Privacy Policy for ExecShot

Information we collect

Photos and user content

When you use ExecShot, you may provide:

• a source photo or selfie;
• an optional reference image;
• custom text prompts;
• selected clothing, hairstyle, background, expression, color grade, and other style preferences; and
• AI-generated headshots.

ExecShot only receives the photos you deliberately select through Apple’s system photo picker, Files picker, or camera. We do not browse or upload your entire photo library.

Source photos and optional reference images are uploaded temporarily so the requested headshot can be generated. Generated headshots may be stored in your private cloud library so you can access them within the app.

Photos may contain facial characteristics and other personal details. ExecShot processes these characteristics only to create the requested portrait. We do not use your photos to authenticate you, identify you against a database, create biometric identification templates, or track you.

You should only upload photographs that you own or have permission to use.

Account information

ExecShot supports use as a guest and optional Sign in with Apple.

When you use the app as a guest, we create an anonymous account identifier so your generations and usage can remain separated from those of other users.

If you choose Sign in with Apple, we may receive:

• a unique Apple account identifier;
• your email address or Apple Private Relay email address; and
• authentication tokens required to sign you in.

We do not receive your Apple ID password.

You may also voluntarily provide a display name and select one of your generated headshots as your profile image.

Subscription and usage information

Purchases are processed by Apple through the App Store. CraftdLab does not receive or store your payment card number or banking information.

We may receive and store:

• the subscription product you purchased;
• subscription and entitlement status;
• renewal or expiration information;
• an account identifier used to associate the subscription with your ExecShot account;
• generation allowance, credit cost, and usage history; and
• identifiers used to prevent duplicate requests or repeated free-generation abuse.

Usage records may remain after you delete an individual generated photo because they are needed to enforce subscription allowances, prevent abuse, and avoid charging twice for the same request.

Support communications

If you contact us for support, we may collect your email address, the contents of your message, and any information or attachments you choose to provide.

Please avoid sending sensitive photographs or personal information in a support email unless it is necessary to resolve your request.

Technical and operational information

Our servers and service providers may automatically receive limited technical information necessary to operate and secure the service, such as:

• IP address;
• request date and time;
• app and operating-system version;
• network and server errors;
• authentication and request identifiers; and
• basic device or connection information.

We use this information for security, fraud prevention, troubleshooting, service reliability, and request processing. ExecShot does not request your precise location, contacts, health information, or microphone access.

How we use information

We use information collected through ExecShot to:

• create the AI-generated headshots you request;
• apply your selected styles and custom instructions;
• store and display generated headshots in your private library;
• authenticate guest and Sign in with Apple accounts;
• migrate guest generations into your permanent account when you sign in;
• process subscriptions and verify access to ExecShot Pro;
• measure and enforce generation allowances;
• prevent duplicate requests, fraud, and free-generation abuse;
• restore pending generations following a network interruption, app suspension, or device lock;
• provide customer support;
• maintain security and troubleshoot technical problems; and
• comply with legal obligations and enforce our agreements.

CraftdLab does not sell your photos or personal information. We do not use your information for targeted advertising or cross-app tracking, and we do not share it with data brokers.

CraftdLab does not use submitted photos or prompts to train its own AI models.

AI processing

To generate a headshot, ExecShot sends the required source image, optional reference image, style selections, and prompt instructions to an AI-processing provider.

Your content is processed only as necessary to perform the generation you requested, operate the service, maintain security, and comply with applicable provider requirements.

AI processing may occur outside your country or region. The processing and temporary retention practices of an AI provider may also be governed by that provider’s agreements and privacy practices.

Service providers

ExecShot relies on trusted service providers to deliver its features:

• Apple provides App Store distribution, Sign in with Apple, in-app purchases, subscription management, and system photo and sharing interfaces. Apple Privacy Policy
• Supabase provides authentication, database hosting, private file storage, and server-side functions. Supabase Privacy Policy
• Replicate processes AI-generation requests and returns generated results. Replicate Privacy Policy
• OpenAI’s image technology, accessed through our AI-processing infrastructure, may process the photos and instructions required to generate a result. OpenAI Privacy Policy
• RevenueCat helps verify App Store subscriptions and entitlement status. RevenueCat Privacy Policy
• Cloudinary delivers app-owned visual assets such as style references and pose guides. User source photos are not intentionally stored in Cloudinary. Cloudinary Privacy Policy

These providers may receive the information reasonably necessary to perform their services. We require service providers to handle information only for legitimate service purposes and to protect it consistently with their agreements, this Policy, and applicable law.

We may also disclose information when required by law, legal process, or a valid governmental request; to investigate fraud or security threats; to protect users or the public; or as part of a merger, acquisition, financing, or transfer of the service.

