Your privacy

What we collect, why we collect it, who helps us run the service, and the choices you have.

Last updated November 13, 2026

The short versionWe use your photos only to make your headshots. We don't sell them, we don't use them to train AI, and we don't use them in our marketing unless you choose to share one. You can delete a shoot, or your whole account, at any time.

This policy covers keeperheadshots.com and the Keeper Headshots studio, run by Keeper Headshots LLC ("Keeper Headshots", "we", "us"). Keeper Headshots LLC is based in Iowa, USA. If you have a question about your data, email hello@keeperheadshots.com.

What we collect

Account details: your name, email address and password. We store passwords only as a one-way scrambled hash, never as the password itself. If you continue with Google, Google tells us your name, your email address (and that Google has confirmed it) and an account number that links your Google sign-in to your Keeper account. We don't get your Google password, contacts or anything else.
Your photos: the selfies you upload, the headshots we create from them, the looks you choose, and the results of our AI photo checks and grading.
Purchases: which package you bought, the amount, the date and your Stripe customer reference. Payments are handled by Stripe. We never see or store your full card number.
Messages: when you use the contact form, we keep your name, email, message and IP address (the IP address helps us stop spam).
Device and usage information: your IP address, browser type, the pages you visit and similar technical details, collected through cookies and our server logs.

How we use it

To run the studio: check your photos, create your headshots, run our quality check on every headshot, and show you the results.
To manage your account and purchases, including refunds, and to send account emails such as the link that confirms your email address and a note when your headshots are ready.
To send at most two reminder emails: one if your photos pass the check but you haven't developed them, and one if you start a checkout and don't finish it (or, if you have one, after a free preview shoot). Every reminder has a link to stop them, and you can turn them off on your Account page. Now and then we may also email an offer, such as a discount code, to people who signed up but haven't bought; the same link and setting stop those too.
To answer your messages and help with your shoots.
To keep the service secure and prevent fraud and abuse, including misuse of free preview shoots.
To measure how well our ads work (see "Advertising and cookies" below).
To meet our legal, tax and accounting obligations.

How AI works with your photos

To create and check your headshots, we send your photos to two AI providers: Anthropic (the Claude models check your selfies and review each headshot for likeness and quality) and Google (the Gemini models create the headshots). They process your photos for us under business terms that don't allow them to train their models on our data. They may keep data for a limited time for safety and abuse monitoring.

We never use your photos or headshots to train AI models, and we never use them in ads, examples or marketing without your written permission. The example people shown on our website are AI-generated models, not customers, except in the "From our customers" section described below.

Sharing your results: on your finished shoot you can choose to share one headshot for our home page, with the name, job and words you give us. That's the only way a customer's headshot appears on our website: nothing is shown unless you tick the box giving permission, and we review each one before showing it. We keep a copy of that headshot and the details you gave until you take it down (from the shoot or your Account page), delete that shoot, delete your account, the package that paid for it is fully refunded (yours, or your team admin's for a team shoot), or the account's email address turns out to belong to someone else (see "How long we keep it"); it then disappears from the site within about 10 minutes. We don't use it anywhere else, such as in ads.

Reviews: if you've bought from us, you can rate Keeper Headshots and write a review from your account. We keep your rating, your words and the name you choose to show. We may show a review on our website only if you tick the box giving permission and after we've read it. You can change or delete it at any time from the review page, and it's deleted with your account. We ask for a review once by email after a shoot finishes; the reminder switch on your Account page turns that off.

Face data

We don't create or store face templates, face measurements or other biometric identifiers. Our AI looks at your photos to check that each headshot looks like you, the way a person would compare two pictures. We keep the photos themselves, as described below, and nothing derived from your face.

Please upload photos of yourself only, or of someone who has given you permission.

Who we share it with

We share personal information only with companies that help us run Keeper Headshots, and only what they need:

Vercel: hosts the website and stores your account, photos and headshots (in the United States).
Anthropic and Google: AI processing, as described above.
Stripe: payments and refunds.
Google: signing you in, if you choose "Continue with Google".
Cloudflare: the Turnstile security check on the sign-up, contact and password-reset forms, which checks that you're a person and not a bot. It looks at technical signals from your browser and isn't used for advertising.
Resend: sending our emails (confirmation codes and links, password resets, team invitations, "your headshots are ready" notes, reminders, occasional offers (such as a discount code) and copies of contact-form messages).
ImprovMX and Google (Gmail): receiving and answering the messages you send us.
Meta (Facebook and Instagram): advertising measurement, as described below.

Team headshots: if a colleague invites you to their team, they see your name, email address and the progress of your shoot, and can view and download the headshot you choose (or our pick of your best until you choose). They never see your selfies. If you invite people, we email each of them your invitation with your name and email address as the reply-to.

We may also share information if the law requires it, to protect our rights or someone's safety, or with a buyer if Keeper Headshots is ever sold (this policy would still apply to your data). We don't sell your personal information for money.

