← Back to Home

Privacy Policy

Last updated: June 2026

1. Introduction

OriginShot ("we", "our", or "us") is committed to protecting your personal information and is the data controller responsible for it. This Privacy Policy explains what data we collect, why we collect it, and how we use, share, and protect it when you use our service at https://originshot.com. By using the Service you agree to this Policy, which forms part of our Terms of Service.

2. Data You Provide

  • Account information: your email address and a password hash.
  • Product images: the photos you upload to generate listings. These are stored privately on our cloud infrastructure and are transmitted to our AI-processing providers to generate your listings.
  • Generated content: the images, titles, tags, and descriptions the Service generates and associates with your account.
  • Billing information: your subscription status and payment data, processed by our third-party payment provider. So that sensitive card data is handled by a specialised payment provider rather than stored on our systems, the provider handles your payment-card details and we never receive or store your full card number.
  • Communications: the content of messages you send us, such as support requests.

3. Data We Collect Automatically

When you use the Service, we and our providers automatically collect certain technical data, including your IP address, device and browser type, operating system, language and settings, request metadata, access times, pages or features used, and error diagnostics. We use this for authentication, security, rate limiting, debugging, and performance. We may infer your approximate (city- or country-level) location from your IP address. We do not collect precise GPS location.

4. Data From Third Parties

If you sign in using a third-party sign-in option, we receive your email address and a unique identifier from that provider. Our payment provider gives us limited billing data (such as your subscription status and the result of a charge), but not your full card number. These third parties handle your data under their own privacy policies.

5. AI Processing and Training

Your uploaded images are transmitted to third-party AI-processing providers solely to generate your listings; this transmission is necessary to perform the image generation you request. We do not use your uploaded images or generated content to train artificial-intelligence models, and we do not authorise our providers to use your images to train their models for purposes unrelated to providing the Service to you.

6. How We Use Your Data

  • To provide, operate, and improve the OriginShot service and generate your listings.
  • To process your subscription and manage billing.
  • To send transactional emails (account verification, password reset, and billing notices).
  • To respond to your support requests and communicate with you about the Service.
  • To secure the Service, enforce rate limits, and detect and prevent fraud or abuse.
  • To comply with our legal obligations and enforce our Terms.

7. Legal Bases

Where data-protection law (such as the GDPR) applies, we process your personal data on the following bases: performance of a contract (to provide the Service you requested), our legitimate interests (to secure and improve the Service and prevent abuse), your consent where required, and to meet a legal obligation.

8. Service Providers and Sharing

We do not sell your personal data. We share data only with the categories of service providers needed to run OriginShot:

  • authentication and identity providers;
  • cloud hosting and storage providers;
  • content-delivery, security, and bot-protection providers;
  • AI image-processing providers;
  • payment-processing providers;
  • error-monitoring and performance providers.

Each provider is bound by its own privacy and data-processing terms and may use your data only to provide services to us. A current list of our service providers is available on request. We may also disclose data where required to comply with law, to enforce our Terms, to protect our rights or users' safety, or in connection with a merger, acquisition, or sale of assets (in which case we will notify you of any change in how your data is handled).

9. Communications, Tracking, and Aggregated Data

We send only transactional and service-related emails. If we ever send optional product or marketing emails, you will be able to opt out using the link in the email or by contacting us; we will still send essential account and billing notices. Because we do not track you across other websites, we do not respond differently to browser "Do Not Track" signals. We may create and use aggregated or de-identified data that does not identify you, for analytics and to improve the Service.

10. International Transfers

The Service and several of our providers operate on infrastructure located in the United States, and our providers may operate globally. If you access the Service from outside those locations, your data may be transferred to and processed in countries whose data-protection laws differ from your own. Where required, such transfers are made under appropriate safeguards, such as standard contractual clauses.

11. Data Retention

We retain your account data and generated listings while your account is active, and for as long as needed for the purposes described in this Policy. After you delete your account, we remove your personal data and stored images within 30 days, except where retention is required by law, needed to resolve disputes, or held in routine backups that are deleted on a rolling basis. Technical logs are retained only for a limited period.

12. Security

We protect your data with measures including encryption in transit (HTTPS), private image storage with no public access (reads are server-proxied and ownership-checked), hashed passwords, HTTP-only session cookies, CSRF protection, and rate limiting. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security. If a data breach affecting your personal data occurs, we will notify you and any relevant authority where required by law.

13. Your Rights

Depending on your location, you may have the right to access, correct, delete, export, or restrict the processing of your personal data, to object to certain processing, and to withdraw consent where processing is based on consent. To exercise these rights, contact us at hello [at] originshot.com. To protect your account, we may need to verify your identity before acting on a request, and we will respond within the time required by applicable law. You may use an authorised agent to submit a request where the law permits.

14. Region-Specific Rights

If you are in the European Economic Area, the United Kingdom, or Switzerland, you have the rights described above under the GDPR (or its UK and Swiss equivalents), including the right to lodge a complaint with your local data-protection supervisory authority. If you are a California resident, you have the right to know what personal information we collect, to request its deletion or correction, and not to be discriminated against for exercising your rights; we do not sell your personal information or share it for cross-context behavioural advertising.

15. Children

The Service is not directed to children. You must be at least 18 years old to use OriginShot, and we do not knowingly collect personal data from anyone under 18. If you believe a child has provided us with personal data, contact us and we will delete it.

16. Cookies

We use only essential cookies: a session cookie for authentication, a CSRF-protection cookie, a locale preference cookie, and a bot-protection cookie. We do not use advertising or cross-site tracking cookies. You can control cookies through your browser settings, but disabling essential cookies will prevent the Service from working.

17. Third-Party Links

The Service may link to third-party websites we do not control, such as the Etsy marketplace. Their privacy practices are governed by their own policies, and we are not responsible for them. Please review the privacy policy of any third-party site you visit.

18. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will take reasonable steps to notify you, and we will update the "Last updated" date above. Your continued use of the Service after changes take effect constitutes acceptance of the updated Policy.

19. Contact

For privacy-related questions or to exercise your rights, email us at hello [at] originshot.com.