Legal

Privacy Policy

Last updated 20 September 2026

This policy explains how Best Version ("we") handles the photos and personal data you share when you use the service. Replace the company details below with your legal entity before launch.

What we collect

  • Photos you take or upload (a face close-up and, optionally, a full-body photo).
  • Generated images and reports created from your photos.
  • Account data: e-mail address, name (optional), sign-in method.
  • Payment data is processed by Stripe; we store only the transaction reference, amount and status — never card numbers.
  • Technical data such as IP address and browser type, used for security and rate limiting.

How photos are used

Your photos are sent to our AI providers solely to analyse your appearance and to generate edited images of you. They are not used to train AI models. Photos and results are stored in a private bucket and are only accessible to you through time-limited links, and to our administrators for support and abuse prevention.

Biometric data

Analysing a face photo may constitute processing of biometric or special-category data in your jurisdiction. We process it only with your explicit consent, which you give before the camera opens, and only for the purpose of producing your style recommendations. You can withdraw consent at any time by deleting your data.

Retention and deletion

Photos, generated looks and reports are kept until you delete them. You can delete all photos, or your whole account, from the Account page. Anonymous sessions that never create an account may be purged after 30 days.

Third parties

  • AI providers (analysis and image generation) — receive the photo for the duration of the request.
  • Supabase — authentication, database and file storage.
  • Stripe — payments and subscriptions.
  • Hosting provider — serves the website.
  • Cloudflare Turnstile — protects sign-in and scanning from bots. It runs an invisible check in your browser and is covered by Cloudflare's Turnstile Privacy Addendum; it does not use your data for advertising.

Your rights

Depending on where you live you may have the right to access, correct, export or delete your data, and to object to processing. Contact us at the address below.

Contact

For any privacy request — access, correction, export or deletion — use our contact form. We answer within two working days and confirm every deletion in writing.

Data controller: BZHAPPS, 5440 Main Drive, San Francisco, CA 94103, United States.