Privacypolicy
What we collect, why, who helps us process it, and what you can ask us to do.
The Service is operated by Hongkong Hongzhao Technology Limited, a company incorporated in Hong Kong (company number 77605835).
Last updated: 2026-10-26
01Who is responsible
Hongkong Hongzhao Technology Limited, a company incorporated in Hong Kong (company number 77605835) operates Pershot and is responsible for the personal data described here. Questions go to privacy@pershot.app.
02What we collect
- Account data: your email address and your name if you give it. Sign-in runs on our own system: we keep your sessions and, if you sign in with Google, the account id and the profile details Google shares with us.
- Payment data: handled by Stripe and PayPal. We receive a payment reference and limited card details such as the type and last digits, never the full card number.
- Content: your prompts, uploads, generated outputs and job settings.
- Usage and logs: jobs, your credit ledger, API key usage, device and browser details and IP address.
- Cookies and analytics: the cookies listed under Cookies below. Our own page statistics are sent only to our servers. They carry an anonymous visitor id only if you allow analytics in the EU, EEA and UK, and elsewhere until you choose Only necessary under Cookie choices. Google Analytics 4 and PostHog, if we turn them on, follow the same rule.
- How you found us: we record which of our links or which website first brought you here (in a cookie for up to 30 days, set when you arrive: in the EU, EEA and UK only if you allow analytics, elsewhere unless you chose Only necessary), keep it with your account if you sign up, and use it only to measure our marketing; we do not share it with third parties.
04How we use it
- To run the Service: process jobs, keep your ledger, bill you and prevent fraud and abuse.
- To support you and send service emails such as receipts, low-balance notices and job results.
- To improve the Service using aggregated usage data.
- We do not sell personal data, and we do not use your uploads or outputs to train models.
05Marketing email
- With your consent we send marketing email about three topics you choose one by one: product news, tips and tutorials, and offers. You give it with the unticked box when you sign up, in your account settings, or on the preferences page linked from our emails. Signing up, buying credits or joining the waitlist does not, on its own, make you a subscriber.
- The legal basis is your consent. You can withdraw it at any time, as easily as you gave it: with the unsubscribe link in every marketing email, the unsubscribe button of your email app, your account settings, or the preferences page. Email about your account (sign-in links, receipts, notices) is not marketing and keeps coming, because you need it to use the Service.
- If you joined the waitlist, we send you one email when the studio opens, because you asked for it. After that you get marketing email only if you choose it.
- We keep a record of each choice: when you made it, where, and which version of this policy applied. We send at most two marketing emails in any seven days. Resend delivers our marketing email, as it does our other email, and tells us about bounces and spam complaints; a complaint stops marketing email to that address.
07How long we keep it
We keep account and ledger records while your account is open and for as long as tax and accounting law requires. The files of a result (generated images and videos) are kept for 12 months after it was made and then removed, unless you saved the result to Assets, used it in a project or published it to the community; the record of the job (prompt, settings, cost) stays. We email you about a month before files are removed. Uploads are kept while your account is open. You can ask us to delete uploads or results sooner.
If you make a free image without signing in, we keep its prompt and the image for 24 hours, linked only to the device id cookie (bv_did) and a hashed form of your IP address, so that you can keep it by signing in on the same browser. If you do not sign in within 24 hours, both are deleted.
When you turn a picture or a video into a prompt, the written prompt is kept for one day under a one-way fingerprint of the picture or frames, so the same request gets the same answer without a new analysis. The picture and the frames are not kept, and the video itself never leaves your browser.
08Your rights
Depending on where you live, you can ask to access, correct, export or delete your personal data, and object to or restrict some processing. Write to privacy@pershot.app. You can also complain to your data protection authority.
09International transfers
We are based in Hong Kong SAR, China and work with providers in several countries, including the United States. Where the law requires it, transfers are covered by safeguards such as standard contractual clauses.
10Security
We encrypt data in transit, store API keys only as hashes, and limit and log access. No system is perfectly secure; if you find a vulnerability, tell us at security@pershot.app.
11Children
The Service is not for anyone under 18, and we do not knowingly collect children's data.
12Changes
We will post updates here and tell you about material changes before they take effect.
Contact
The Service is operated by Hongkong Hongzhao Technology Limited, a company incorporated in Hong Kong (company number 77605835).
Registered in: Hong Kong SAR, China