Privacy Policy

Last Updated: 2026-09-13 Effective Date: 2026-09-13

1. Who We Are

This Privacy Policy explains how Ali Razavi, an individual operating under the trade name AuraShots ("AuraShots," "we," "us") collects, uses, discloses, and protects personal information when you use aurashots.ai (the "Service"). We are the organization accountable for this personal information under Canada's Personal Information Protection and Electronic Documents Act ("PIPEDA").

2. What We Collect

We collect the following categories of information:

Account information What: Email address, display name, login credentials Source: You, via Wix Members at signup

Reference photographs What: Photos you upload of yourself to generate images Source: You, directly

Generated images What: AI output produced from your reference photos Source: Generated by the Service

Subscription & billing data What: Plan tier, credit balance, payment status (not full card numbers — see Section 6) Source: You and Wix Payments

Usage data What: Which categories/prompts you use, generation history, feature interactions Source: Automatically, via the Service

Device & technical data What: IP address, browser type, general device information Source: Automatically

We do not ask for or knowingly collect government ID numbers, health information, or financial account numbers beyond what our payment processor handles directly.

3. Reference Photographs: How We Treat This Data

Your uploaded reference photographs depict your face and are the most sensitive category of information the Service handles. We want to be specific and direct about how this works, not bury it in generic language.

3.1 What we do with them. Your reference photos are sent to a third-party AI provider (Google, via the Gemini API) as input to generate new images in the style you request. They are also stored in our systems so you don't have to re-upload them for future generations.

3.2 What we do not do with them. We do not use your reference photos to build a biometric identification profile of you, to identify you across other services, to perform facial recognition matching against other individuals or databases, or to train AI models beyond the single generation request you initiate. We do not sell your reference photos or generated images to any third party.

3.3 Your control over them. You can permanently delete an individual reference photo at any time from your create photos page — this is immediate, with no grace period. To delete your entire account, contact us at aurashotsai@outlook.com; full account deletion is currently handled directly by our team rather than through an automated self-service option. Once processed, account deletion permanently removes your reference photos, generated images, any content in your recycle bin, and your account information, with no grace period. We aim to complete account deletion requests within 30 days (see Section 9).

3.4 Consent. By uploading a reference photograph, you provide your express, informed consent for us to process it as described in this section and in our Terms of Service.

3.5 Biometric Information Notice (Illinois and Other Applicable Jurisdictions). We do not extract a discrete biometric identifier (such as a face geometry template) from your reference photographs, and we do not use your photos for facial recognition, identity verification, or matching against other individuals. To the extent applicable law (such as Illinois' Biometric Information Privacy Act) nonetheless treats our processing as involving biometric information, this section serves as our written notice: we collect this information solely to generate the images you request (Section 3.1), we retain it only until you delete it or close your account (Section 3.3), and we never sell, lease, trade, or profit from it beyond providing the Service to you.

4. Why We Collect It (Identified Purposes)

We only collect personal information for purposes we can clearly explain to you:

to create and operate your account;
to generate the AI images you request;
to process subscription payments and manage your credit balance;
to provide customer support (see Section 9 on how we identify you without storing extra personal data for this purpose);
to maintain the security and integrity of the Service, including fraud and abuse prevention;
to communicate with you about your account, transactions, or (with your consent, where required) marketing; and
to comply with legal obligations.

We do not use your personal information for any purpose beyond these without either obtaining your fresh consent or updating this Policy with advance notice.

5. Consent

By creating an account, you consent to the collection, use, and disclosure of your personal information as described in this Policy. Where a use falls outside these described purposes, we will seek your explicit consent before proceeding, except where consent is not required by law (for example, to comply with a legal obligation). You may withdraw consent at any time, subject to legal or contractual restrictions and reasonable notice, by contacting aurashotsai@outlook.com — note that withdrawing consent for core processing (e.g., photo processing) will mean you can no longer use the generation features of the Service.

6. Third Parties Who Process Your Data

We share personal information only with service providers who need it to operate the Service, under obligations to protect it consistent with this Policy:

Google (Gemini API / Google Cloud Storage) — processes reference photos to generate images, and hosts generated images.
Wix.com — hosts the Service, manages member accounts and authentication, and processes subscription payments (Wix Payments). We do not receive or store your full payment card number; that is handled directly by Wix's payment infrastructure.

We do not sell personal information to data brokers or advertisers, and we do not use your data to serve you targeted third-party advertising.

International transfers. Some of these providers process or store data outside Canada, including in the United States. PIPEDA permits this, but requires us to disclose it: while your information is outside Canada, it may be accessible to courts, law enforcement, and national security authorities of that jurisdiction under their laws.

7. Security

We use reasonable administrative, technical, and physical safeguards appropriate to the sensitivity of the information involved, including encrypted data transmission and access controls limiting who can view stored data. No online service can guarantee absolute security, and we cannot promise that unauthorized access, hacking, or data loss will never occur.

8. Data Retention and Deletion

We retain personal information only as long as necessary to fulfill the purposes described in Section 4, or as required by law.

Reference photos: retained until you delete them individually (removal is immediate and permanent) or until your account is deleted.

Generated images: retained until moved to the recycle bin and then permanently deleted, or until your account is deleted.

Recycle bin: images you move to the recycle bin are retained indefinitely until you choose to permanently delete them yourself. There is no automatic deletion timeline. Permanent deletion from the recycle bin is immediate and cannot be undone.

Account and billing information: retained for the life of your account and for a limited period afterward as required for tax, accounting, and legal purposes.

If you cancel your subscription without requesting account deletion, we retain your reference photos, generated images, and account information so you can resume access, view your generation history, or resubscribe later. This content is retained until you request account deletion as described in Section 3.3, or as otherwise required by law.

9. Your Rights

Under PIPEDA, you have the right to:

access the personal information we hold about you;
challenge the accuracy of that information and have it corrected;
withdraw consent for our use of your information (see Section 5); and
complain about our handling of your information, first to our Privacy Officer aurashotsai@outlook.com, and if unresolved, to the Office of the Privacy Commissioner of Canada (www.priv.gc.ca).

If you are in the European Economic Area, you additionally have rights under the GDPR, including data portability and the right to lodge a complaint with your local supervisory authority.

If you are a California resident, you have rights under the CCPA/CPRA, including the right to know what personal information we collect and to request its deletion. We do not sell personal information as defined under the CCPA.

To exercise any of these rights, contact us at aurashotsai@outlook.com. We will respond within 30 days.

10. Children's Privacy

The Service is not directed to, and we do not knowingly collect personal information from, anyone under 18. If we learn that we have collected personal information from someone under 18, we will delete it. If you believe a minor has provided us information, contact aurashotsai@outlook.com immediately.

11. AI-Generated Content and Automated Processing

We use AI to generate images based on your input; we do not use automated decision-making to make any decision that produces legal or similarly significant effects concerning you (for example, we do not use AI to approve or deny refunds, or to determine account eligibility — those decisions involve human review).

12. Cookies and Similar Technologies

The Service, built on Wix, uses cookies and similar technologies for core functionality (keeping you logged in, remembering preferences) and may use analytics cookies to understand aggregate usage patterns.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the revised Policy with a new "Last Updated" date and, for material changes affecting how we use your personal information, provide additional notice before the change takes effect.

14. Contact Us

Questions, requests, or complaints about this Privacy Policy or our handling of your personal information:

Privacy Officer: Ali Razavi Email: aurashotsai@outlook.com

If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada at 1-800-282-1376 or www.priv.gc.ca.