PRIVACY POLICY

1. Information We Collect

We collect the following categories of information when you use our Services:

a. Account Information

• Name and email address when you create an account
• Password (stored in encrypted form — we never store plain-text passwords)

b. Photos You Upload

• Reference photos you upload for the purpose of generating AI headshots
• These photos are used solely to generate your headshots and for no other purpose
• We do not use your uploaded photos to train our AI models
• We do not sell, license, or share your photos with third parties

c. Payment Information

• Payment transactions are processed by Stripe, Inc., our third-party payment processor
• We do not collect, store, or have access to your credit card number, CVV, or full payment details
• We receive only a transaction confirmation and billing summary from Stripe
• Stripe's privacy policy governs how your payment data is handled: stripe.com/privacy

d. Usage Data

• Pages visited and features used within the Services
• Device type, browser type, and IP address
• Date and time of access
• This data is used to operate, improve, and secure our Services

2. How We Use Your Information

We use the information we collect for the following purposes:

• To generate AI headshots based on your uploaded reference photos
• To create and manage your account
• To process payments for our Services
• To send transactional emails such as order confirmations and account notifications
• To respond to your support requests
• To detect and prevent fraud, abuse, and security incidents
• To improve and develop our Services
• To comply with applicable laws and legal obligations

3. How We Use Your Photos

Your uploaded photos are biometric data and we treat them with the highest level of care. The following applies to all photos you upload to our Services:

• Your photos are used exclusively to generate your AI headshots
• We do not use your photos to train, fine-tune, or improve any AI model — ours or any third party's
• We do not sell, rent, license, or share your photos with any third party for any purpose
• Your photos are stored on secure AWS S3 servers with encryption at rest and in transit
• Your reference photos are automatically and permanently deleted from our servers within 7 days of successful headshot generation
• You may request immediate deletion of your photos at any time by contacting us at support@transovo.ai

4. Data Retention

We retain different types of data for different periods:

• Reference photos you upload: automatically deleted within 7 days of successful generation
• Generated headshots: retained in your account until you delete them or close your account
• Account information: retained for as long as your account is active or as needed to provide Services
• Payment records: retained as required by applicable tax and financial laws, typically 7 years
• Usage logs: retained for up to 90 days for security and operational purposes

You may request deletion of your account and all associated data at any time by contacting us at support@transovo.ai. We will process deletion requests within 30 days.

5. Ownership of Generated Headshots

You retain full ownership and all intellectual property rights over the AI headshots generated for you through our Services. You may use your generated headshots for any personal or commercial purpose, including but not limited to:

• LinkedIn profiles and professional networking
• Company websites and team pages
• Real estate listings and marketing materials
• Acting portfolios and casting submissions
• Social media profiles
• Business cards and printed materials

We do not claim any ownership, license, or rights over your generated headshots.

6. Third-Party Services

We use the following third-party services to operate our platform. Each of these providers handles your data in accordance with their own privacy policies:

• Stripe, Inc. — payment processing (stripe.com/privacy)
• Amazon Web Services (AWS) — secure cloud storage for images (aws.amazon.com/privacy)
• Supabase — database and authentication infrastructure (supabase.com/privacy)
• SendGrid (Twilio) — transactional email delivery (twilio.com/legal/privacy)

We do not sell or share your personal data with any third party for advertising, marketing, or data brokerage purposes.

7. Data Security

We implement industry-standard security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction:

• All data transmitted between your device and our servers is encrypted using TLS (Transport Layer Security)
• Photos and generated headshots stored on AWS S3 are encrypted at rest
• Access to personal data is restricted to authorized personnel only
• We conduct regular security reviews of our systems and infrastructure

While we take every reasonable precaution to protect your data, no method of transmission or storage is 100% secure. If you believe your account has been compromised, please contact us immediately at support@transovo.ai.

8. Age Restriction

Our Services are intended for individuals who are 18 years of age or older. We do not knowingly collect personal information from anyone under the age of 18. If you are under 18, you may not use our Services.

If we become aware that we have inadvertently collected personal information from a person under 18, we will take immediate steps to delete that information from our systems. If you believe we have collected information from a minor, please contact us at support@transovo.ai.

9. Your Privacy Rights

Depending on your location, you may have the following rights regarding your personal information:

a. Rights for All Users

• Access: Request a copy of the personal information we hold about you
• Correction: Request that we correct any inaccurate or incomplete information
• Deletion: Request that we delete your personal information and account
• Opt-Out: Opt out of marketing communications at any time by clicking the unsubscribe link in any email or by contacting us

b. California Residents (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• The right to know what personal information we collect, use, disclose, and sell
• The right to delete personal information we have collected from you
• The right to opt out of the sale of your personal information — we do not sell personal information
• The right to non-discrimination for exercising your privacy rights

c. European Users (GDPR)

If you are located in the European Economic Area, United Kingdom, or Switzerland, you have additional rights under the General Data Protection Regulation (GDPR):

• The right to data portability — receive your data in a structured, machine-readable format
• The right to restrict processing of your personal data
• The right to object to processing based on legitimate interests
• The right to lodge a complaint with your local data protection authority

To exercise any of these rights, please contact us at support@transovo.ai. We will respond to all requests within 30 days.

10. Cookies and Tracking

We use essential cookies and similar technologies to operate our Services. These include:

• Authentication cookies to keep you logged in to your account
• Session cookies to maintain your preferences during a visit
• Security cookies to detect and prevent fraudulent activity

We do not use advertising cookies, tracking pixels, or third-party analytics tools that share your data with advertisers. You may disable cookies in your browser settings, but doing so may affect the functionality of our Services.

11. Policy Updates

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or applicable laws. When we make material changes, we will:

• Post the updated Privacy Policy on this page with a new effective date
• Send an email notification to your registered email address for significant changes

We encourage you to review this Privacy Policy periodically. Your continued use of our Services after any changes become effective constitutes your acceptance of the updated Privacy Policy.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal information, please contact us:

Transovo LLC
Email: support@transovo.ai
Website: transovo.ai
State of Formation: Virginia, USA

We will respond to all privacy-related inquiries within 30 days of receipt.