Privacy policy

Who operates OneShot

OneShot is operated by Frank. For privacy requests, contact newlifebirdstudio@gmail.com.

Information we process

• Your email address, selected purpose, style, expression and photo format; your uploaded photo and the generated images.
• Order identifiers, payment status and transaction references, refund records and support messages. We do not collect your card number, card security code or payment-account password.
• Limited technical and usage information, including request timestamps, error codes, IP-derived rate-limit identifiers and funnel events used for service operation, abuse prevention and troubleshooting.
• Automated photo checks may record face counts, confidence scores and check outcomes. We do not use these checks to identify you against other people or create an identity-recognition database.

Why we use it

We use this information to provide the service you request, deliver private downloads, send order emails, process support and refund requests, prevent abuse and meet applicable legal obligations. Where applicable, the relevant bases include performance of your requested service, legal obligations, legitimate interests in security and service operation, and consent where required. We do not sell personal information or use your uploaded photos to train our own AI models.

Photo storage and deletion

The source photo is temporarily held on our server to process your order, for up to 30 minutes from upload. The same selfie is used for all four image requests. It is removed when generation finishes or its upload window expires.

Generated images are downloaded from the AI provider and stored privately by OneShot. This lets us provide authenticated downloads, email links and refresh recovery without exposing the provider URL. Each generated JPG is available for up to 24 hours from that individual image's completion.

An automated cleanup runs at server startup and every five minutes. Access expires at the deadline; physical deletion may occur at the next cleanup. We do not maintain a personal image gallery. A provider may independently retain data under its service terms; our deletion window describes OneShot storage, not a guarantee about a third party’s systems.

Reporting a problem does not delete your images, extend their availability or automatically generate replacements. Copies you download to your device are outside our control.

Order, payment, security and support records are separate from photo storage and are not automatically deleted after 24 hours. They may be retained for support, accounting, legal obligations and abuse prevention. Contact us to request deletion; some records may need to be retained where law requires it. Database backups may retain operational records until their backup retention cycle completes. Temporary photo files are not part of our SQLite database backups.

Your browser and analytics

To recover your workflow, the site uses browser session storage and IndexedDB for the selected photo, workflow choices and an order-access credential. Recovery is not an account, may be limited to your browser session, and may fail if you clear browser data. Use a private device and keep order/download links private. Clear site data to remove locally stored information.

This deployment records first-party service and funnel events; Google Analytics is not enabled.

Service providers and international processing

Volcengine Ark processes the source photo to generate the portraits. Resend delivers transactional email when configured. The payment provider named at checkout processes payment and receives order, price, currency and limited customer information, not your selfie or generated portraits from us. Hosting, security verification and optional analytics providers process information needed for their services.

OneShot is independent of the AI model providers and is not endorsed by them. Your data may be processed outside your country; the configured Volcengine Ark endpoint is in China. Provider processing is also subject to the provider’s applicable terms and privacy practices.

Your choices and requests

You can ask to access, correct or delete your information, or raise a privacy concern, by emailing newlifebirdstudio@gmail.com. Include an order ID when relevant, but do not send passwords, card details or identity documents. We may ask for proportionate verification. Rights and complaint options depend on your jurisdiction; nothing here removes applicable statutory rights.

Children and sensitive uses

This service is intended for adults submitting authorized professional-profile photos. Do not submit children’s photos, identity documents, unlawful content or photos you do not have permission to use. OneShot is not an identity-verification or medical service.