Privacy Policy

Introduction

Welcome to HeadshotMarketing. HeadshotMarketing is operated by Headshot Marketing Private Limited ("we," "our," or "us"), a company incorporated in India and part of the Burdenoff Group. We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information — including the marketing and customer data you manage — when you use our website and application (collectively, the "Platform").

By using HeadshotMarketing, you consent to the data practices described in this policy. If you do not agree with our policies and practices, please do not use our Platform. The canonical version of this policy lives at headshotmarketing.com/privacy and in the HeadshotMarketing specs repo.

Information We Collect

Personal Information

• • Account Information: Name, email address, and password
• • Marketing & Customer Data: The contacts, audiences, content, and campaigns you create or import to run on the Platform
• • Profile & Workspace Information: Profile details, team or workspace membership, brand settings, and preferences
• • Billing Information: Billing identifiers, processed by our payment providers (we do not store full card numbers)

Usage Information

• • Device Information: Device type, operating system, browser, and identifiers
• • Usage Data: Campaigns run, features used, and interactions with the platform
• • Communication Data: In-app messages and customer-support interactions

How We Use Your Information

• • Service Delivery: To run your campaigns, automations, and reporting from the data and inputs you provide
• • Billing: To process payments via our payment providers
• • Communication: To send product updates and important notifications
• • Personalization: To apply your brand settings and improve your experience
• • Safety & Security: To prevent abuse and ensure platform safety
• • Analytics: To understand usage patterns and improve our services
• • Legal Compliance: To comply with applicable laws and regulations

Information Sharing and Disclosure

We do not sell, trade, or rent your personal information. We may share your information in the following circumstances:

• • With Service Providers: Cloud infrastructure, AI/model, payment, and analytics providers (see our Subprocessors page)
• • Within Your Workspace: Assets and activity are visible to members of your team or workspace per the roles you configure
• • For Legal Reasons: When required by law or to protect our rights and safety
• • Business Transfers: In case of merger, acquisition, or sale of assets
• • With Consent: When you explicitly agree to share your information

Data Security

We implement industry-standard security measures to protect your information:

• • End-to-end encryption for sensitive data
• • Secure SSL/TLS connections
• • Regular security audits and penetration testing
• • Payments handled by a PCI-DSS-compliant payment provider
• • Access controls and authentication mechanisms
• • Regular employee training on data protection

Your Rights and Choices

You have the following rights regarding your personal information:

• • Access: Request a copy of your personal data
• • Correction: Update or correct inaccurate information
• • Deletion: Request deletion of your account and associated data
• • Portability: Receive your data in a structured, machine-readable format
• • Opt-out: Unsubscribe from marketing communications
• • Consent Withdrawal: Withdraw consent for data processing where applicable

Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience:

• • Essential Cookies: Required for platform functionality
• • Analytics Cookies: Help us understand usage patterns
• • Preference Cookies: Remember your settings and preferences
• • Marketing Cookies: Deliver relevant advertisements

You can manage cookie preferences through your browser settings.

Children's Privacy

HeadshotMarketing is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.

Data Residency and International Transfers

All Customer Data is stored in India by default — backend services and frontend assets run on cloud infrastructure in Mumbai, India. Some operational metadata transits Cloudflare's global edge, and international billing data is processed by Stripe (US / EU). For transfers out of the EEA, UK or Switzerland we rely on Standard Contractual Clauses incorporated into our Data Processing Addendum.

Data Retention

We retain your personal information for as long as necessary to provide our services and comply with legal obligations. When information is no longer needed, we securely delete or anonymize it.

Updates to This Policy

We may update this Privacy Policy periodically. We will notify you of material changes through the Platform or via email. Your continued use of HeadshotMarketing after changes indicates acceptance of the updated policy.

Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us:

Grievance Officer

In accordance with the Information Technology Act 2000 and rules made thereunder, the contact details of the Grievance Officer are provided below: