Privacy Policy
Last updated: March 2026
1. Who We Are
Snap2pro ("we", "us", or "our") operates the website snap2pro.com, providing AI-generated professional headshot services. If you have any questions about this policy, contact us at support@snap2pro.com.
2. What Data We Collect
We collect the following categories of personal data:
- Email address — provided during checkout, used to deliver your results and send transactional emails.
- Photos you upload — the selfies you provide to generate your AI headshots. These are stored temporarily on Cloudflare R2 and deleted automatically 24 hours after your order completes.
- Payment information — processed entirely by Stripe. We never see or store your card number. We receive only a payment confirmation and session ID.
- Order data — package selected, headshot styles, order status, and timestamps — stored in our database to fulfil your order.
- Usage data — standard server logs including IP address, browser type, and pages visited. Used for security and performance monitoring only.
3. How We Use Your Data
- To process your order and generate AI headshots.
- To send you a download link when your headshots are ready.
- To process payment securely via Stripe.
- To respond to support requests.
- To detect and prevent fraud or abuse.
We do not use your photos or data to train AI models. We do not sell, rent, or share your personal data with third parties for marketing purposes.
4. Data Retention
Your uploaded photos and generated headshots are permanently deleted from our storage 24 hours after your order completes. After deletion, recovery is not possible.
Your email address and order metadata are retained for up to 12 months for billing, support, and legal compliance purposes, and then deleted.
5. Third-Party Services
We use the following third-party processors to operate our service:
- Stripe — payment processing. Stripe Privacy Policy
- fal.ai — AI model inference for headshot generation. Your photos are sent to fal.ai for processing and deleted after generation.
- Cloudflare R2 — temporary file storage. Files are deleted after 24 hours.
- Supabase — database for order management. Data is stored within the EU region.
- Resend — transactional email delivery.
Each provider is bound by their own privacy policies and data processing agreements.
6. Cookies
Snap2pro uses only essential cookies required for the service to function (e.g. session state). We do not use advertising or tracking cookies. We do not use Google Analytics or similar tracking tools.
7. Your Rights
Depending on your location, you may have the right to:
- Access the personal data we hold about you.
- Request correction of inaccurate data.
- Request deletion of your data.
- Object to processing of your data.
- Lodge a complaint with your local data protection authority.
To exercise any of these rights, email us at support@snap2pro.com. We will respond within 30 days.
8. Data Security
All data is transmitted over HTTPS. Storage is encrypted at rest. Access to production systems is restricted to authorised personnel only. Despite our best efforts, no system is completely secure — if you discover a security issue, please contact us immediately.
9. Children's Privacy
Snap2pro is not directed at children under 16. We do not knowingly collect data from minors. If you believe a child has submitted data to us, contact us and we will delete it promptly.
10. Changes to This Policy
We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page reflects the most recent revision. Continued use of the service after changes constitutes acceptance of the updated policy.
11. Contact
For any privacy-related questions or requests, contact us at support@snap2pro.com.