# Data and privacy

Source: https://docs.foodshot.ai/policies/data-privacy

> What we process, how long we keep it, and what happens if something goes wrong.

Servers and storage: USA. Operations: Türkiye. Image-generation sub-processors may process or cache data in other countries. We do not train models on your images; a sub-processor may use only anonymised, aggregated usage data.

A data processing agreement is available on request at [hello@foodshot.ai](mailto:hello@foodshot.ai).

## What we process

* **Photos** you send. We turn them upright and resize them to at most 2,048 px. Vendor photos can contain personal information, such as faces.
* **What you send with them:** `instruction` and `metadata`.
* **Results** made from your photos.
* **Account data:** your contacts, the people who use the dashboard and your webhook settings.
* **Logs** of requests. They record key ids, never keys, photos or `metadata` values.

We use all of it only to provide the API to you.

## How long we keep it

| Data                                              | Kept for                             | Fully deleted within   |
| ------------------------------------------------- | ------------------------------------ | ---------------------- |
| Photos sent with a live key                       | 7 days                               | About 8 days           |
| Photos sent with a test key                       | Never stored                         | Not applicable         |
| Results                                           | 30 days                              | About 31 days          |
| Generation records (status, settings, `metadata`) | 90 days                              | About 98 days          |
| Webhook events                                    | 30 days                              | About 38 days          |
| Dashboard sign-in accounts                        | Until the person's access is removed | When access is removed |
| Logs                                              | 30 days                              | 30 days                |

"Fully deleted" includes our recovery copies. At the end of your contract, or when you ask in writing, we delete your account's remaining data within 7 days, and the recovery copies 7 days later. Image-generation sub-processors may keep copies for a limited time under their own terms, for example to detect abuse.

We also keep a few records of our own: the credit ledger (credits added and used, no photos) as long as accounting law requires, who accepted the API Terms for the term of the agreement and 3 years after it, and an audit log of changes to your account for 13 months.

## What we never do

* Train models on your images.
* Sell your data, or use it for anything other than providing the API to you.
* Show your photos or results in FoodShot's own apps or website.
* Remove the invisible AI watermark from results.

## How we protect it

* All traffic uses HTTPS, and stored data is encrypted.
* Photos and results are never public. A result can only be reached through its signed link, which expires after 24 hours.
* We remove all metadata from photos before processing, including camera and location data.
* We store only a hash of each API key.
* Partner data is kept apart from FoodShot's consumer apps, and only the staff who run the service can access it.

## Your part

* **Consent.** Make sure your vendors agree to their photos being processed by FoodShot and its sub-processors, including outside their own country.
* **Adults only.** Offer the feature only to vendors who are 18 or older.
* **Opaque ids only.** No names, emails, phone numbers or addresses in `metadata`, and no personal information in `instruction`.
* **The dish alone.** Ask vendors to photograph the dish without people. It gives better results and keeps personal information out.
* **Your own copies.** Keep the results you need: ours are deleted after 30 days.

## If something goes wrong

A security incident is any access to, use, disclosure or loss of your data that isn't authorised, or an attempt at it, including a leaked key or secret of yours and one account's data shown to another. If we find or suspect one, we:

1. contain it, for example by revoking keys, rotating secrets or pausing new jobs;
2. email your privacy and technical contacts without delay, at most 24 hours after we discover it, with what happened, which data was affected, the time window, what we have done and who to contact;
3. follow up within 72 hours with what we have learned since.

You decide whether to notify regulators or the people concerned, and we help you with the facts.

## Sub-processors

We use sub-processors for cloud hosting and image generation. The data processing agreement lists them by function and country; ask for it at [hello@foodshot.ai](mailto:hello@foodshot.ai). If your counsel needs their names, we share them under a confidentiality agreement.

## AI marking

Results are marked as AI-generated: the pixels carry an invisible AI watermark, and the file's metadata carries the IPTC digital source type `trainedAlgorithmicMedia`.