This Privacy Policy explains how Exactio Labs, a DBA of Armitage & York Holdings LLC (“ShotReady,” “we,” “us,” or “our”), collects, uses, and protects your information when you use the ShotReady website and service at shotready.ai (the “Service”). By using the Service, you agree to this Policy.
1. Information we collect
- Photos you upload. The selfies and photographs you provide so we can generate your headshots. These images include your facial features.
- Generated images. The AI-generated headshots we produce for you.
- Contact information. Your email address, used to deliver your order and provide support.
- Payment information. Payments are processed by Stripe. We do not receive or store your full card number; we receive only a confirmation and limited transaction details.
- Technical and usage data. Basic log data such as IP address, browser type, and interactions with the Service, used for security, abuse prevention, and improving the Service.
2. Facial images and biometric notice
To create your headshots, we use the photos you upload to train a temporary, private AI model that learns your likeness, and we then generate images from it. Depending on your jurisdiction, facial images may be considered biometric information.
- We use your facial images only to provide the Service to you (generating your headshots) and to screen uploads for safety.
- We do not sell, rent, trade, or otherwise profit from your facial images or biometric information, and we do not use them to train general-purpose or shared AI models.
- Retention & deletion. Your uploaded source photos and the private model trained from them are deleted promptly after your order is delivered (and in any event within 30 days). Your finished headshots remain available for download for 30 days, after which they are deleted from our systems.
- By uploading photos, you consent to this processing. You may request earlier deletion at any time (see “Your rights”).
3. How we use your information
- To provide, deliver, and support the Service.
- To screen uploaded content for safety and prevent misuse.
- To process payments and prevent fraud and abuse.
- To communicate with you about your order and respond to inquiries.
- To comply with legal obligations.
4. Service providers (sub-processors)
We share information only with vendors who help us operate the Service, under contractual confidentiality and security obligations:
- fal.ai — AI model training and image generation.
- Cloudflare (R2) — file storage and content delivery.
- Neon — database hosting.
- Stripe — payment processing.
- Resend — transactional email delivery.
- OpenAI — automated safety screening of uploaded images.
- Vercel — website and application hosting.
We may also disclose information if required by law or to protect the rights, safety, and security of ShotReady, our users, or the public.
5. Your rights and choices
Depending on where you live (including under the California Consumer Privacy Act and the EU/UK GDPR), you may have the right to access, correct, delete, or obtain a copy of your personal information, and to object to or restrict certain processing. We do not sell your personal information. To exercise any right, email privacy@shotready.ai. We will respond as required by applicable law.
6. Security
We use reasonable technical and organizational measures to protect your information, including encryption in transit and access controls. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.
7. Children
The Service is intended only for individuals 18 years of age or older. We do not knowingly collect information from anyone under 18. If you believe a minor has provided us information, contact us and we will delete it.
8. International users
We operate in the United States, and your information may be processed there. By using the Service, you understand that your information will be transferred to and processed in the United States.
9. Changes to this Policy
We may update this Policy from time to time. We will revise the “Last updated” date above and, for material changes, provide additional notice where appropriate.
10. Contact us
Exactio Labs (a DBA of Armitage & York Holdings LLC)
Email: privacy@shotready.ai