Last updated: 2026-09-22
Exponee is operated by Zhou Yue, an individual (sole trader).
Privacy contact: support@exponee.com
Account data: your email address and password (stored securely).
Uploaded photos: the images you submit to generate headshots.
Generated content: the AI-generated headshots and banners created from your photos.
Payment data: processed by our payment provider (Waffo). We do not store your full card details.
To generate AI headshots from your uploaded photos.
To process payments and manage credits.
To send service emails (e.g., password reset, generation completion).
To improve and secure our services.
Photos you upload are processed to create your images and are not retained after generation completes.
Generated images are stored on our secure server and automatically deleted after a fixed retention period based on your plan: 30 days for free accounts, 90 days for Basic, 180 days for Pro, and 365 days for Business members. No images are retained indefinitely.
Your data is stored and processed on servers located in the United States. AI generation uses third-party AI model infrastructure (Alibaba Cloud DashScope).
We do not use your photos or generated images to train AI models. Your content is used solely to generate the images you request.
Data in transit is encrypted with TLS, and stored data is encrypted at rest. We implement reasonable technical and organizational measures to protect your data.
We email you about 7 days before your images expire so you can download them.
You may request deletion of your data at any time by contacting us; we will delete it promptly and not later than 30 days from your request.
We process your personal data in accordance with the EU General Data Protection Regulation (GDPR). Legal bases for processing include your consent (for uploaded photos) and performance of a contract (for providing the service and payments).
Data is stored and processed on servers in the United States. Where data is transferred from the EU/EEA, we rely on appropriate safeguards, including Standard Contractual Clauses (SCCs), to ensure an adequate level of protection.
We do not sell your personal data and do not use it for automated decision-making that produces legal effects.
Access, correct, or delete your personal data.
Withdraw consent for processing at any time.
Request data portability — receive your data in a structured, machine-readable format.
Contact us at support@exponee.com for any privacy request, and we will respond within 30 days.
We do not sell your personal information, as 'sell' is defined under applicable laws such as the CCPA.
The service is intended for users aged 18 or older. We do not knowingly collect information from anyone under 18.