Privacy Policy

RostroAi is built on a simple principle: we need as little of your data as possible to do our job. This policy explains exactly what we collect, what we don't, and why.

What we don't collect

We do not create accounts. We do not ask for your name, email address, phone number, or any personally identifying information. There is no login, no profile, and no persistent identity associated with your use of this service.

Your photos

When you upload a photo, it is transmitted to our servers and to the AI models used to generate your headshots. Your photo is used solely for that generation — it is not stored beyond your active session, not used to train AI models, and not shared with any third party for purposes other than generation.

When your session ends — whether you close the tab, navigate away, or the session expires — your uploaded photo and all generated results are permanently deleted. There is no backup. There is no recovery. This is intentional.

Generated images

All AI-generated headshots produced during your session are deleted at session end. If you download an image before closing, that downloaded copy is yours and is no longer on our servers. We do not retain copies of your generated headshots.

Payments

Payments are processed by Stripe. We do not see, store, or handle your card number, bank details, or any payment credentials. Stripe's own privacy policy governs how they handle your payment data. The only information we receive from Stripe is confirmation that a payment was completed, so we can initiate your download.

Analytics

This site uses Netlify Analytics, a server-side analytics tool. Netlify Analytics works differently from most analytics:

• It does not use cookies or JavaScript trackers.
• It does not track you across websites.
• It does not build a profile of your browsing behaviour.
• It reads server-side access logs to produce aggregated statistics — page views, visitor counts, and top referrers — without storing personally identifiable information about individual visitors.
• Your IP address is not stored.

We use this data only to understand general usage patterns (which pages are visited, where traffic comes from) so we can improve the product. No individual session data is retained or attributed to you.

Content moderation

Uploaded photos are screened by an automated NSFW detection process before generation begins. This screening is performed programmatically. If a photo is flagged, it is rejected and not processed further. No human reviews your photo unless required by law.

Third-party services

RostroAi uses the following third-party services to operate:

• AI generation providers — your photo and generation parameters are sent to AI model APIs to produce headshot results. These providers process your photo under their own data processing agreements and do not retain your data beyond the request.
• Stripe — payment processing. Governed by Stripe's privacy policy.
• Netlify — hosting and analytics. Governed by Netlify's privacy policy.

We do not sell your data. We do not share your data with advertisers. We do not use your photos for marketing purposes.

Cookies

RostroAi does not use tracking cookies. A session token may be stored temporarily in your browser's memory to maintain your generation session. This token is not used for advertising, is not shared with third parties, and is cleared when your session ends.

Children

RostroAi is not directed at children under 13. We do not knowingly collect any information from children. If you believe a child has used this service, please contact us and we will take appropriate action.

Changes to this policy

We may update this policy from time to time. The date at the top of this page reflects when it was last revised. Continued use of the service after changes are posted constitutes acceptance of the updated policy.

Contact

Questions about this policy? Reach us at privacy@rostroai.com.