Legal

Privacy Policy

Effective date: April 23, 2026·Last updated: April 23, 2026

01Who we are

Brew Shots ("we," "us," or "our") operates the platform at brewshots.ai. We provide AI-powered product photography and video generation services for e-commerce clothing brands.

This Privacy Policy explains what information we collect, why we collect it, and how we protect it. By creating an account or using Brew Shots, you agree to the practices described here.

02What data we collect

We collect only what is necessary to provide our service.

CategoryWhat we collectHow we get it
Account informationName, email address, profile photoWhen you sign in with Google or register directly
Product imagesClothing photos you upload to generate a photoshootWhen you use the platform
Generated contentAI-produced photos and videos created from your uploadsProduced automatically during each generation
Payment informationBilling name, email, card type and last 4 digits, transaction history, Brew Bucks balanceWhen you purchase Brew Bucks. Raw card details are handled solely by Stripe — we never see or store them.
Usage dataGenerations completed, Brew Bucks spent, features used, download activityAutomatically as you use the platform
Technical dataIP address, browser type, device type, session dataAutomatically via server logs and strictly necessary cookies

03How we use your data

We use your information to:

  • Provide the service — process your uploads, run AI generation, and deliver your photos and videos
  • Display your gallery — show uploaded product images alongside generated content so you can identify each shoot
  • Manage your account — authenticate you, maintain your Brew Bucks balance, and display generation history
  • Process payments — charge your card via Stripe, issue receipts, and handle refunds
  • Send transactional emails — account confirmation, payment receipts, and generation completion notices
  • Send marketing communications — product updates, tips, and promotional offers (you may opt out at any time; see Section 6)
  • Prevent fraud and abuse — detect unusual activity and protect other users
  • Improve the platform — understand how features are used and improve AI output quality
  • Meet legal obligations — respond to lawful requests from authorities

04Third-party services

We share data with trusted third-party providers only as needed to run the platform. Each provider is contractually bound and may not use your data for any purpose beyond delivering their service to us.

ServicePurposeData shared
Google (Sign-In)AuthenticationName, email, and profile photo from your Google account
StripePayment processingBilling name, email, and payment method. Stripe is PCI-DSS Level 1 certified.
Third-party AI providersImage analysis, photo generation, and video generationYour uploaded product images are sent to trusted AI infrastructure providers to perform generation. These providers are contractually prohibited from using your content to train their own models.
Cloud storage providerStoring and delivering your images and generated contentUploaded product images and generated photos/videos
Database infrastructureStoring account, usage, and generation recordsAccount information and usage metadata

We do not share your data with advertisers or data brokers.

05How long we keep your data

DataHow long we keep it
Uploaded product imagesUntil you delete your account. We keep these so your gallery correctly shows which photoshoot belongs to which product.
Generated photos and videosUntil you delete your account. This is the content you paid for — it remains accessible as long as your account is active.
Account informationUntil you delete your account
Brew Bucks transaction historyRetained permanently, even after account deletion, as required for financial recordkeeping and payment dispute resolution
Technical and security logsUp to 90 days

06Marketing communications

With your consent, we may send you emails about new features, tips for getting better results, and promotional offers for Brew Bucks.

You can opt out at any time by clicking the unsubscribe link in any marketing email, or by emailing us at hello@brewshots.ai with the subject line "Unsubscribe."

Opting out does not affect transactional emails such as payment receipts and account notices — we will continue to send those as they are necessary to provide the service.

07Cookies and tracking

We currently use only strictly necessary cookies — the kind you do not need to consent to under GDPR, the UK ePrivacy Regulations, or India's DPDP Act, because they are required to deliver the service you asked for. Specifically:

  • Authentication cookies — set by our authentication provider to keep you signed in across pages and devices.
  • Payment cookies — set by Stripe on the checkout flow for fraud prevention and to complete your purchase. See Stripe's privacy policy for details.

We do not currently use analytics cookies, advertising cookies, marketing pixels, session-replay tools, or cross-site tracking. If we add any non-essential cookies in the future, we will introduce a cookie consent banner first and you will be asked to opt in before any of them are set.

You can clear or block cookies in your browser settings, but blocking the authentication or payment cookies above will prevent you from signing in or completing a purchase.

08Security

We take reasonable technical and organizational steps to protect your data, including:

  • Encrypted data transmission (HTTPS/TLS) on all connections
  • Access controls limiting which team members can access user data
  • Rate limiting and fraud detection to prevent unauthorized access
  • Payment processing via Stripe, which is PCI-DSS Level 1 certified

No system is completely secure. If you believe your account has been compromised, contact us immediately at hello@brewshots.ai.

09Your rights (GDPR & CCPA)

Depending on where you live, you may have the following rights over your personal data:

  • Access — request a copy of the personal data we hold about you
  • Correction — ask us to fix inaccurate or incomplete information
  • Deletion — request that we delete your personal data. The quickest way is to delete your account directly from your account settings.
  • Portability — request your data in a machine-readable format
  • Objection — object to how we process your data in certain circumstances
  • Opt-out of sale — we do not sell personal data, so this right is already satisfied

To exercise any of these rights, email us at hello@brewshots.ai. We will respond within 30 days. We may need to verify your identity before processing your request.

If you are in the European Economic Area and believe we have not handled your data lawfully, you have the right to lodge a complaint with your local data protection authority.

10Children's privacy

Brew Shots is intended for businesses and professionals. We do not knowingly collect personal information from anyone under the age of 18. If you believe a minor has created an account, please contact us at hello@brewshots.ai and we will delete it promptly.

11Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. For significant changes, we will notify you by email or by displaying a notice in the platform before the change takes effect.

Your continued use of Brew Shots after a policy update constitutes your acceptance of the revised policy.

12Contact us

If you have questions about this Privacy Policy or how we handle your data, please reach out:

Brew Shots

Email: hello@brewshots.ai

Website: brewshots.ai