Privacy policy

Studioless is a service of AboutUsAgency Inc. (“we”, “us”). We make passport, visa and ID photos from your own photo, AI-generated professional headshots, and, with Studioless Restore, restore old photos and make memorial and pet portraits. This policy explains what personal information we handle when you use getstudioless.com, and what you can do about it.

We sell a service, not your data. We do not have customer accounts: your order link is the key to your order, so keep it private.

We collect only what we need to make and deliver your photos and to run the business.

We do not ask for government ID numbers, dates of birth, or passport application details, and we do not collect your precise location.

• To crop, check and deliver your passport or ID photo, and to generate the headshots you order.
• To restore the photo you send to Studioless Restore, show you previews, deliver your files and handle redos and refunds.
• To take payment, send your order link and shipping updates, and mail printed photos.
• To email you a link back to the photo check, once, when you ask for it.
• To ask every buyer how it went: on the order page, and in one email a few days after the order. Your answers show us what to fix. Ratings are published only as totals once enough buyers have answered, and what you write only if you say we may quote it.
• To answer support requests and honor refunds and guarantees.
• To keep the service secure: rate limiting, fraud prevention and fixing errors.
• To understand which pages and steps work, in aggregate, and, only if you have not opted out, to measure our ads, including telling Google Ads that a visit from one of its ads led to a purchase.
• To meet legal obligations such as tax records and keeping proof of consent.

Passport and ID photos. After you agree to the notice, face detection runs in your browser to crop and check your photo. Those face measurements never reach our servers. Your finished photo is uploaded when you tap Pay, and the uncropped original too where the document’s online form asks for it. If you decline, you can crop by hand with no face detection at all. If you tap “Think the check is wrong?”, we receive which check it was and, for a framing check, how many pixels the crop ran past the photo’s edge: a count of pixels, not a measurement of your face.

AI headshots. Your selfies go to our AI image provider (the OpenAI API, Google’s Gemini API or fal.ai), whose models analyze your face to create the headshots. Finished headshots, never your selfies, may be checked for visual defects by Anthropic, PBC or OpenAI, L.L.C.

Studioless Restore. We restore the photo you send on our own computer in South Korea, which deletes its copy right after the results are uploaded. To restore faces and check the likeness, our software measures the faces in the photo there; those measurements are never stored, never sent to OpenAI, and are discarded within minutes. A person on our team checks every result before it is sent to you. Reference photos you add may show other people; they are seen only by our team and deleted with the order.

AI image processing by OpenAI (Studioless Restore). As part of any restore order (you agree to this on the order form), we may send the whole photo you want restored (which may show your face or the faces of relatives or others), with our editing instructions, to OpenAI OpCo, LLC through the OpenAI API, so that its AI model can repair it (and, if you ordered color, colorize it). We never send your email, your notes, your reference photos or face measurements. OpenAI processes the photo as our service provider under its Services Agreement and Data Processing Addendum. Under those terms OpenAI doesn’t sell or share the data and uses it only to provide the service, comply with the law, enforce its policies and prevent abuse. OpenAI doesn’t use API data to train its models unless a customer opts in, and we don’t. OpenAI automatically screens images for safety and may keep the photo and the result for up to 30 days for abuse monitoring, or longer where the law requires it, to protect its services or others from harm, or for content that breaks its policies. Only authorized OpenAI personnel and contractors who review for abuse can access them, and OpenAI reports apparent child sexual abuse material to the National Center for Missing & Exploited Children. OpenAI and its sub-processors may process the photo in the United States and other countries (see OpenAI’s sub-processor list). The restored image comes straight back to us. Restored files may carry content-provenance information (C2PA Content Credentials or an invisible watermark) showing that an OpenAI model processed them; it contains no name, account details or our instructions. OpenAI’s own privacy policy doesn’t cover this processing; this policy does. Send any request to see or delete your data to us; copies held by OpenAI are deleted on its schedule above. Photos sent to us under an earlier version of the Restore consent, which said photos weren’t sent to outside AI services, are never sent to OpenAI.

Never used to train AI. We do not use your photos to train AI models, and our providers may not use them to train theirs. We never sell, lease or trade photos or face data. We never use them to identify you, to infer anything about you, or in our marketing.

Face images count as sensitive personal information under some laws. We use them only to provide the service you asked for, which is a permitted purpose, so there is nothing to “limit”. The full rules are in our biometric data policy. Washington residents, see our consumer health data policy.

