Privacy Policy

Effective Date: Jun 16, 2025

1. Introduction

Welcome to Telefoto AI. We are committed to protecting your personal information and your right to privacy. If you have any questions or concerns about this privacy notice, or our practices with regards to your personal information, please contact us at [email protected].

This privacy notice describes how we might use your information if you visit our website at telefoto.ai, use our AI headshot generation services, or otherwise engage with us.

2. Information We Collect

We collect personal information that you voluntarily provide to us when you register on the Services, express an interest in obtaining information about us or our products and Services, when you participate in activities on the Services, or otherwise when you contact us.

The personal information we collect may include the following:

  • Personal Information Provided by You: Names, email addresses, usernames, passwords, contact preferences, billing addresses, debit/credit card numbers, and photos you upload for processing.
  • Payment Data: We may collect data necessary to process your payment if you make purchases, such as your payment instrument number (such as a credit card number), and the security code associated with your payment instrument. All payment data is stored by our payment processor Stripe and you should review its privacy policies and contact the payment processor directly to respond to your questions.
  • Information automatically collected: IP address, browser type, device information, operating system, etc.
  • When you use our mobile app, we may collect device information such as device model, operating system version, app version, unique device identifiers (such as instance IDs for analytics/crash reporting), and interaction data (such as app usage and crash logs) via Firebase Analytics and Crashlytics.

Our app may request access to your device’s camera and photo library to allow you to upload photos for headshot generation. This access is used solely for providing the requested service.

3. How We Use Your Information

We use personal information collected via our Services for a variety of business purposes described below:

  • To facilitate account creation and logon process.
  • To manage user accounts.
  • To send administrative information to you.
  • To fulfill and manage your orders.
  • To deliver and facilitate delivery of services to the user (e.g., generating headshots).
  • To respond to user inquiries/offer support to users.
  • For other Business Purposes, such as data analysis, identifying usage trends, determining the effectiveness of our promotional campaigns and to evaluate and improve our Services, products, marketing and your experience.

Specifically regarding uploaded photos and generated headshots: Photos you upload are used solely for the purpose of training the AI model specific to your request and generating your headshots. We automatically delete your uploaded original photos from our active servers within 30 days of upload. The user-specific AI model trained from your photos and the resulting generated headshots are retained on our servers to allow you convenient access unless you request deletion. We do not use your original uploaded photos or generated headshots for any purpose other than fulfilling your request to generate headshots.

4. Will Your Information Be Shared With Anyone?

We only share information with your consent, to comply with laws, to provide you with services, to protect your rights, or to fulfill business obligations.

We may share data with third-party vendors, service providers, contractors or agents who perform services for us or on our behalf and require access to such information to do that work. This includes:

  • Payment Processing: For purchases made through the Apple App Store or Google Play Store, we do not collect or store your payment information. All such transactions are processed by Apple or Google, and their privacy policies apply. For web-based purchases, we use Stripe for payment processing. Stripe stores your payment data, and you should review their privacy policies.
  • Cloud Storage Providers: We utilize reputable cloud storage providers (such as Amazon AWS S3, Wasabi, Backblaze, Google Cloud Storage, and Microsoft Azure) to store your data, including uploaded photos, trained models, and generated headshots. We maintain control over the data stored with these providers.
  • AI Image Processing Providers: To generate your AI headshots, we securely transmit your uploaded photos to, and process them with, specialized third-party AI model providers. These may include services like RunPod, Modal, Replicate, Cloudflare AI, and Google Cloud AI. These providers process your photos solely for the purpose of generating your headshots as requested by you and are bound by confidentiality and data processing agreements. They do not have the right to use your photos for their own general model training or other purposes not directly related to fulfilling your service request.
  • Analytics and Crash Reporting: We use Google Firebase for analytics and crash reporting services to understand how our Services are used and to improve their stability and performance. Firebase may collect certain data about your device and interaction with our Services, such as device identifiers, IP address, app usage, and crash information. This data is used in an aggregated and anonymized form where possible. You can learn more about Google's privacy practices for Firebase at https://policies.google.com/privacy.
  • Other Service Providers: We may also share data with providers for data analysis, email delivery, hosting services, and customer service.

We require all third parties to respect the security of your personal data and to treat it in accordance with the law. We only permit them to process your personal data for specified purposes and in accordance with our instructions.

We may allow selected third parties (like our analytics providers) to use tracking technology on the Services, which will enable them to collect data on our behalf about how you interact with our Services over time.

Your information is stored and processed in the United States. At this time, we do not store user data in other countries. If this changes in the future, we will update this privacy policy and implement appropriate safeguards as required by law.

5. How Long Do We Keep Your Information?

We keep your personal information for as long as necessary to fulfill the purposes outlined in this privacy notice, unless a longer retention period is required or permitted by law (such as tax, accounting, or other legal requirements).

Specifically regarding your photo data:

  • Original Uploaded Photos: These are automatically deleted from our active systems within 30 days of upload.
  • Generated Headshots and User-Specific AI Model: These are retained on our servers to allow you convenient access while your account is active. You have the right to request the deletion of your generated headshots and the user-specific AI model created from your photos at any time by contacting us. Upon receiving such a request, we will process the deletion of this data from our active systems and instruct our AI Image Processing Providers to do the same, typically within 30 days, subject to any technical limitations or legal retention obligations.

Other account information (e.g., email address, name, purchase history) is retained while your account is active and for a period afterward as necessary for our legitimate business purposes, such as compliance with legal obligations, resolving disputes, and enforcing our agreements.

When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymize such information, or, if this is not possible (for example, because your personal information has been stored in backup archives), then we will securely store your personal information and isolate it from any further processing until deletion is possible. You have the right to request the deletion of your personal information by contacting us using the details provided below. We aim to process such requests within 30 days of receipt, subject to verification and any overriding legal or contractual requirements.

6. How Do We Keep Your Information Safe?

We aim to protect your personal information through a system of organizational and technical security measures. However, despite our safeguards and efforts to secure your information, no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure.

7. Do We Collect Information From Minors?

We do not knowingly solicit data from or market to children under 18 years of age. By using the Services, you represent that you are at least 18 or that you are the parent or guardian of such a minor and consent to such minor dependent’s use of the Services.

8. What Are Your Privacy Rights?

In some regions (like the EEA, UK, and Canada), you have certain rights under applicable data protection laws. These may include the right (i) to request access and obtain a copy of your personal information, (ii) to request rectification or erasure; (iii) to restrict the processing of your personal information; and (iv) if applicable, to data portability. In certain circumstances, you may also have the right to object to the processing of your personal information. To make such a request, please use the contact details provided below.

If you have an account, you may review, change, or terminate your account at any time.

9. Controls for Do-Not-Track Features

Most web browsers and some mobile operating systems and mobile applications include a Do-Not-Track (“DNT”) feature or setting you can activate to signal your privacy preference not to have data about your online browsing activities monitored and collected. At this stage, no uniform technology standard for recognizing and implementing DNT signals has been finalized. As such, we do not currently respond to DNT browser signals or any other mechanism that automatically communicates your choice not to be tracked online.

10. Do We Make Updates to This Notice?

Yes, we will update this notice as necessary to stay compliant with relevant laws. The updated version will be indicated by an updated “Effective Date” and the updated version will be effective as soon as it is accessible.

11. How Can You Contact Us About This Notice?

If you have questions or comments about this notice, you may email us at [email protected] or by post to:

Bad Command AI d/b/a Telefoto AI
971 US HIGHWAY 202N
Suite #4610
BRANCHBURG, NJ 08876
United States