Data retention

We retain information according to its purpose:

• Source and reference images: These are temporary processing inputs. They are not placed in your Recents library and are normally deleted after the generation job finishes. If deletion is delayed by a network, processing, or cleanup failure, a temporary file may remain until cleanup can be completed.
• Generated headshots: Stored in your private library until you delete the photograph, use “Delete My Photos,” or delete your account.
• Prompts and style selections: May be stored with the associated generated headshot and deleted when the related generation record is deleted.
• Generation-usage records: Retained while your account exists to calculate allowances, prevent abuse, resolve disputes, and avoid duplicate charges. Deleting a photograph does not refund or erase its completed usage record.
• Profile and account information: Retained until your account is deleted or the information is changed.
• Support communications: Retained only for as long as reasonably necessary to respond, maintain support records, prevent abuse, or comply with legal requirements.
• Operational logs and backups: May remain for limited periods for security, reliability, disaster recovery, fraud prevention, or legal compliance.

Third-party providers may retain limited operational records or backup copies according to their own legal obligations and retention policies.

Your privacy choices

Delete individual or all generated photos

You can delete an individual generated headshot from your Recents library or use Delete My Photos in Account settings.

Deleting your photos removes the generated image files and their associated generation records. Completed allowance and usage records are not removed by deleting photos.

Delete your account

Signed-in users can initiate account deletion directly from Account settings.

Deleting your ExecShot account removes your profile, stored generated headshots, generation records, and account usage ledger from ExecShot’s active systems, subject to limited backup, legal, security, and service-provider retention.

Deleting your ExecShot account does not automatically cancel an App Store subscription. Subscriptions must be managed or cancelled separately through Apple.

Manage your subscription

You can manage or cancel your subscription using the Manage Subscription or Cancel Subscription option in ExecShot, or through your Apple Account subscription settings.

Withdraw access

You can change camera or photo permissions in iOS Settings. Because ExecShot uses Apple’s system photo picker, you choose which individual photographs to provide.

You may stop future AI processing by no longer submitting generation requests. Withdrawing permission does not reverse processing that was already necessary to complete a request.

Access, correction, and other requests

Depending on your location, you may have the right to request access to, correction of, deletion of, restriction of, or an export of your personal information, and to object to certain processing.

To submit a privacy request, email support@craftdlab.com. We may need to verify your identity before completing the request.

Legal bases for processing

Where laws such as the GDPR apply, we process personal information under one or more of these legal bases:

• Performance of a contract: To provide the app, create requested headshots, maintain your library, and manage subscriptions.
• Legitimate interests: To secure the service, prevent fraud and abuse, troubleshoot problems, and maintain reliable operations.
• Consent: When you voluntarily select a photo, provide a reference image, enter a prompt, grant device permission, or contact support.
• Legal obligations: When processing or retention is required by applicable law.

You may withdraw consent for future processing where consent is the applicable basis. Withdrawal does not affect processing that was lawful before withdrawal.

International data transfers

CraftdLab and its service providers may process information in countries other than the country where you live. Those countries may have different data-protection laws.

Where required, we and our providers use appropriate safeguards for international transfers in accordance with applicable law.

California and other U.S. privacy rights

Residents of California and certain other U.S. states may have rights to know, access, correct, or delete personal information and to obtain information about how it is disclosed.

CraftdLab does not sell personal information and does not share personal information for cross-context behavioral advertising. We will not discriminate against you for exercising an applicable privacy right.

Requests may be sent to support@craftdlab.com.

Security

We use reasonable technical and organizational measures designed to protect your information, including encrypted network connections, private cloud-storage buckets, temporary signed file links, authentication controls, and user-scoped access rules.

However, no online service or storage system can guarantee absolute security. You are responsible for maintaining the security of your device and Apple Account.

Children’s privacy

ExecShot is designed for professional use and is not directed to children under 13, or a higher minimum age where required by local law.

We do not knowingly collect personal information from children below the applicable minimum age. If you believe a child has provided information to ExecShot, contact support@craftdlab.com, and we will take appropriate steps to delete it.

User-initiated sharing

ExecShot allows you to save or share generated headshots using Apple’s system interfaces. CraftdLab does not control the apps, services, or recipients you choose when sharing.

Once you export or share a photograph, its handling is governed by the recipient’s or third-party service’s privacy practices.

Changes to this Privacy Policy

We may update this Privacy Policy when ExecShot’s features, service providers, or legal obligations change.

The updated Policy will show a new “Last updated” date. Where required, we will provide additional notice of material changes.

Contact us

For privacy questions, data requests, or concerns, contact:

CraftdLab
Email: support@craftdlab.com
Website: https://craftdlab.com