Privacy Policy

1. Who we are

ShotSync.ai is operated by Photoworks Sydney Pty Ltd (“we”, “us”, “our”). We provide a post-production automation platform for fashion eCommerce brands, accessible at shotsync.ai. For privacy enquiries, contact us at hello@shotsync.ai.

2. What data we collect

• Account data: name, email address, organisation name, and billing details provided at signup.
• Usage data: pages visited, features used, export jobs created, and browser/device information collected via server logs.
• Uploaded images: product images you upload for processing. These are used solely to perform the service and are not shared with third parties.
• Payment data: handled entirely by Stripe. We do not store card numbers or banking details.

3. How we use your data

• To provide, operate, and improve the ShotSync.ai platform.
• To send transactional emails (account creation, billing receipts, onboarding).
• To respond to support requests.
• To comply with legal obligations.

We do not sell your data to third parties or use uploaded images to train AI models.

4. How your images are handled

Your product images never leave your device during normal use. ShotSync.ai processes images entirely within your browser — clustering, renaming, resizing, and export packaging all happen locally. Images are stored in your browser's local storage (IndexedDB) for the duration of your session and are never uploaded to our servers as part of the standard workflow.

There are two specific exceptions where image data temporarily leaves your device:

• Background removal — if you use the background removal feature, a compressed copy of the relevant image is transmitted to an AI processing provider to perform the removal. The image is processed and returned immediately and is not retained by the provider.
• Shopify draft creation — if you push draft listings directly to Shopify, processed images are temporarily uploaded to a private staging area to generate the required URLs for the Shopify API. These temporary files are deleted immediately after the Shopify upload completes.

Account data (name, email, organisation, billing history) is stored securely in cloud infrastructure hosted in Australia. We use TLS encryption in transit and encryption at rest for all stored data.

5. Third-party service providers

To operate the platform, we engage third-party service providers who process data on our behalf. We only share data necessary for each provider to perform their specific function and do not authorise any provider to use your data for their own purposes.

• Cloud infrastructure and hosting — account data, session data, and application logs are stored and served via cloud hosting providers. Data is stored in Australia where available.
• Payment processing — billing and subscription payments are handled by a PCI-compliant payment processor. We do not store card numbers or banking details.
• Transactional email — your email address is shared with an email delivery provider solely to send account and billing notifications.
• AI processing — where you use AI-powered features (product copy generation, background removal), the minimum necessary data — such as product specifications or a single compressed image — is transmitted to an AI provider to perform the requested task. Images are not retained by the provider or used for model training.
• Error monitoring — anonymised error and performance data may be shared with an application monitoring service to help us identify and resolve bugs. This may include browser type and general usage context but does not include your images or brand assets.
• Analytics — anonymised traffic and feature usage data is collected by a web analytics service. This data is not linked to individual accounts and does not include image data.

A current list of our specific sub-processors is available on request — email hello@shotsync.ai.

6. Your rights

Under Australian Privacy Law and where applicable GDPR, you have the right to access, correct, or delete your personal data. To exercise these rights, email hello@shotsync.ai.

7. Cookies

We use essential session cookies for authentication. We do not use tracking or advertising cookies.

8. Changes to this policy

We may update this policy from time to time. Significant changes will be notified by email. Continued use of the platform after changes constitutes acceptance.