Your account and photo studio
The studio uses your email address to identify your account, send sign-in codes and associate your credit balance with your purchases. Profile details and uploaded selfies help prepare portrait requests.
Source photos and generated results are stored using Cloudflare infrastructure. To generate a portrait, source images and the selected instructions are sent to the configured image provider, currently OpenAI. We do not promise immediate or automatic deletion of studio uploads.
Payments
Stripe processes web payments. Charmshots stores order identifiers, purchase status and credit amounts so it can apply purchases to your account. Card details are collected by Stripe rather than stored in Charmshots’s application database.
The editing and format desks
The crop, resize, brightness and format tools process the file in your browser. Selecting a file in those tools does not upload it to the photo studio. Downloaded copies are saved through your browser.
Cookies and service logs
The studio uses a session cookie to keep you signed in. Hosting and service providers may process technical information such as request details and errors to operate the service. Google Tag Manager loads Google Analytics 4 and our Matomo instance at tracking2.lindoai.com to measure page visits and navigation. These services may use analytics cookies and process device, browser and network information. Pageview URLs exclude query strings and fragments. We do not send uploaded photos, search results, email addresses or sign-in codes as analytics event data.
Connected AI apps and MCP
After you approve an OAuth connection, the selected AI client can read your account profile and, with photo-read permission, your existing photoshoot status, photo metadata and signed-in download links. Those results are shared with that client to answer your requests and are subject to its privacy and retention settings. The connector cannot generate photos, spend credits or read another account.
Cloudflare hosts the connector and stores OAuth registrations, grants and token records. Access tokens last one hour, refresh tokens up to 30 days, and pending consent 10 minutes. Revoke access on the connected apps page. Revocation stops further access but does not delete studio records or copies already shared with a client. The isolated reviewer workspace contains synthetic metadata only; its login sessions expire after one hour.
Questions and deletion requests
For questions about your account or a request to remove stored studio data, contact Contact us. Include the email used for your account; do not send payment card details.