Privacy Policy

Last updated: April 1, 2026

1. Introduction

HeyPhoto by HeyDrop ("we", "our", or "us") is an AI-powered professional headshot generation service. This Privacy Policy explains how we collect, use, and protect your personal information when you use our service.

2. Data Collection

We collect the following information when you use HeyPhoto:

  • Photos you upload for AI headshot generation
  • Email address (if provided for account creation or order delivery)
  • Payment information (processed securely by our payment providers)
  • Basic usage data (pages visited, features used) to improve our service

3. Data Usage

Your uploaded photos are processed via a secure cloud API solely for the purpose of generating AI headshots. We do not use your photos for training AI models, marketing, or any purpose other than delivering the headshot results you requested. Photos are not permanently stored on our servers and are deleted after processing is complete.

4. Third-Party Services

We use the following third-party services to operate HeyPhoto:

  • Fal.ai— AI processing infrastructure used to generate headshots from your uploaded photos.
  • RevenueCat— Subscription and in-app purchase management for mobile platforms.
  • Paddle— Payment processing for web purchases. Paddle acts as the Merchant of Record.

Each third-party provider operates under their own privacy policy. We encourage you to review their policies for details on how they handle your data.

5. Data Retention

Uploaded photos are deleted from our processing servers after your headshots have been generated. Generated results are made available for download for a limited period, after which they are also removed. We do not maintain long-term archives of your photos or generated images. Account and payment records are retained as required by applicable law.

6. Your Rights (GDPR)

If you are located in the European Economic Area, you have the following rights regarding your personal data:

  • Right to access your personal data
  • Right to rectification of inaccurate data
  • Right to erasure ("right to be forgotten")
  • Right to restrict processing
  • Right to data portability
  • Right to object to processing

To exercise any of these rights, please contact us at support@heydrop.app.

7. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at support@heydrop.app.