Privacy Policy

1. Who is responsible for your data

The data controller is Zhong Hui, an individual seller based in China. For any privacy request, write to support@beforeafterlab.com.

2. What we collect

| Data | Why | Where it comes from | |---|---|---| | Email address, display name, avatar | To create and identify your account | You, or your Google account if you sign in with Google | | A salted hash of your password | To let you sign in | You (we never store the password itself) | | Subscription status, plan, order references | To know whether Pro is active and to answer billing questions | Our payment provider | | Country and coarse device/browser type | Security, fraud prevention, and product decisions | Your request headers | | Page views and referral source | To know which pages are useful | Your browser, through our own analytics endpoint | | Session cookie, theme preference, today's free-export counter | To keep you signed in and to enforce the free tier | Your browser (the counter is stored locally only) |

3. What we never receive

Your photos. Every comparison is drawn on a canvas inside your browser. The images are never sent to us, so we cannot see, store, recover or back up them. The same applies to the image, GIF and video files you export.

4. Why we process it (legal bases)

• Performance of a contract — account, sign-in, subscription, and delivery of the Pro features you paid for.
• Legitimate interests — security, fraud prevention, and understanding which pages work, kept to the minimum needed.
• Consent — only where we ask for it explicitly, such as optional product email.
• Legal obligation — keeping tax and payment records.

5. Who processes data for us

• Cloudflare — hosting, CDN and database.
• Our payment provider (Waffo) — card processing, receipts and refunds. Card data never reaches our servers.
• Google — only if you choose "Continue with Google"; then Google confirms your email and name to us.
• Our own email inbox — for support replies.

We do not sell your personal information, and we do not share it for advertising.

6. Cookies and local storage

• Session cookie — keeps you signed in. Removed when you sign out.
• Attribution cookie — records the campaign or referral that brought you here, first touch only.
• Local storage — theme choice and today's free-export count. Stays on your device and is not transmitted.

You can clear all of these from your browser settings; you will be signed out and the free-export counter resets.

7. How long we keep it

• Account data — until you delete the account, then deleted within 30 days.
• Payment and tax records — 7 years, as required for accounting.
• Analytics events — 12 months, then deleted.
• Server logs — 30 days.

8. Your rights

You can ask us to access, correct, delete, export, or restrict the processing of your personal data, and you can object to processing based on legitimate interests. Write to support@beforeafterlab.com; we respond within 30 days. You may also complain to your local data-protection authority.

Deleting your account removes your email, name, avatar and password hash. Payment records are kept for the accounting period described above.

9. Children

The Service is not directed at children. You must be 18 (or the age of majority where you live) to buy a subscription. We do not knowingly collect data from anyone under 16; if you believe a child has created an account, contact us and we delete it.

10. Security and breach notification

Data is encrypted in transit (HTTPS) and stored in Cloudflare's infrastructure with access limited to what the Service needs. No system is perfectly secure. If a breach affects your personal data, we notify affected users and the relevant authority within 72 hours of becoming aware of it.

11. International transfers

Our infrastructure and payment providers may process data outside your country, including in the United States and the European Union. Where required, transfers rely on standard contractual clauses.

12. Changes to this policy

We may update this policy. Material changes are announced on this page at least 14 days before they take effect, with the date at the top updated.

13. Contact

support@beforeafterlab.com — see also our Terms of Service and Refund Policy.