Privacy Policy

1. Who we are

ShotForge is operated by AirDev LLC, a Delaware limited liability company. This policy explains what personal data we collect when you use ShotForge, how we use it, and how you can control it.

2. Data we collect

When you place an order we collect:

• Email address — provided via Stripe checkout; used to deliver your headshots and order updates.
• Photos you upload — the 10–20 input photos you provide; used only to generate your AI headshots.
• Payment information — handled entirely by Stripe. We never see or store your card details. We receive only a payment confirmation and customer email from Stripe.
• Technical data — standard server logs (IP address, browser type, request timestamps) used for security and debugging, retained 30 days.
• Generated headshots — the 50 AI-generated images produced from your inputs.

We do not collect data from any source other than what you provide directly through checkout and upload.

3. How we use your data

Your data is used only to:

• Generate your 50 AI headshots via Replicate;
• Send you a confirmation email and a completion email with a link to your results;
• Allow you to look up and download your order via the /lookup page;
• Process refunds if you request one within the 7-day satisfaction window;
• Comply with legal obligations (e.g., tax records, fraud investigations).

We do not use your photos or generated headshots to train AI models, sell to third parties, or display them publicly. Your headshots are yours.

4. Data retention and deletion

Your uploaded input photos are automatically deleted from our storage 30 days after order completion. Generated headshots remain available for download via your order link for 90 days, after which they are permanently deleted.

If you want your data deleted sooner, email privacy@shotforge.us with your order ID and we will honor the request within 7 business days.

5. Third-party processors

We share your data only with the third-party services required to deliver ShotForge:

• Stripe — payment processing. Handles card data; sends us email + payment confirmation. Stripe privacy policy.
• Replicate — AI image generation. Receives your uploaded photos; generates headshots and returns URLs. Replicate privacy policy.
• Supabase — database and file storage. Stores your order record and photos during the retention window. Supabase privacy policy.
• Resend — transactional email delivery. Sends your confirmation and completion emails. Resend privacy policy.
• Vercel — application hosting. Serves the ShotForge website. Vercel privacy policy.

We do not share your data with advertisers, data brokers, or anyone else.

6. Your rights

Depending on your jurisdiction (e.g., California CCPA, EU GDPR), you may have the right to:

• Request a copy of the data we hold about you;
• Ask us to correct inaccurate data;
• Ask us to delete your data;
• Opt out of any future processing beyond order fulfillment.

To exercise any of these rights, email privacy@shotforge.us with your order ID.

7. Security

We use industry-standard measures to protect your data: HTTPS for all traffic, Supabase row-level security, scoped service-role access, Stripe tokenization for payments, and access logging. No system is perfectly secure; we continuously monitor for issues and patch promptly.

8. Children

ShotForge is not intended for anyone under 18. We do not knowingly collect data from minors. If we learn that a minor has submitted photos to ShotForge, we will delete the data immediately and refund the order.

9. Changes to this policy

Changes will be posted here with an updated "Last updated" date. Material changes will also be communicated via email to active customers.

10. Contact

Privacy questions or data requests: privacy@shotforge.us.

AirDev LLC
Delaware, United States