Privacy and erasure

Who is responsible

Staffshots is operated by Erik Finans AB, Sweden, which is the data controller for the personal data described here. For subject-access, correction or erasure requests, or any other question about your data, write to privacy@staffshots.com.

What Staffshots stores

The photo you upload, the headshots generated from it, your email address, and the record of the three consent statements you ticked before uploading. If you buy something, we keep the amount, currency, tax and payment reference — bookkeeping law requires that.

Deleted after 30 days

Staffshots deletes photos and generated images automatically 30 days after they are created. You do not need to ask.

Erase on demand

You can erase sooner, from your account page, at three levels:

• A set of headshots — the generated images go, the source photo stays so you can try again.
• A photo — the photo and everything made from it.
• Your account — the account and everything in it. Irreversible, and your session ends immediately.

Erasure reports what was actually deleted rather than just claiming success. If part of it fails, you are told.

Consent

Before a photo is processed you confirm three separate things: that you are the person in the photo, that you are 18 or older, and that you accept the processing described here. All three are required.

Sign-in

Sign-in is a one-time link emailed to you by Staffshots from no-reply@mail.staffshots.com. Your session is held as a token in this browser's local storage — not a cookie — and clearing it signs you out.

Misuse

If someone has used Staffshots to generate headshots of a face that is not theirs, you can report it without signing in.