Privacy Policy

Shotless Ltd. ("Shotless", "we", "us", or "our"), with registered address at 97M Simeonovsko Shose Blvd., Sofia, Bulgaria (Company ID: 208664261), is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website shotless.co and our AI-powered product photography services.

We collect information you provide directly to us:

Personal Information:

• Name and email address
• Company name (optional)
• Phone number (optional)
• Communications with our team

Project Data:

• Product photos you upload
• Project briefs and brand guidelines
• Feedback and revision requests

Automatically Collected Data:

• IP address and device information
• Browser type and settings
• Pages visited and interaction data
• Referral source

We use the collected information to:

• Provide, maintain, and improve our services
• Process and fulfill your orders
• Communicate with you about projects, updates, and support
• Send marketing communications (only with your consent)
• Analyze usage patterns to improve user experience
• Comply with legal obligations
• Protect against fraudulent or unauthorized activity

We do not sell your personal information. We may share your data with:

Service Providers:

• Vercel (hosting and analytics)
• Resend (email delivery)
• Cal.com (appointment scheduling)
• Google Analytics (website analytics)

Legal Requirements:

We may disclose information if required by law or to protect our rights, privacy, safety, or property.

Business Transfers:

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.

We retain your personal data for as long as necessary to provide our services and fulfill the purposes outlined in this policy:

• Project data and deliverables: 3 years after project completion
• Account information: Until you request deletion
• Communication records: 3 years after last interaction
• Analytics data: 26 months (Google Analytics default)

After these periods, data is securely deleted or anonymized.

Your data is stored and processed within the European Union. We use service providers that comply with GDPR requirements. If any data transfer outside the EU is necessary, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses.

Under GDPR and Bulgarian data protection law, you have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your data ("right to be forgotten")
• Restriction: Limit how we process your data
• Portability: Receive your data in a structured, machine-readable format
• Object: Object to processing based on legitimate interests
• Withdraw consent: Withdraw consent for marketing communications at any time

To exercise these rights, contact us at legal@shotless.co. We will respond within 30 days.

We implement appropriate technical and organizational measures to protect your personal information:

• Encrypted data transmission (HTTPS/TLS)
• Secure cloud infrastructure with access controls
• Regular security assessments
• Employee training on data protection

While we strive to protect your data, no method of transmission over the Internet is 100% secure.

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. We encourage you to review this policy periodically.

If you have any questions about this Privacy Policy or our data practices, please contact us:

Shotless Ltd.

97M Simeonovsko Shose Blvd.

Sofia, Bulgaria

Email: legal@shotless.co