What we do with your data

The free audit

The photo audit runs entirely inside your browser using an on-device face model. Your photo is never uploaded, stored, or transmitted to us or anyone else. Nothing about the photo — not even its score — is sent anywhere. You can disconnect from the internet after the page loads and it still works.

The paid review

Buying a Full Profile Review sends, with your knowledge, the following:

• To Stripe: your card details and email, for payment. We never see your card. Stripe's own privacy policy applies to that step.
• To us (Supabase, Postgres hosted in the United States): your email, the Stripe payment reference, the finished review text, the audit's numeric measurements of each photo, your bio if you pasted one, and the photo count. Never the photos.
• To Anthropic: your resized photos, your bio and the measurements, once, to write the review. The photos pass through our server in memory and are discarded when the review is written — they are not saved to disk or to a database. Anthropic does not use API inputs to train its models; its data-handling terms apply to that request.
• To Cloudflare: your email address and the private link, to send you the two emails (payment confirmed; review ready).
• In your own browser: when you run the profile audit, your resized photos wait in this browser's own storage (IndexedDB) for up to 24 hours in case you buy, and are removed the moment a review is sent or when that day passes. After a review, small copies stay in local storage so the page can show them back to you. None of this leaves your device; clearing site data removes it.

We won't review photos that appear to show someone under 18, photos of other people, or explicit content. Those reviews are refunded automatically and the photos are discarded like any other.

Hosting and logs

The site runs on Vercel, which keeps standard request logs (IP address, user agent, URL) for a short period. Rate limiting uses a salted hash of your IP address, never the address itself.

Advertising measurement

When we run ads, a Meta (Facebook) pixel measures whether they work: page views, the free audit completing, checkout starting, and purchases. Purchases are also reported to Meta from our server, with your email hashed. In the EEA, the UK and Switzerland the pixel loads only if you accept it; elsewhere it loads by default. No photo, score or bio is ever sent to Meta. We run no other analytics.

Deletion

Write to contact@photoverdict.com from the email you bought with and we will delete your review row. Your photos are already gone — there is nothing to delete.