Bettershot Privacy Policy
Last Updated: October 10th, 2024
Bettershot LLC ("Bettershot," "we," "us," or "our") is committed to protecting the privacy of individuals who use our services. This Privacy Policy outlines the types of information we collect, how we use it, how it is shared, and the rights you have regarding your personal data. This policy applies to all data collected via our website and services and complies with applicable data protection laws, including the European General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).
By using Bettershot, you agree to the collection and use of information as outlined in this Privacy Policy. If you do not agree with the terms of this policy, you should discontinue the use of our services.
1. Information We Collect
We collect the following types of information when you interact with Bettershot:
Personal Data:
We collect personal data that you voluntarily provide to us when you register, use our services, or otherwise interact with Bettershot. This includes your photos, name, email address, age, ethnicity, eye color, sex, and any other information necessary for generating AI headshots. This data is collected solely for the purposes of providing personalized AI-generated headshots and account management.
Payment Information:
All payment transactions are processed through a third-party service provider, Stripe. Bettershot does not store or process your payment card information. Stripe’s use of your data is governed by its own privacy policy, which we encourage you to review.
Anonymized Usage Data:
We use Google Analytics to collect anonymized data regarding your interactions with our website. This data includes, but is not limited to, your IP address, browser type, device type, and referral URLs. This information is anonymized and cannot be used to personally identify you. The purpose of collecting this data is to improve the functionality and user experience of our website.
2. Use of Collected Information
We process your personal data based on the following legal grounds:
Performance of a Contract:
We collect and process your personal information to provide you with our services, including generating custom AI headshots, processing transactions, and providing customer support. Failure to provide this data may prevent us from delivering these services.
Legitimate Interests:
We use anonymized data to analyze website usage patterns and improve the functionality and security of our services. Additionally, we use your personal data to send you marketing communications, newsletters, and targeted advertisements based on your interactions with our services. You have the right to opt out of these communications at any time.
Legal Obligations:
We may process your personal information as necessary to comply with legal requirements, such as financial reporting, responding to lawful requests from law enforcement, and fulfilling our obligations under applicable laws.
3. Data Sharing and Third-Party Processors
We do not sell or rent your personal data to third parties. However, in order to provide our services, we may share your personal data with the following third parties under strict contractual obligations:
- Payment Processor: Stripe is our payment processing partner. Stripe will collect and process your payment information in accordance with its own privacy policy.
- Cloud Storage Provider: We use Amazon Web Services (AWS) to securely store your personal data and images. AWS implements stringent security protocols to protect your data from unauthorized access.
- Google Analytics: We use Google Analytics for analyzing website traffic and usage patterns. This data is anonymized, and no personally identifiable information is shared with Google.
We may also share anonymized usage data with third-party service providers, such as marketing agencies, to assist us in improving our services. This data is fully anonymized before sharing and cannot be traced back to you personally.
In the event of a business transfer, merger, or acquisition, your personal data may be transferred to the acquiring entity, provided that such entity agrees to comply with this Privacy Policy.
4. Retention of Data
We retain your personal data for as long as necessary to fulfill the purposes for which it was collected, unless a longer retention period is required by law. Specifically:
- Uploaded images are deleted automatically after thirty (30) days.
- Other personal data, including demographic information and account details, is retained until you request its deletion or until your account is closed.
Upon request, your personal data will be deleted within fourteen (14) days, unless legal obligations require us to retain certain data for a longer period.
5. Your Rights Under GDPR and CCPA
You have the following rights regarding your personal data under the GDPR and CCPA:
- Right to Access: You have the right to request a copy of the personal data we hold about you.
- Right to Rectification: You may request that we correct any inaccurate or incomplete personal information.
- Right to Erasure (Right to Be Forgotten): You may request that we delete your personal data, subject to certain legal limitations.
- Right to Restrict Processing: You may request that we limit the processing of your personal data under certain circumstances, such as if the data is inaccurate or unlawfully processed.
- Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to request that we transfer your data to another service provider.
- Right to Object: You have the right to object to the processing of your personal data for marketing purposes or where our processing is based on legitimate interests.
To exercise any of these rights, please contact us at hello@bettershot.ai. We will respond to your request within thirty (30) days.
6. Opting Out of Marketing Communications
By signing up for Bettershot, you agree to receive marketing communications, including newsletters and targeted ads. You may opt out of these communications at any time by following the unsubscribe link in our emails or adjusting your account preferences.
Please note that opting out of email marketing does not affect cookie-based tracking or targeted ads. You can manage your cookie preferences through your browser settings.
7. Data Security
We take the security of your personal data seriously and implement appropriate technical and organizational measures to protect your information from unauthorized access, disclosure, alteration, or destruction. These measures include, but are not limited to:
- Encryption of data in transit using TLS (Transport Layer Security).
- Secure storage of data in AWS cloud servers.
- Use of email security protocols, such as DKIM, SPF, and DMARC, to protect our email communications.
However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your personal data, we cannot guarantee its absolute security.
8. Compliance with GDPR and CCPA
Bettershot complies with the General Data Protection Regulation (GDPR) for users located in the European Union and the California Consumer Privacy Act (CCPA) for users in California. This includes providing users with the rights outlined above and ensuring that personal data is processed lawfully, fairly, and transparently.
9. Changes to This Privacy Policy
We reserve the right to modify or update this Privacy Policy at any time. Any changes will be communicated to you at least fourteen (14) days before the new policy becomes effective. If you do not agree to the new terms, you may discontinue your use of our services and request the deletion of your data.
10. Contact Us
If you have any questions or concerns about this Privacy Policy or wish to exercise your data rights, please contact us at: hello@bettershot.ai