Privacy Policy

Effective Date: April 20, 2025

1. Introduction

Welcome to Telefoto AI. We are committed to protecting your personal information and your right to privacy. If you have any questions or concerns about this privacy notice, or our practices with regards to your personal information, please contact us at [email protected].

This privacy notice describes how we might use your information if you visit our website at telefoto.ai, use our AI headshot generation services, or otherwise engage with us.

2. Information We Collect

We collect personal information that you voluntarily provide to us when you register on the Services, express an interest in obtaining information about us or our products and Services, when you participate in activities on the Services, or otherwise when you contact us.

The personal information we collect may include the following:

  • Personal Information Provided by You: Names, email addresses, usernames, passwords, contact preferences, billing addresses, debit/credit card numbers, and photos you upload for processing.
  • Payment Data: We may collect data necessary to process your payment if you make purchases, such as your payment instrument number (such as a credit card number), and the security code associated with your payment instrument. All payment data is stored by our payment processor Stripe and you should review its privacy policies and contact the payment processor directly to respond to your questions.
  • Information automatically collected: IP address, browser type, device information, operating system, etc.

3. How We Use Your Information

We use personal information collected via our Services for a variety of business purposes described below:

  • To facilitate account creation and logon process.
  • To manage user accounts.
  • To send administrative information to you.
  • To fulfill and manage your orders.
  • To deliver and facilitate delivery of services to the user (e.g., generating headshots).
  • To respond to user inquiries/offer support to users.
  • For other Business Purposes, such as data analysis, identifying usage trends, determining the effectiveness of our promotional campaigns and to evaluate and improve our Services, products, marketing and your experience.

Specifically regarding uploaded photos and generated headshots: Photos you upload are used solely for the purpose of training the AI model specific to your request and generating your headshots. We automatically delete your uploaded original photos from our active servers within 30 days of upload. The user-specific AI model trained from your photos and the resulting generated headshots are retained on our servers to allow you convenient access unless you request deletion. We may use the generated headshots (but not your original uploaded photos) to help improve our general AI models and services. We do not use your original uploaded photos for any purpose other than generating your headshots.

4. Will Your Information Be Shared With Anyone?

We only share information with your consent, to comply with laws, to provide you with services, to protect your rights, or to fulfill business obligations.

We may share data with third-party vendors, service providers, contractors or agents who perform services for us or on our behalf and require access to such information to do that work. Examples include: payment processing (Stripe), data analysis, email delivery, hosting services, customer service and marketing efforts. We utilize reputable cloud storage providers (such as Amazon AWS S3, Wasabi, Backblaze, Google Cloud Storage, and Microsoft Azure) to store your data, including uploaded photos, trained models, and generated headshots. We maintain control over the data stored with these providers and do not transmit your photos or AI models to other third parties for processing that are not under our direct control. We may allow selected third parties to use tracking technology on the Services, which will enable them to collect data on our behalf about how you interact with our Services over time.

5. How Long Do We Keep Your Information?

We keep your personal information for as long as necessary to fulfill the purposes outlined in this privacy notice, unless a longer retention period is required or permitted by law (such as tax, accounting, or other legal requirements).

Specifically:

  • Original uploaded photos are automatically deleted from our active systems within 30 days.
  • Generated headshots and the user-specific AI model created from your photos are retained for your convenience while your account is active, or until you request their deletion.
  • Other account information (e.g., email address, name, purchase history) is retained while your account is active and for a period afterward as necessary for our legitimate business purposes, such as compliance with legal obligations, resolving disputes, and enforcing our agreements.

When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymize such information, or, if this is not possible (for example, because your personal information has been stored in backup archives), then we will securely store your personal information and isolate it from any further processing until deletion is possible. You have the right to request the deletion of your personal information, including your generated headshots and user-specific model, subject to legal and contractual restrictions, by contacting us using the details provided below.

6. How Do We Keep Your Information Safe?

We aim to protect your personal information through a system of organizational and technical security measures. However, despite our safeguards and efforts to secure your information, no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure.

7. Do We Collect Information From Minors?

We do not knowingly solicit data from or market to children under 18 years of age. By using the Services, you represent that you are at least 18 or that you are the parent or guardian of such a minor and consent to such minor dependent’s use of the Services.

8. What Are Your Privacy Rights?

In some regions (like the EEA, UK, and Canada), you have certain rights under applicable data protection laws. These may include the right (i) to request access and obtain a copy of your personal information, (ii) to request rectification or erasure; (iii) to restrict the processing of your personal information; and (iv) if applicable, to data portability. In certain circumstances, you may also have the right to object to the processing of your personal information. To make such a request, please use the contact details provided below.

If you have an account, you may review, change, or terminate your account at any time.

9. Controls for Do-Not-Track Features

Most web browsers and some mobile operating systems and mobile applications include a Do-Not-Track (“DNT”) feature or setting you can activate to signal your privacy preference not to have data about your online browsing activities monitored and collected. At this stage, no uniform technology standard for recognizing and implementing DNT signals has been finalized. As such, we do not currently respond to DNT browser signals or any other mechanism that automatically communicates your choice not to be tracked online.

10. Do We Make Updates to This Notice?

Yes, we will update this notice as necessary to stay compliant with relevant laws. The updated version will be indicated by an updated “Effective Date” and the updated version will be effective as soon as it is accessible.

11. How Can You Contact Us About This Notice?

If you have questions or comments about this notice, you may email us at [email protected] or by post to:

Bad Command AI
Princeton, NJ 08540
United States