Privacy Policy

This policy explains how Reshoot collects and uses your personal data when you use Reshoot. We follow the UK GDPR and the Data Protection Act 2018.

Last updated: 28 July 2026

Who we are

Reshoot, United Kingdom, is the data controller for the personal data described here. For anything privacy-related, email privacy@reshoot.app.

What we collect

  • Account data — your email address, and if you sign in with Google, your Google account identifier and basic profile details.
  • Photos you upload — the item photos you submit and the studio images we generate from them. Please don't upload photos of people or anything containing personal information you don't want processed.
  • Usage and billing data — your credit balance, credit history, generation history and the presets you save.
  • Technical data — IP address, device and browser information and security logs, used to keep the service running and secure.

We do not knowingly collect data from anyone under 16.

Why we use it, and our lawful basis

  • To provide the service (creating your account, processing photos, tracking credits) — performance of a contract with you.
  • To keep the service secure and prevent abuse — our legitimate interests.
  • Optional analytics cookies — your consent, which you can withdraw at any time.
  • To meet legal and tax obligations — compliance with a legal obligation.

We do not sell your personal data, and we do not use your photos to train AI models.

Who we share it with

We use a small number of processors who act only on our instructions: our cloud hosting, database, authentication and storage provider; our AI image processing provider, which generates your studio images; and, when card payments are enabled, our payment provider (we never see or store your card details). Some providers process data outside the UK — where that happens, transfers are covered by the UK International Data Transfer Agreement or UK Addendum to the EU Standard Contractual Clauses.

How long we keep it

Photos and generated images are kept in your account until you delete them or close your account. Account, credit and transaction records are kept for as long as your account is open, and financial records for six years afterwards as UK tax law requires. Delete your account and we'll erase your photos and profile within 30 days, except where we must keep records by law.

Your rights

Under UK data protection law you have the right to access, correct, erase, or receive a copy of your data, to restrict or object to processing, and to withdraw consent at any time. Email privacy@reshoot.app and we'll respond within one month. If you're unhappy with our response you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.

Security and changes

Data is encrypted in transit, photo storage is private to your account, and access is restricted by row-level security rules. If we change this policy we'll update the date at the top and, for significant changes, tell you by email.