Legal
Privacy Policy
Last updated: March 1, 2026
1.Introduction
Manatee Media LLC ("Company," "we," "us," or "our") operates the Professional Photo AI service ("Service"), an AI-powered professional headshot generator. This Privacy Policy describes how we collect, use, share, and protect your personal information when you use the Service.
By using the Service you agree to the practices described in this Privacy Policy. If you do not agree, please do not use the Service.
2.Information We Collect
2.1 Information You Provide
- Account information: email address and, optionally, your name when you create an account.
- Uploaded photographs: the photos you submit to generate headshots.
- Style preferences: the industry, background, attire, and other creative options you select.
- Payment data: billing information processed and stored by our payment processor, Stripe. We do not store full credit card numbers on our servers.
- Communications: any messages you send to our support team.
2.2 Information Collected Automatically
- Usage data: pages visited, features used, timestamps, referral URLs, and interactions within the Service.
- Device information: browser type and version, operating system, screen resolution, and device identifiers.
- Log data: IP address, access times, and server logs.
- Cookies and similar technologies: see Section 7 below.
3.How We Use Your Information
We use the information we collect to:
- Provide, operate, and improve the Service.
- Process your uploaded photographs through our AI models to generate headshot images.
- Process payments and send transaction-related communications.
- Respond to your inquiries and provide customer support.
- Send you service updates, security alerts, and administrative messages.
- Detect, prevent, and address fraud, abuse, and security issues.
- Analyze usage trends to improve the Service and develop new features.
- Comply with legal obligations.
4.Legal Bases for Processing (EEA/UK Users)
If you are located in the European Economic Area or the United Kingdom, our legal bases for processing your personal data are:
- Contract performance: processing necessary to provide the Service you have requested (e.g., generating your headshots, processing payments).
- Legitimate interests: processing necessary for our legitimate business interests, such as improving the Service, preventing fraud, and ensuring security, where those interests are not overridden by your rights.
- Consent: where you have given explicit consent, such as for marketing communications. You may withdraw consent at any time.
- Legal obligation: processing necessary to comply with applicable laws and regulations.
5.How We Use Your Uploaded Photos
Your uploaded photographs are used solely to generate the headshot images you request. They are processed by our AI provider (Replicate) in a stateless manner and are not retained by the AI provider after processing.
Uploaded photos and generated headshot images are stored on our servers (Amazon Web Services) for as long as your account exists, to allow you to access, download, and regenerate images at any time. You may request deletion of your photos and generated images by contacting us at manateemediallc@gmail.com.
6.Data Retention
| Data Type | Retention Period |
|---|---|
| Uploaded photographs | Retained for the life of your account; deleted upon account closure or deletion request |
| Generated headshot images | Retained for the life of your account; deleted upon account closure or deletion request |
| Account data (email, preferences) | Until you request deletion or your account is closed |
| Payment records | As required by tax and accounting laws (typically 7 years) |
| Usage and device data | 26 months from collection, then aggregated or deleted |
7.Cookies and Tracking Technologies
We use cookies and similar technologies (local storage, pixels) to operate the Service, remember your preferences, and understand how you interact with the Service.
- Essential cookies: required for the Service to function (e.g., session authentication, CSRF protection). These cannot be disabled.
- Analytics cookies: help us understand usage patterns and improve the Service. You may opt out of analytics cookies through your browser settings or our cookie preferences controls.
We do not use advertising or third-party behavioral tracking cookies.
8.Third-Party Service Providers
We share personal information with the following categories of third-party processors, solely to operate and improve the Service:
| Provider | Purpose | Data Shared |
|---|---|---|
| Stripe | Payment processing | Payment and billing information |
| Replicate | AI image generation | Uploaded photos (stateless processing; not retained) |
| Amazon Web Services (AWS) | Cloud infrastructure and storage | All Service data (encrypted at rest and in transit) |
| Analytics provider | Usage analytics | Anonymized usage and device data |
Each provider is contractually required to process data only on our behalf and in accordance with this Privacy Policy.
9.Data Security
We implement industry-standard technical and organizational measures to protect your personal information, including encryption in transit (TLS) and at rest (AES-256), access controls, and regular security audits. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.
10.Your Rights Under the GDPR (EEA/UK Users)
If you are located in the European Economic Area or the United Kingdom, you have the following rights under the General Data Protection Regulation:
- Access: request a copy of the personal data we hold about you.
- Rectification: request correction of inaccurate or incomplete personal data.
- Erasure: request deletion of your personal data ("right to be forgotten").
- Restriction: request that we restrict processing of your personal data.
- Portability: receive your personal data in a structured, commonly used, machine-readable format.
- Objection: object to processing based on legitimate interests.
- Withdraw consent: where processing is based on consent, withdraw it at any time without affecting the lawfulness of prior processing.
To exercise any of these rights, contact us at manateemediallc@gmail.com. We will respond within 30 days. You also have the right to lodge a complaint with your local supervisory authority.
11.Your Rights Under the CCPA (California Residents)
If you are a California resident, the California Consumer Privacy Act (as amended by the CPRA) provides you with the following rights:
- Right to Know: request disclosure of the categories and specific pieces of personal information we have collected about you, the sources, the business purposes, and the third parties with whom we share it.
- Right to Delete: request deletion of personal information we have collected from you, subject to certain exceptions.
- Right to Correct: request correction of inaccurate personal information.
- Right to Opt-Out of Sale/Sharing: we do not sell your personal information or share it for cross-context behavioral advertising.
- Right to Non-Discrimination: we will not discriminate against you for exercising any of your CCPA rights.
To submit a request, email manateemediallc@gmail.com or contact us using the details in Section 14. We will verify your identity before processing your request and respond within 45 days.
12.International Data Transfers
Your information may be transferred to and processed in the United States or other countries where our service providers operate. When we transfer personal data from the EEA/UK, we rely on Standard Contractual Clauses approved by the European Commission or other lawful transfer mechanisms.
13.Children's Privacy
The Service is not intended for children under 16 years of age. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal data from a child under 16, we will take steps to delete that information promptly.
14.Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on the Service with a revised "Last updated" date. If required by law, we will also notify you by email. Your continued use of the Service after any update constitutes your acceptance of the revised policy.
15.Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:
Manatee Media LLC
Email: manateemediallc@gmail.com
General support: manateemediallc@gmail.com
For GDPR-specific inquiries, you may also contact our Data Protection Officer at manateemediallc@gmail.com.