Privacy Policy

What we collect

We collect the account and contact details you provide, payment status supplied by our payment processors, and the technical information needed to operate the site. We do not ask for precise device location.

• Account details such as name and email address.
• Photos and editing choices you deliberately upload to use the face-merge editor.
• Basic device, browser, IP, page-use, consent, and security information.

How photo processing works

Your browser editing project expires 24 hours after the last edit and is cleared when the editor next checks it. We use photos only to provide the requested editing and export service, not to train AI models. Necessary service providers process data for private storage, hosting, email delivery and content safety checks. Clean exports are rendered after authentication and ownership checks and delivered through a short-lived signed link. Selected source photos enter private storage before they are added to a project. Private source photos and head masks renew to 48 hours after a server-confirmed actual edit; export files have an independent lease starting at creation and are not extended by later edits. Every file is capped at 30 days after upload. Expired files are scheduled for cleanup and failed deletions are retried. Viewing or refreshing does not renew local recovery, which also depends on browser storage availability.

Newsletters and account deletion

Newsletters about website updates and special offers require your explicit subscription. You can unsubscribe at any time. Contact hi@bestgroupshot.com to request account deletion; we verify ownership and normally aim to complete the request within 7 days after verification, then confirm by email. Necessary legal or business records may require separate review. We retain only minimal pseudonymised credit-claim markers for fraud and repeated-claim prevention during the relevant credit campaign, with periodic necessity reviews and cleanup when the campaign ends. These markers contain no plain email address, photos or project content. They remain protected personal data. You may separately revoke our connection in your Google Account settings.

Cookies, analytics, and advertising

We use essential cookies for sign-in and preferences. Optional analytics and Google advertising technologies are activated only according to the consent flow that applies to your region. Google and its partners may use cookies or identifiers to deliver, measure, and protect ads. You can change optional-cookie choices through Cookie Preferences where available.

Your choices and contact

You may ask about, correct, or delete personal data held in your account, subject to legal and security obligations. For privacy questions, contact hi@bestgroupshot.com. Do not email original photos or other sensitive files unless our support team specifically asks for them through a secure method.

Recommendation evidence and visit analytics

If you join the recommendation reward campaign, we privately store your submitted screenshots and send them through kie.ai to its Google Gemini model service for AI review. Screenshots are not published and are removed 90 days after the application closes. We retain authorization records for selected review text, social nicknames and post links; you can withdraw display permission. When site behavior recording is enabled, we automatically record safe page paths, visible focused time and product-button counts for up to 30 days to understand product usage. We use a first-party session cookie; the current visit before sign-in may be linked to your account after sign-in. Detailed records are accessible only to administrators. This recording is separate from optional third-party analytics, which require your consent. We do not record images, field contents or parameter values. Account erasure removes linked behavior records and recommendation evidence. Minimal hashed reward claims remain to prevent repeat grants.

Invitation links and campaign emails

When invitation rewards are enabled, we automatically use signed first-party cookies to identify visits and preserve the first valid invitation source for up to 90 days. Raw visit records and HMAC network risk summaries are retained for up to 30 days; minimal deduplication, attribution and reward records remain for fraud prevention and accounting. No device fingerprint is collected. Referral details are administrator-only; inviters see aggregate results and their own reward records. Account erasure removes personal associations, subject to review of unresolved recovery and business records. Campaign emails require explicit subscription and can be unsubscribed at any time. This does not authorize third-party analytics.