Last updated: 2026-10-09
What we collect
- Account data — email, name, OAuth provider IDs (Google, Apple) via our identity provider Clerk.
- Project content — uploaded screenshots, canvas state, generated outputs, headlines, and locale data.
- Billing data — payment details are handled by Stripe. We store payment identifiers, amounts, pack entitlements, refunds, disputes and credit activity. We do not store card numbers.
- Operational data — error and security records needed to debug failures, protect accounts and operate the service.
- Optional analytics — visits and product milestones, collected only after you choose Allow analytics. Details and your controls are described below.
Optional analytics and your choice
Optional PostHog analytics start only after you select Allow analytics. You can decline with No thanks and keep using the service. Use the persistent Analytics preferences button to change your choice on this browser. We store that choice locally. Do Not Track and Global Privacy Control signals keep optional analytics off, even if you previously allowed them.
When allowed, analytics include normalized page routes with project IDs removed, the referring domain, limited campaign labels, and browser, operating-system, device-type and screen-size information. A pseudonymous account identifier links visits after sign-in. Product milestones such as project creation, uploads, generations, exports and checkout use counts and selected store, size, language or plan settings.
We do not send uploaded images, editor text, prompts, email addresses, complete query strings or full referring URLs to optional analytics. We do not use IP geolocation, automatic click or form-input capture, or session recordings. Local development, preview deployments, construction-mode pages and test-authentication environments are excluded. Operational records used to provide the service are separate from this optional analytics choice.
Why we collect it
- To provide the service you signed up for (legal basis: contract).
- To prevent abuse and protect other users (legitimate interest).
- To process payments and meet tax obligations (legal obligation).
- To send transactional emails (contract). We never send marketing without explicit opt-in.
- To understand visits and improve the product, with your analytics consent.
Third-party processors
The service uses these providers to process the data needed for their respective functions. Their privacy and retention policies also apply:
- Clerk — authentication and session management.
- Neon — Postgres hosting (project metadata, ledger).
- Cloudflare R2 — object storage (uploaded + generated assets).
- Stripe — payment processing and subscription billing.
- OpenAI — copy, translation and art direction.
- fal.ai — generated artwork and image processing.
- Trigger.dev — background job orchestration.
- Loops — transactional email delivery.
- PostHog — optional product analytics after consent.
- Sentry — error monitoring.
- Vercel — application hosting and edge network.
Data retention
- Generation requests — app descriptions, prompts and results may be stored with projects and job records to provide the service and recover interrupted work. Requests sent to model providers are also subject to those providers' retention policies.
- Project assets — retained while your account is active. Account closure queues a retryable cleanup of projects, uploaded captures, generated artwork and exports. Access is removed before that cleanup completes.
- Billing records — payment and append-only credit records are retained in pseudonymous form after account closure for accounting, dispute handling and fraud prevention. They do not retain your project assets.
- Operational records — job, error and security records are retained as needed to operate the service and investigate failures. Provider retention periods differ.
Your rights (GDPR, CCPA)
You have the right to:
- Access — request a copy of your data.
- Correction — fix inaccurate data.
- Deletion — close your account and request removal of personal and project data, subject to necessary payment and legal record retention.
- Portability — export your data in a machine-readable format.
- Object — opt out of processing for legitimate-interest purposes.
Email privacy@shotshq.com with any of these requests. We respond within 30 days.
Security
See our security page for details on encryption, access controls, and disclosure.
Children
ShotsHQ is not intended for users under 13. We don't knowingly collect data from children.
Changes
Material changes will be announced via email and the changelog at least 14 days before they take effect.
Privacy contact
For EU/UK GDPR matters: privacy@shotshq.com.