F Finishery

Privacy Policy

Last updated: 20 August 2026

Finishery is operated by Late Shift LLC, a Florida limited liability company. This policy covers finishery.com and every tool hosted on its subdomains, including headshots.finishery.com.

What we collect

How your photos are used

An uploaded photo is sent to our image-generation provider, MuAPI, for the sole purpose of producing your results. Your photos are not used to train any model of ours, are not sold, and are not shown to other users. Generated images are stored so you can find them in your gallery later.

Deleting your data

Email support@finishery.com from the address on your account and we will delete your account, your uploads, and your generated images. We aim to complete deletions within 30 days. Purchase records may be kept longer where tax or accounting law requires it.

Who we share data with

Only the service providers needed to run the product:

We have never sold personal information, and we do not. California law draws a second line, though, between selling data and sharing it for advertising that follows you between sites — and sending Meta or Google a hashed email so they can measure our ads is sharing in that sense, even though no money changes hands and no list of customers leaves our hands. So: we do not sell your information, and we do share it for advertising measurement. The next two sections say exactly what that involves and how to stop it.

Cookies

We use cookies to keep you signed in. We also use advertising cookies from Meta and Google, described in the next section, so that we can tell which of our ads actually work. One of those cookies is our own: if you arrive from a Google ad we store the click identifier Google attaches to the link, under the name _fy_gclid, for ninety days.

Advertising and measurement

We advertise on Facebook and Instagram, and on Google. To find out whether those ads lead anywhere rather than guessing, we report a small number of events back to each platform: when someone opens our pricing page, creates an account, starts a checkout, or completes a purchase, along with the amount paid. We do not report anything else, and we never send either company your photographs or anything we generate from them.

Alongside each event we send identifiers the platform uses to recognise the person. Where that includes your email address or your name, they are hashed with SHA-256 first. A hash lets the platform match you against an account it already holds; it cannot be turned back into your address.

Meta. We use the Meta pixel on our pages and Meta’s Conversions API on our servers. The identifiers sent are the _fbp and _fbc cookies Meta’s own script sets in your browser, your IP address and browser user agent, and — if you are signed in — your hashed email address and a hashed version of our internal account id. The hashing happens on our servers, before anything is sent.

Google. We use Google’s advertising tag on our pages, with the feature Google calls enhanced conversions. The identifiers sent are Google’s own advertising cookies, the click identifier from the ad you arrived through, and — if you are signed in — your hashed email address and hashed first and last name. Here the hashing happens in your browser, before the data leaves your device. We do not currently use Google Analytics.

Both companies process this data as our partner for measurement and ad targeting, and also for their own purposes under their own terms. What each does with it once it arrives is covered by Meta’s Privacy Policy and Google’s Privacy Policy.

You can stop the browser half of all of this with an ad blocker or your browser’s tracking protection. You can limit what each company does with it from Meta’s Ad Preferences and Google’s My Ad Center. And if you would rather we sent none of it at all, email support@finishery.com and we will exclude your account.

Your choices about advertising

Two ways to switch the advertising measurement off. Both stop the tags from loading at all, rather than loading them and remembering that you objected.

Global Privacy Control. If your browser or an extension sends a GPC signal, we treat it as an opt-out and send nothing. Nothing to click; it already works. Some browsers have it built in and others need an extension, and if you are not sure, the button below does the same job.

Or press this. It sets a preference for finishery.com and every tool on it, including headshots.finishery.com, and it lasts ten years rather than until you next clear a session.

Turning this on does not change the product. You keep your account, your credits and your images; the only difference is that we stop reporting what you did to anyone. If you would rather we handled it for you, or you want data already sent to be dealt with, email support@finishery.com.

Telling you when a tool opens

The home page lists tools that are not built yet. If you leave an email address on one of those cards, we store that address alongside the name of the tool you asked about, and nothing else — no name, no tracking profile, no purchase history.

It is used for exactly one thing: a single email when that tool opens. We do not send a newsletter, we do not sell or share the list, and we do not use it to advertise to you. Reply to any message, or write to support@finishery.com, and we will delete the address.

Children

Finishery is not intended for anyone under 13, and we do not knowingly collect their information.

Your rights

Depending on where you live, you may have the right to access, correct, export, or delete the personal information we hold about you. Write to support@finishery.com and we will action it.

Changes

If this policy changes materially we will update the date at the top of this page and, where the change affects you directly, email you.

Contact

Late Shift LLC — support@finishery.com