Legal

Privacy Policy

Last updated: February 10, 2026

Summary: We take your privacy seriously. We never sell your data, never use your photos to train AI without consent, and provide permanent secure storage with AES-256 encryption. You own all your generated headshots.

1. Information We Collect

We collect information you provide directly to us, including: your name and email address when you create an account; photographs you upload for headshot generation; payment information processed through our secure payment provider (Stripe); and usage data such as features used and preferences selected. We also automatically collect certain technical information including IP address, browser type, device information, and cookies.

2. How We Use Your Information

We use the information we collect to: provide, maintain, and improve our headshot generation service; process your transactions and send related information; send you technical notices, updates, and support messages; respond to your comments, questions, and customer service requests; monitor and analyze trends, usage, and activities; detect, investigate, and prevent fraudulent transactions and other illegal activities; and personalize and improve your experience.

3. Photo Data and AI Processing

When you upload photographs, they are processed by our AI engine to generate professional headshots. Your original photographs and generated headshots are stored securely in our cloud infrastructure. We do not use your photographs to train our AI models without your explicit consent. Your photos are never shared with third parties or used for any purpose other than providing you with the requested service.

4. Data Storage and Security

We implement industry-standard security measures to protect your personal information, including: AES-256 encryption for data at rest and in transit; SOC 2 Type II compliance; regular security audits and penetration testing; access controls and authentication mechanisms; and secure cloud infrastructure hosted on enterprise-grade providers. Generated headshots are stored permanently in your account as part of our free cloud storage service.

5. Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances: with service providers who assist in operating our service (payment processing, cloud hosting); to comply with legal obligations or respond to lawful requests; to protect the rights, property, or safety of FIRST IMPRESS.AI, our users, or the public; and in connection with a merger, acquisition, or sale of assets, with appropriate notice.

6. Your Rights and Choices

You have the right to: access, update, or delete your personal information; download all your generated headshots at any time; opt out of marketing communications; request a copy of your data in a portable format; and delete your account and all associated data. To exercise any of these rights, please contact us at [email protected].

7. Cookies and Tracking

We use cookies and similar tracking technologies to collect and track information about your use of our Service. You can control cookies through your browser settings. For more details, please see our Cookie Policy. Essential cookies are required for the Service to function properly. Analytics cookies help us understand how users interact with our Service. Marketing cookies may be used to deliver relevant advertisements.

8. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place for international data transfers, including Standard Contractual Clauses approved by relevant authorities. We comply with applicable data protection laws including GDPR for European users and CCPA for California residents.

9. Children's Privacy

Our Service is not directed to children under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal information from a child under 16, we will take steps to delete that information promptly.

10. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you with our services. Generated headshots are stored permanently as part of our free cloud storage offering. If you delete your account, we will delete your personal information and photographs within 30 days, except where retention is required by law.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. We encourage you to review this Privacy Policy periodically for any changes.

12. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at: [email protected], or through our contact page at 1stimpress.com/contact. For GDPR-related inquiries, you may also contact our Data Protection Officer at [email protected].