Legal

Privacy policy

Last updated 9 October 2026

iShot ("we", "us") is an AI photo and film studio operated from New Zealand. This policy explains what personal information we collect when you use ishot.co.nz, why we hold it, and who we share it with. We handle personal information under the New Zealand Privacy Act 2020.

What we collect

Account details. When you sign in with Google we receive your Google account identifier, email address, name and profile picture. We never see your Google password, and we don't ask Google for anything beyond those basic profile details.
Your content. The photos you upload, any prompt or direction you type, and the images and videos generated from them.
Usage records. Your credit balance and transaction history, which shoots you've liked or viewed, and ordinary server logs (IP address, browser type, timestamps) kept for security and debugging.
Payment records. Confirmation that a purchase succeeded, the amount, and the Stripe reference. We never receive or store your full card number — Stripe handles the card details directly.

Why we hold it

To run the renders you ask for and keep them in your gallery.
To track your credit balance and process purchases and refunds.
To email you when a render is ready, and to answer support requests.
To detect abuse and fraud, and to meet our legal and tax obligations.

We do not sell personal information, and we do not use your photos or generated results to advertise to you.

Who we share it with

We use a small number of service providers who process data on our behalf. Most are based in the United States, so your information is stored and processed overseas.

xAI — your uploaded photo, references and direction are sent to Grok to plan the shoot and write the render prompts, and for image compositing where applicable.
Kling — image compositing where applicable, and video generation from the opening image and video prompt.
Google — account sign-in.
Stripe — payment processing.
Resend — the transactional emails telling you a render is ready.
Render and Cloudflare — hosting, storage and delivery of the site.

We may also disclose information where the law requires it.

What's public and what isn't

Shoots created on your own account are private by default. They become publicly visible only when you turn on sharing for that shoot, which puts the images, video and shoot title in the public gallery for anyone to see. You can turn sharing off again, or delete the shoot outright, at any time from your gallery.

Shoots created at an event or kiosk — where nobody is signed in — are public from the start, so they can be shown on the event gallery.

Cookies

We set one essential cookie to keep you signed in and to protect forms against cross-site request forgery. There are no advertising cookies and no third-party analytics or tracking scripts on this site.

How long we keep it

Your shoots and their files stay until you delete them or close your account. Deleting a shoot removes its files and its like and view records.
When you extend a video, the superseded version is deleted automatically after 48 hours.
Purchase and credit records are kept for seven years, as New Zealand tax and company record-keeping rules require.

Your rights

You can ask us for a copy of the personal information we hold about you, ask us to correct it, or ask us to delete your account and its content. Email luke.fraserbrown04@gmail.com and we'll respond within 20 working days. You can delete individual shoots yourself from your gallery at any time.

If you're unhappy with how we've handled your information you can complain to the Office of the Privacy Commissioner at privacy.org.nz.

Security

The site is served over HTTPS, sign-in is delegated to Google, and payment details never touch our servers. No system is perfectly secure, so please don't upload anything you would be harmed by losing or having exposed.

Children

iShot isn't intended for people under 16. If you believe a child has given us personal information, email us and we'll delete it.

Changes

If we change this policy we'll update the date at the top of this page, and we'll tell you by email if the change materially affects you.

Questions about this page? Email luke.fraserbrown04@gmail.com.