Service providers. Companies that host the site, store files, take payments, send email, generate headshots, repair Studioless Restore photos and run the checks above. They process data only on our instructions, under written terms. The current list, with what each one receives, is on our subprocessors page.

Advertising and analytics pixels. We may use Google Analytics, the Google Ads conversion tag and the Meta Pixel to measure visits and purchases. Under some state laws that can count as “sharing” or “targeted advertising”. These pixels never receive photos, face data, file names, your email or order links, and they do not load at all if you opt out or your browser sends Global Privacy Control. Google Analytics and the Meta Pixel do not load on order pages.

Google Ads conversions. If you came from a Google ad, the Google Ads tag keeps the ad’s click ID in a cookie on this site. When you pay, it runs once on your order page and tells Google that the click led to a purchase: the click ID, the amount and currency, and a code made from the order that is not your order number. It is told the page’s address with the order link removed, and it is not used for personalized ads.

Legal reasons. If the law, a court order or a valid legal process requires it, or to protect people from harm or fraud.

Business transfer. If AboutUsAgency Inc. is sold or merges, this policy continues to apply to the information transferred.

We do not sell personal information for money, and we never sell or share photos or face data.

Deletion is automatic: a scheduled job removes expired files every hour. Download what you want to keep before your files expire.

Cookies and similar storage

Depending on where you live, you can ask us to:

• tell you what personal information we have about you and give you a copy;
• delete it, including from our service providers;
• correct it;
• stop selling, sharing or using it for targeted advertising (see the next section);
• withdraw a consent you gave, such as the face-data consent.

To make a request, use the support form (choose “Privacy request”) or email support@getstudioless.com. Because we have no accounts, we verify requests by email and, where it applies, your order link. An authorized agent can act for you with your signed permission. We answer within 45 days and do not charge a fee or treat you differently for using your rights.

If we decline your request, you can appeal by replying to our answer with “Appeal” in the subject. We will respond within 60 days and, if we still decline, tell you how to contact your state attorney general.

You can switch off advertising and analytics pixels, the Google Ads conversion tag included, on the Your Privacy Choices page. The choice is saved in your browser.

Every finish-later and review-request email has a “Never email me again” link. Renewal reminders have their own unsubscribe link. Emails about an order you paid for, such as your receipt or a refund, are always sent.

We honor Global Privacy Control. If your browser or extension sends a GPC signal, we treat it as a request to opt out of sale, sharing and targeted advertising, and the pixels never load. Cookieless Vercel Web Analytics stays on because it does not build a profile of you or follow you across sites.

This section covers the California Consumer Privacy Act as amended by the CPRA. In the last 12 months we collected the categories below, from the sources and for the purposes described above, and kept each for the periods in section 6.

We do not knowingly sell or share the personal information of consumers under 16.

Residents of Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, Virginia and other states with privacy laws have the rights in section 7, including the right to appeal. We process face images only with your consent.

• Illinois, Texas, Colorado and other biometric laws: biometric data policy.
• Washington (My Health My Data Act): consumer health data policy.
• Nevada: we do not sell covered information as defined by Nevada law.

Studioless is not directed to children under 13 and we do not knowingly collect information from them. A parent or legal guardian may take and order a passport photo for their child; the parent is our customer and gives consent. AI headshots are for adults 18 and older only, showing only themselves. Studioless Restore orders are placed by adults 18 and older; an old photo may show children, with the permission the restore consent describes.

If you think a child gave us information, write to support@getstudioless.com and we will delete it.

• Everything travels over HTTPS. Files sit in private storage and are served only through your order link, and only after payment.
• We strip location and camera metadata (EXIF, GPS) from every stored image.
• Photos and face data are never written to logs, analytics or error reports. We do not use session recording tools.
• Order links are long random keys. Anyone with the link can see the order, so do not post it publicly.
• If a breach affects your information, we will tell you and the authorities as the law requires.

We and our service providers process data in the United States. If you use Studioless from elsewhere, your information is transferred there.

Two exceptions, for Studioless Restore only: we restore photos on our own computer in South Korea, which deletes its copy right after the results are uploaded; and OpenAI and its sub-processors may process the photo in the United States and other countries (you agree to this on the order form).

When we change this policy we update the date at the top. If a change affects how we use photos or face data, we will ask for your consent again before it applies to you.

AboutUsAgency Inc., email support@getstudioless.com, or use the support form.