Privacy policy

The controller responsible for Lumashots is:

• Photos and generated portraits: selfies you upload, sanitized copies, watermarked previews, and purchased full-resolution outputs.
• Account and contact data: your verified email address, authentication identifiers, and support messages.
• Purchase data: product, price, payment status, Stripe references, refunds, and legally required transaction records. Lumashots does not receive your complete card number.
• Technical and security data: first-party session identifiers, timestamps, browser/device category, rate-limit signals, and keyed hashes used to prevent duplicate promotional claims and abuse.
• Attribution and product analytics: landing route, allowlisted campaign parameters, funnel events, generation outcomes, and download events. Raw advertising identifiers are not placed in analytics.

• To create, display, sell, and deliver your headshots.
• To verify eligibility for a free preview and protect the service from automated abuse.
• To process payments, refunds, customer support, and account access.
• To secure, diagnose, and improve the service using minimized first-party analytics.
• To comply with financial, legal, and fraud-prevention obligations.

Creating a headshot requires us to send your selected source photos and generation instructions to Google's paid Gemini API. Google states in its published data-handling documentation that content submitted to paid Gemini services is not used to improve its products, although prompts and responses may be logged for a limited period for abuse monitoring and legal compliance.

We also use service providers in these categories:

• Supabase for authentication, database services, and private file storage.
• Vercel for application hosting and delivery.
• Stripe for checkout, payment processing, and refunds.
• Postmark for verification and service email delivery.

These providers process only the information needed for their role. Processing may occur outside Switzerland. Where required, we rely on provider contracts and applicable transfer safeguards.

• Unfinished upload attempts expire after 24 hours.
• Accepted, sanitized source selfies expire seven days after verification.
• Rejected source files are removed as part of the rejection and cleanup process.
• Free watermarked previews expire after 14 days.
• Paid full-resolution files expire after 30 days. Download them before the date shown in the product.
• Financial, minimal security, account, and legal records may be retained longer when necessary or required by law.

Scheduled cleanup removes expired files from private storage and tombstones the corresponding records. You may request earlier deletion by emailing support@lumashots.com; some minimized records may be preserved where legally required or necessary to prevent fraud.

Read the more detailed image-processing and deletion explanation.

Lumashots uses first-party cookies and browser storage needed for authentication, session ownership, security, idempotency, and resuming a flow. Our funnel analytics are collected through our own application and exclude image data, prompt text, signed file links, raw IP addresses, and full email addresses. We will update this notice before introducing optional advertising or third-party analytics tags.

Depending on the law that applies to you, you may request information about your personal data, a copy, correction, deletion, restriction, objection, or portability. You may also withdraw consent where processing relies on consent. These rights can be limited by legal retention duties and the rights of others.

Send requests to support@lumashots.com. We may need to verify that the request concerns your account. You may also contact the competent data-protection authority, including the Swiss Federal Data Protection and Information Commissioner.

Photos are kept in private storage and delivered through short-lived authorized links. We use access controls, upload sanitization, metadata removal, and limited retention, but no online service can guarantee absolute security.

Lumashots is intended for adults. Do not upload images of a child or another person without the authority and permission required by law.

We may update this notice when the service or its providers change. The effective date above identifies the current version.