Privacy Policy

Last Updated: October 12, 2026
Effective Date: October 12, 2026
This Privacy Policy explains how Mindset LLC (“Mindset LLC,” “we,” “us,” or “our”) collects, uses, keeps, and protects information when you use the HD Headshot and Quick Headshot brands and the website hdheadshot.com (the “Service”). Mindset LLC is the company that operates these brands. This policy applies to free previews and paid orders alike. The Service is offered to people located in the United States.

1. Information We Collect

Your photos and generated images. The photos you upload, the previews and final images we generate, and the choices you make (such as backdrop, attire, text you type about your outfit, and the looks you mark as favorites).
Account and contact data. Your email address and, if you use Google sign-in, the name and email address Google shares with us. We do not store passwords.
Order and payment data. Payments are processed by Stripe. We receive order details such as the pack, amount, discount, order ID, and status. We do not store full card numbers.
Promotion data. Coupon codes you use and referral codes that led you to us.
Technical and usage data. IP address, browser and device type, log data, and product events (such as which steps you complete). We use these to run and secure the Service, prevent abuse, and apply usage and spending limits.
Communications. Messages you send us, and the transactional emails we send you (sign-in links, receipts, “your photos are ready,” and deletion reminders).
Cookies. We use an essential cookie to keep you signed in and a cookie to remember a referral code. Stripe may set its own cookies for payment and fraud prevention. We do not use advertising cookies or advertising pixels, and we do not set analytics cookies. There is no consistent standard for Do Not Track signals, so we do not respond to them.

2. How We Use Information

To generate your previews and images, deliver your order, and let you download your photos.
To process payments and refunds, apply promotions, and send the emails described above.
To screen uploads for safety, prevent fraud and abuse, enforce our Terms, and comply with law.
To provide support and to maintain and improve the Service using non-photo data such as logs and product events.
We do not train AI models on your photos or generated images, we do not use them for advertising, and we do not sell or share your personal information, including your photos, for advertising.

3. 72-Hour Retention and Deletion of Photos

Automatic deletion. Uploaded photos, previews, and generated images are kept for at most 72 hours from when they are created (for a paid order, from when your order is completed) and are then permanently deleted from our storage. Our cleanup process runs regularly, so deletion may occur shortly after the 72-hour mark. Your order page shows the exact date and time.
Delete earlier. You can delete your photos and generated images at any time with the “Delete my photos” option, delete your whole account from your account page, or email privacy@hdheadshot.com. Withdrawing your consent stops any processing and cancels images still waiting to be generated.
Download in time. Files cannot be recovered after deletion, so please download the images you want to keep before the deletion time.
Records we keep. Order and payment records, receipts, support emails, and security and usage logs do not contain your photos. We keep them as long as needed for tax, accounting, fraud prevention, dispute handling, and legal compliance. Account data is kept until you delete your account.

4. Biometric Information Notice and Consent

Photos of your face may be treated as biometric identifiers or biometric information under some laws, such as the Illinois Biometric Information Privacy Act, Texas and Washington biometric laws, and state consumer privacy laws.

Purpose. We process your photos only to generate images of you. Amazon Rekognition checks each upload for one clear adult face. It rejects a photo with no face, a second face large enough to be another person, or a face whose estimated upper age is under 18. Your photos are the reference used so the generated headshot matches you. We do not save a face template, and we do not create or keep facial profiles for identification, surveillance, advertising, or tracking.
Retention schedule and destruction. Photos and generated images are permanently destroyed within 72 hours as described in Section 3, or earlier at your request, and in any case once the purpose for collecting them has been met.
No sale. We do not sell, lease, trade, or otherwise profit from your biometric identifiers or biometric information.
Your consent. Before your first upload, we ask you to confirm that you are 18 or older, that you own the rights to the photos, and that you consent to the processing of your facial images as described here. This is your written release. We keep a record of your consent (date, time, and policy version). You can withdraw it at any time by deleting your photos or emailing privacy@hdheadshot.com.

5. Service Providers We Share Information With

We share information only with providers who help us run the Service, and only as needed:

Amazon Web Services (AWS). Cloud hosting, storage of photos and images, our database, job queue, email sending (Amazon SES), and automated image safety checks (Amazon Rekognition), in United States regions.
AI image-generation provider. We use EvoLink, an API and temporary file-hosting service, to send your photos for image generation and to receive the generated images. We do not name the model. Those photos and images are deleted within 72 hours, or sooner if you delete them, as described in Section 3. We do not use them to train AI models.
Stripe. Payment processing.
Supabase. Database for product analytics events. It does not receive your photos.
Google. Sign-in, if you choose Google.

We expect our providers to protect your information and use it only to provide services to us. We may also disclose information if required by law or legal process, to protect rights, safety, or security, or in a merger or sale in which the successor must honor this policy.

6. Your Rights and Choices

Everyone. You can access, correct, or delete your information, delete your photos or account, and withdraw consent by using the options in your account or emailing privacy@hdheadshot.com.
U.S. state privacy rights. Depending on where you live (for example California, Colorado, Connecticut, Oregon, Texas, Virginia, and other states), you may have the right to know and access what we hold about you, correct it, delete it, obtain a copy, and opt out of the sale or sharing of personal information, targeted advertising, and certain profiling. We do not sell or share personal information for advertising and do not do such profiling. You will not be treated differently for using these rights.
How to ask. Email privacy@hdheadshot.com. We may verify your identity using the email address on file. An authorized agent may submit a request for you. We respond within the time the law requires, generally 45 days.
Appeals. If we deny a request, you may appeal by replying with the subject “Appeal.” You may also contact your state attorney general.

7. Children

The Service is for people 18 and older. We do not knowingly collect information about anyone under 18. If we learn that a photo or account belongs to a minor, we will delete the content and close the account.

8. Security

TLS encryption protects data in transit.
Photos and images are stored in private, encrypted storage with automatic deletion rules. Download links are short-lived (about ten minutes) and are given only to the signed-in owner of the order.
We limit internal access to the data. No system is perfectly secure; if a breach affects you, we will notify you as the law requires.

9. Where Your Data Is Processed

Your information is stored and processed in the United States. The Service is not directed to people in the European Union, the European Economic Area, or the United Kingdom.

10. Changes to This Policy

We may update this policy. We will change the “Last Updated” date and, for material changes, notify you by email or with a notice on the site.

11. Contact

Company: Mindset LLC
Privacy requests: privacy@hdheadshot.com
General support: support@hdheadshot.com