Privacy Policy

• Account information (email, name)
• Photos you upload for processing — deleted after 90 days
• Generated headshots — stored for 12 months
• Usage data (quiz selections, generation count)
• Technical data (hashed IP address, device type)
• Payment data — processed by LemonSqueezy only. We never see or store card numbers.

• Provide and continuously improve the service
• Process payments securely
• Send transactional account emails
• Detect and prevent fraud
• Comply with legal obligations

All data is stored on Supabase infrastructure in the EU region. We do not sell your personal data. We do not share personal data with third parties except as described in Section 4.

• Supabase (EU) — database and file storage
• OpenAI — photo processing. Images are not retained for AI training.
• LemonSqueezy — payment processing
• Vercel — application hosting
• Vercel Analytics — anonymous usage statistics only

If you are in the EU, you have the following rights:

• Access — request a copy of your data
• Rectification — correct inaccurate data
• Erasure — right to be forgotten
• Portability — receive your data in JSON format
• Restriction — limit how we process your data
• Object — opt out of analytics processing

Exercise your rights via the Settings page or by emailing support@castshot.actor. We respond within 30 days.

• Photos from active accounts: 12 months
• Deleted account data: erased within 30 days
• Payment records: 7 years (legal requirement)

CastShot is not intended for users under 18. We do not knowingly collect data from minors.

Privacy questions: support@castshot.actor