Shotsmith
Scenes Guides Pricing
Log in Start free
This document is published without the operator’s registered details, which are still being filled in. Everything else in it applies.

Your data rights

Last updated: 2026-08-23

The GDPR gives you specific rights over your personal data. This page explains what each one means at Shotsmith and how to use it. The privacy policy covers what we hold and why.

Get a copy of your data

Under Article 15 and Article 20 you can ask for a copy of your data in a portable format.

How: Settings → Privacy → Request an export.

What you get: a JSON file containing your account details, your projects and items, every generation with its prompt and settings, your full credit ledger, and a manifest of your files with links to download them.

How long: we prepare it in the background and email you when it is ready, normally within a day and always within a month.

Correct something

Under Article 16 you can have inaccurate data corrected.

Most of it you can edit yourself in Settings. For anything you cannot reach, write to privacy@shotsmith.co and we will correct it.

Delete your data

Under Article 17 you can ask us to erase your personal data.

How: Settings → Privacy → Request erasure.

What happens: the request is reviewed to confirm it is really you, and then your account is closed and your personal data and files are erased.

What survives, and why:

  • Invoices and tax records. We are legally required to keep these. They are retained under Article 17(3)(b) and used for nothing else.
  • The credit ledger, anonymised. The amounts and dates stay as an accounting record of payments already made; the link to you is removed.
  • Aggregate counts. Numbers that no longer identify anyone.

Anything you published yourself — a share link, a showcase image — is removed.

Erasure cannot be undone. If you only want to stop being billed, cancel the subscription instead; that leaves your work in place.

Restrict or object to processing

Under Articles 18 and 21 you can ask us to stop processing data we rely on legitimate interests for, or to restrict processing while a dispute is resolved.

The only things we process on legitimate interests are abuse prevention on the free trial, and security logging. Write to privacy@shotsmith.co.

Withdraw consent

Where we asked for consent, you can withdraw it at any time, and it is as easy to withdraw as it was to give.

Today this applies to two things, both switches in the product:

  • Showcase. Turn an image off and it is removed from the showcase.
  • Share links. Revoke a link and it stops working.

Withdrawing does not make past processing unlawful.

Automated decisions

We make none that produce a legal or similarly significant effect on you. Content moderation can flag an image, and a person reviews anything that is acted on.

Complain

You can complain to the Hellenic Data Protection Authority at https://www.dpa.gr, or to the supervisory authority where you live or work. You do not have to come to us first, though we would rather you did — write to privacy@shotsmith.co and we will answer within a month.

Verifying it is you

For an export or an erasure we confirm the request came from the account holder, because handing someone else your data or deleting your work on their say-so would be the actual failure. Usually your being signed in is enough.

Contact

privacy@shotsmith.co, or [name], Greece.