Privacy Policy

1. Introduction

Welcome to BeforeAF ("we," "our," or "us"). We are committed to protecting your privacy and handling your personal information with care. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website (beforeaf.com) and our before/after widget platform service.

By using BeforeAF, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our services.

2. Information We Collect

2.1 Personal Information

We collect information that you provide directly to us, including:

• Account Information: Name, email address, password, and business information when you create an account
• Payment Information: Credit card details and billing address (processed securely through our payment processors)
• Profile Information: Business name, website URL, and other optional profile details
• Communication Data: Information you provide when contacting our support team

2.2 Content You Upload

When you use our service, you may upload:

• Before and after images of transformations
• Descriptions and captions for your content
• Client names and testimonials (if provided)
• Video content (for Pro and Business plans)

2.3 Automatically Collected Information

When you access our service, we automatically collect:

• Usage Data: Pages viewed, features used, time spent on pages, widget interactions
• Device Information: IP address, browser type, operating system, device type
• Analytics Data: Widget views, click-through rates, performance metrics
• Cookies: We use cookies and similar tracking technologies to track activity on our service

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our services
• Process your transactions and send related information
• Send you technical notices, updates, security alerts, and support messages
• Respond to your comments, questions, and customer service requests
• Communicate with you about products, services, offers, and events
• Monitor and analyze trends, usage, and activities in connection with our services
• Detect, prevent, and address technical issues and fraudulent activity
• Personalize and improve your experience on our platform
• Generate analytics about widget performance for your business

4. How We Share Your Information

We may share your information in the following circumstances:

4.1 With Your Consent

We may share your information with third parties when you give us permission to do so.

4.2 Service Providers

We share your information with third-party service providers who perform services on our behalf, including:

• Payment processing (Stripe)
• Cloud hosting and storage (Vercel, Cloudflare R2)
• Email delivery services
• Analytics providers (Vercel Analytics)
• Customer support tools

4.3 Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities.

4.4 Business Transfers

If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

4.5 Public Display

Content you upload to create widgets (before/after images, descriptions) will be publicly displayed on your website when you embed our widgets. This is the core functionality of our service.

5. Data Security

We implement appropriate technical and organizational measures to protect your personal information, including:

• SSL/TLS encryption for data in transit
• Encryption of sensitive data at rest
• Regular security assessments and updates
• Access controls and authentication measures
• Secure cloud infrastructure

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee absolute security.

6. Data Retention

We retain your personal information for as long as necessary to:

• Provide our services to you
• Comply with legal obligations
• Resolve disputes
• Enforce our agreements

When you delete your account, we will delete or anonymize your personal information within 30 days, unless we are required to retain it for legal purposes.

7. Your Rights and Choices

Depending on your location, you may have the following rights:

7.1 Access and Portability

You can access and download your data through your account dashboard.

7.2 Correction

You can update your account information at any time through your account settings.

7.3 Deletion

You can delete your account and data at any time. Contact our support team for assistance.

7.4 Opt-Out

You can opt out of marketing communications by following the unsubscribe link in our emails or updating your preferences in your account settings.

7.5 Cookies

You can manage cookie preferences through your browser settings.

8. Children's Privacy

Our service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you become aware that a child has provided us with personal information, please contact us, and we will take steps to delete such information.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that are different from the laws of your country. We take measures to ensure that any such transfers comply with applicable data protection laws and that your data remains protected.

10. GDPR Compliance (For EU Users)

If you are located in the European Economic Area (EEA), you have certain rights under the General Data Protection Regulation (GDPR):

• Right to access your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Right to withdraw consent
• Right to lodge a complaint with a supervisory authority

Our legal basis for processing your data includes: consent, contract performance, legal obligations, and legitimate interests.

11. California Privacy Rights (CCPA)

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected
• Right to know if personal information is sold or disclosed
• Right to opt-out of the sale of personal information
• Right to deletion of personal information
• Right to non-discrimination for exercising your rights

We do not sell your personal information. To exercise your rights, please contact us using the information below.

12. Third-Party Links

Our service may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to read their privacy policies.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by:

• Posting the new Privacy Policy on this page
• Updating the "Last updated" date
• Sending you an email notification (for material changes)

Your continued use of our service after changes become effective constitutes your acceptance of the revised Privacy Policy.

14. Contact Us

If you have any questions about this Privacy Policy or our privacy practices, please contact us:

15. Data Protection Officer

For GDPR-related inquiries, you may contact our Data Protection Officer at: dpo@beforeaf.com