Privacy Policy
Your privacy is important to us
Last Updated: 9/6/2026
Introduction
At ShotBG, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI image transformation service. ShotBG is operated by Jack, an independent individual developer (sole proprietor) based in mainland China, who is the data controller for the personal data described here. For general questions, contact support@shotbg.com; for privacy-specific requests (access, correction, deletion) you may also email legal@shotbg.com.
Information We Collect
We collect information that you provide directly to us:
- Account Information: Email address, name, and password when you create an account
- Payment Information: Processed securely through our payment providers
- Images: Photos you upload for AI transformation
- Usage Data: Information about how you interact with our service
- Device Information: Browser type, IP address, and device identifiers
How We Use Your Information
We use your information to:
- Provide, maintain, and improve our AI image transformation service
- Process your images using AI technology
- Send you technical notices and support messages
- Respond to your comments and questions
- Analyze usage patterns to improve user experience
- Detect and prevent fraud or abuse
Image Privacy & Storage
To remove or replace a background, your uploaded image is processed by third-party AI: Alibaba Cloud (ImageSeg) for background removal, and Google Gemini (via OpenRouter) for custom AI backgrounds. We store images only as long as needed to run and deliver the result: original uploads are automatically deleted about 1 hour after processing, and result images about 24 hours after they are created (a scheduled cleanup job removes them). We do not sell your images or use them to train our own models.
Data Security
We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the internet is 100% secure.
Your Rights
You have the right to:
- Access your personal information
- Correct inaccurate data
- Request deletion of your data
- Object to processing of your data
- Export your data
Third-Party Services & Data Processors
To operate ShotBG we rely on the third-party service providers (data processors) listed below. We share only the data needed for each purpose, and each provider processes that data under its own privacy policy.
| Provider | Purpose | Data shared | Region | Retention | Privacy policy |
|---|---|---|---|---|---|
| Waffo | Payments / merchant of record (billing, tax) | Name, email, payment information | Global | Billing records kept as legally required | View |
| Formspree | Contact form submissions | Name, email, message | USA | Per Formspree's policy | View |
| Alibaba Cloud (ImageSeg) | Background removal processing | Uploaded images | Global / Asia | Not retained by us beyond ~1h (originals) / ~24h (results) | View |
| Google (Gemini via OpenRouter) | Custom AI backgrounds (Pro) | Uploaded images, text prompt | Global / USA | Per provider's policy | View |
| Google Tag Manager | Tag management | Usage/device data, cookies | USA | Per Google's policy | View |
| Google Analytics 4 | Aggregated website usage measurement | Usage/device data, cookies | USA | Per Google's policy | View |
| Microsoft Clarity | Product analytics / session insights | Usage/device data, cookies | USA | Per Microsoft's policy | View |
| Ahrefs Web Analytics | Privacy-focused, aggregated traffic measurement (cookieless; loaded only after analytics consent) | Aggregated page/referrer data | USA / EU | Per Ahrefs' policy | View |
| Vercel | Hosting / CDN | Request logs, IP address | Global / USA | Logs per Vercel's policy | View |
| Cloudflare (R2 + Turnstile) | Object storage + bot verification | Images, IP address, verification token | Global / USA | Images ~1h/~24h; verification per Cloudflare policy | View |
| Resend | Transactional & newsletter email | Email address | USA | Per Resend's policy | View |
| Google / GitHub OAuth | Sign-in | Account identifier, email | USA | Kept while your account is active | View |
Contact form: when you message us through our contact form, your name, email address, and message are processed by Formspree (USA) to deliver the submission to us.
Analytics & tag management: Google Tag Manager and Google Analytics 4 measure usage, while Microsoft Clarity and Ahrefs Web Analytics provide aggregated session and traffic insights. Non-essential analytics (Microsoft Clarity and Ahrefs) are not loaded until you accept analytics; before you choose, or if you decline, they do not run. Google tags respect Consent Mode and stay in a cookieless, non-personalized state until you accept. You can change your choice anytime from the cookie preferences control on our Cookie Policy page.
Children's Privacy
Our service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13.
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date.
Contact Us
If you have any questions about this Privacy Policy, please contact us at support@shotbg.com.