Advertising and cookies

Sign-in cookie: keeps you signed in for up to 30 days. The site can't work without it.
Known-browser cookie: set when you sign in and kept for up to a year, it tells us this browser has signed in to your account before, so strangers guessing passwords from elsewhere can't lock you out. It holds only your account's ID, signed by us.
Account-security cookies: when you create an account, a cookie kept for up to a year records that this browser made it, so opening its confirmation link here doesn't ask whether you created it. While you continue with Google, a cookie of up to 10 minutes ties Google's reply to this browser, and confirming it's you before deleting your account sets one for 5 minutes. They hold only random or signed values, not your details.
Site analytics: we use Vercel Web Analytics to count visits and see which pages are viewed. It doesn't use cookies and doesn't identify you.
Session storage: the studio saves a couple of small settings in your browser while a shoot is being set up (whether to check photos automatically, and a team invitation you're accepting), and search remembers which FAQ answer to open.
Local storage: once we've shown you the photo tips for a shoot, your browser remembers it so they aren't shown again.
Meta Pixel: we use Meta's advertising tools to find out whether our Facebook and Instagram ads lead to sign-ups and purchases. The Meta Pixel sets cookies in your browser, and our server also tells Meta when you create an account, start a checkout or buy a package. It sends a scrambled (hashed) version of your email address and account ID, your IP address and browser details. Meta uses this to measure and improve our ads, and may use it to show you ads.

Under some US state privacy laws, this use of Meta's tools may count as "sharing" personal information or "targeted advertising." You can opt out in any of these ways:

Turn on Global Privacy Control in your browser or with a browser extension. When your browser sends that signal, we don't load the Meta Pixel and don't send your events to Meta from our server.
Email hello@keeperheadshots.com and ask us to opt you out.
Change your ad settings in your Facebook or Instagram account, or block cookies in your browser.

How long we keep it

Photos and headshots: until you delete the shoot, or until your account is deleted. Deleting a shoot removes its selfies and headshots from active storage straight away. If someone signs up with an email address that isn't theirs and, before the account is confirmed, the address's owner proves it is theirs, the selfies and unfinished shoots added before that are removed, and any headshot shared for our home page before then is taken down; finished headshots stay with the account. (If the account has already paid for a package or offer, we treat a password reset or Google sign-in from the address as its owner coming back on another device, and remove nothing; we still sign out its other sessions.)
Photo backups: we keep private recovery copies of selfies, headshots and shared customer photos for up to seven days. Deleting a photo, shoot, shared headshot or account also requests deletion of its recovery copies and prevents them from being restored. If backup storage is temporarily unavailable, we retry deletion; a recovery copy can remain until it is deleted or expires.
Cancellation records: after deletion, we keep a cancellation marker against the random account and shoot numbers, or a scrambled photo filename, so a background worker or backup restore cannot bring back deleted data. These markers contain no names, email addresses, photos or headshots.
Unfinished shoots: a shoot that was never developed, and hasn't been changed for 90 days, is deleted automatically with its selfies.
Account details: while your account is open. You can delete your account at any time on your Account page. That removes your account and all your shoots, selfies and headshots straight away. If you email us instead, we'll do it within 30 days. Our nightly backups hold account and shoot records for 30 days, so a deleted record can remain in a backup for up to 30 days.
Free-shoot record: if you used a free shoot (we offered one to new accounts until October 2026), we keep a scrambled (hashed) copy of your email address after your account is deleted, with a note that the free shoot was used. That stops a free shoot being claimed twice. It doesn't include your name, photos or anything else. The count of free photo checks used by an email inbox is kept the same way, so that variations of one address (like name+1@…) share one allowance.
Reviews: until you delete your review or your account, or the account is taken over by the email address's owner as described above.
Shared headshots: if you shared a headshot for our home page, until you take it down, delete that shoot, delete your account, the package that paid for it is fully refunded (yours, or your team admin's for a team shoot), or the account is taken over by the email address's owner as described above.
Purchase records: as long as tax and accounting rules require, usually up to 7 years.
Messages: the copy stored from the contact form is deleted automatically after 12 months. Replies we exchange by email stay in our inbox as a record of the conversation. To limit how many messages can be sent from one connection, we count messages per hour against a scrambled (hashed) form of your IP address; those counts are deleted after 2 days.

Your choices and rights

Wherever you live, you can ask us to:

tell you what personal information we hold about you and give you a copy;
correct it;
delete it, including your whole account;
stop using it for advertising.

You can download your headshots, delete shoots and delete your account yourself in the studio. For anything else, email hello@keeperheadshots.com from the address on your account, so we know the request is really from you. We'll reply within 30 days. If we can't do what you asked, we'll explain why, and you can reply to ask us to reconsider. We'll never treat you differently for using these rights.

Security

The site uses encrypted connections (HTTPS) everywhere. Photos are kept in private storage that only your account can reach, passwords are hashed, and sign-in cookies are signed so they can't be forged. No system is perfectly secure, but we work to protect your information and will tell you if a breach affects you.

Children

Keeper Headshots is for adults (18 and over). We don't knowingly collect information from anyone under 18. If you think a child has used the service, email us and we'll delete their information.

Where your data is kept

We and our providers store and process data in the United States. If you use Keeper Headshots from another country, your information will be transferred to the US.

Changes to this policy

If we change this policy, we'll update the date at the top. If a change materially affects how we use your information, we'll email you before it takes effect.

Contact

Questions or requests: hello@keeperheadshots.com, or use our contact form.