you delete them. You may delete images or your account at any time. Deletion removes images from your account and from active systems used to operate the Services. Certain information may be retained as required for legal, security, tax, or backup purposes in accordance with applicable laws and third-party service provider policies.

4. No Third-Party Sharing

HeadShotIQ does not sell, license, or distribute uploaded images to third parties. Images are processed only by systems and trusted service providers necessary to operate the platform.

5. Security Measures

We implement reasonable administrative, technical, and security safeguards designed to protect uploaded content from unauthorized access, alteration, or disclosure. Uploaded images are stored in private storage and are accessible only through your account.

6. User Controls

Users may delete uploaded images or their account at any time through the Services.

How We Use Data

We use information you provide solely to operate HeadShotIQ, including processing uploads, enabling purchases, and responding to support inquiries.

All purchases are processed through our third-party provider (Stripe). We do not receive or store your credit card or banking details. We may receive limited transaction details such as a receipt ID, amount, and purchase confirmation from Stripe. Stripe's handling of payment information is governed by Stripe's own privacy and security policies.

Data Retention

Account information, including any Google user data, is kept for as long as your account exists. Uploaded images and associated analysis outputs remain linked to your account until deleted. When you delete your account, its data is permanently deleted from our active systems. Residual copies may persist temporarily in backups or security systems as required for operational integrity.

User Rights & Control

Depending on your jurisdiction, you may have certain rights regarding your account data.

Deletion

You may delete uploaded images, analysis outputs, or your account at any time directly within the Services, or by contacting privacy@headshotiqapp.com.

Correction

You may request correction of inaccurate account information that you cannot update yourself by contacting privacy@headshotiqapp.com

Access

You may request information regarding data associated with your account by contacting privacy@headshotiqapp.com. Identity verification may be required prior to fulfilling requests.

Data Portability

Upon request, we may provide a copy of your account data in commonly used electronic format, where applicable.

Payments & Third Parties

Payments

All payments are processed securely by Stripe. Stripe's policies govern how payment information is collected, stored, and handled. HeadShotIQ does not store or have access to full payment card details. We may receive limited transaction information (such as purchase confirmations or receipt data) necessary to operate the Services.

Third-Party Service Providers

We use trusted third-party providers to operate the Services. These providers process data solely as necessary to perform services on our behalf:

Supabase - account authentication, database, and image storage
Vercel - website hosting
Google LLC (Gemini API) - AI processing of uploaded images to generate analysis results
Stripe - payment processing
Upstash - rate limiting to prevent abuse (stores an account identifier only)

Data Sharing

We do not sell, rent, or trade user data. Information may be shared only with the trusted service providers listed above as necessary to operate HeadShotIQ, or where required by law. These providers are permitted to use data solely to perform services on our behalf.

Security

HeadShotIQ LLC applies reasonable technical and organizational safeguards designed to protect user data, including uploaded images, Google user data, and associated account information. These safeguards include:

Encryption of all data in transit using HTTPS (TLS)
Encryption of stored data at rest by our database and storage provider
Private image storage that is accessible only through your account
Database access controls that limit each user to their own data

While we take appropriate measures to safeguard information, no method of electronic storage or transmission over the Internet can be guaranteed to be completely secure. Accordingly, we cannot guarantee absolute security.

For your security, we recommend using a strong password and keeping your login credentials confidential. If you suspect unauthorized access to your account, please contact support promptly at privacy@headshotiqapp.com

Cookie Policy

HeadShotIQ uses cookies and similar technologies in connection with our website and Services. This Cookie Policy explains how and why we use them.

What Are Cookies?

Cookies are small text files stored on your device that help us recognize repeat visitors, understand usage patterns, and improve the functionality of our Services.

Types of Cookies We Use

HeadShotIQ uses essential cookies required for authentication and secure session management. These cookies allow users to log in and maintain access to their accounts. These cookies are secure and HTTP-only and do not store personal information such as passwords. We do not use cookies for advertising purposes.

How We Use Cookies

We use essential cookies to:

Maintain your logged-in session
Support secure authentication and core site functionality

Third-Party Cookies

Certain essential cookies may be set by trusted service providers that support the operation of the platform (such as authentication or hosting providers). These cookies are used solely to enable core functionality.

Children's Privacy

HeadShotIQ is not directed to individuals under the age required to consent to data processing under applicable law. Users must meet the minimum legal age requirements in their respective jurisdiction to use the Services.

Changes to This Policy

We may update this Privacy Policy and Cookie Policy from time to time. Updates will be posted on this page with a revised date. If we change how we access, use, store, or share Google user data, we will notify you within the Services or by email before the change takes effect, and we will ask for your consent where required.

Continued use of the Services after updates constitutes acceptance of the revised policies.

Privacy Policy Contact

For questions or requests regarding this Privacy Policy, please contact:

HeadShotIQ LLC Email: privacy@headshotiqapp.com