Privacy

What we store

• Your uploaded photo — in a private storage bucket, with a 7-day auto-delete.
• The critique text we generate (no personal info).
• Your email — only if you create an account.
• Abuse-prevention hashes (SHA-256 of your IP plus a daily salt). No raw IPs are stored.

What we never store

• Face embeddings or biometric features. We don’t generate or persist them.
• EXIF metadata — stripped before storage.
• Raw IP addresses.

Refused uploads

Photos flagged as NSFW, of minors, screenshots, or non-people are deleted from storage within seconds of detection. We log only the refusal category — never the image content.

Subprocessors

To run the service we rely on a small set of industry-standard providers covering: cloud database & storage, AI inference (with zero-retention agreements where available), application hosting, payment processing, transactional email, and privacy-respecting product analytics. The current list is available on request — email picwingman-support@botitout.com.

Cookies & analytics

We use first-party cookies to keep you signed in and to remember your free-tier daily limit. Analytics are anonymous and aggregated. We don’t sell data and we don’t run third-party ad pixels.

Your rights

You can request a copy of your data, ask us to delete it, or correct anything inaccurate — at any time, no questions asked. Email picwingman-support@botitout.comfrom your account email and we’ll act within 7 days.

Contact

For anything privacy-related, email picwingman-support@botitout.com. We respond within two business days.