Privacy Policy

This policy explains what BestAvatarGenerator ("we", "us") collects when you use bestavatargenerator.com, why, and what you can do about it. The service is operated by River AI (ABN 56 586 339 011), Australia. Contact: メールアドレスを表示.

What we collect

• Account data: your email address, and your name and profile picture if the sign-in provider you choose (Google, Facebook or an email link) shares them.
• Photos you upload to create an avatar, and the images we generate for you.
• Designs you save in the builder, and whether you share an avatar in the public showcase.
• Purchase records: which pack you bought, the amount and the Stripe payment reference. Stripe processes your card; we never see or store your full card number.
• Technical data needed to run and protect the service: IP address, browser type and request logs. IP addresses are also used, in shortened form, to limit abuse such as repeated sign-in emails.

The builder works without an account, and anything you make there stays in your browser until you save it to an account.

How we use your photos

• Each upload is checked automatically for unlawful or explicit content by OpenAI's moderation service, then sent to our AI image provider (currently accessed through OpenRouter) only to create the avatars you request.
• We do not use your photos to identify you, and we do not create face recognition templates or other biometric identifiers from them. A photo is only used as an image to restyle.
• We do not use your photos or avatars to train AI models, and we do not sell them.
• We never publish your photo. A generated avatar is shown publicly only if you choose to submit it to the showcase and we approve it; you can withdraw it at any time.

How long we keep it

• A photo you upload but never use is deleted automatically after 2 days.
• Photos you used and the avatars you created are kept for 12 months so you can see your history and download them again, then deleted automatically.
• You can delete a photo, a single result or your whole account at any time. Deleting your account removes your files and personal data. Purchase and credit records that tax and accounting law require us to keep are retained without your personal details.
• Request logs are kept by our hosting provider for a short period for security and debugging.

Why we use it

We use your data to provide the service you asked for (your account, generations, downloads and purchases), to keep it secure and prevent abuse, and to meet legal obligations such as keeping payment records. We email you only to sign you in, to tell you when an avatar is ready, and about changes to credit prices; Stripe emails your payment receipts. We do not send marketing emails.

Cookies

We use only cookies that the service needs to work: a cookie that keeps you signed in, and a security check on the sign-in page (Cloudflare Turnstile). We do not use advertising or analytics cookies. Stripe sets its own cookies on its checkout page to process payments and prevent fraud.

Service providers

We share data only with the providers that run the service for us, and only what each one needs:

• Cloudflare: hosting, storage of your files, and bot protection.
• Stripe: payments.
• Resend: sign-in and account emails.
• OpenAI: automatic safety check of uploaded photos.
• OpenRouter and the AI model provider it routes to: generating your avatars.
• Google or Facebook, if you choose to sign in with them.

We may also disclose data where the law requires it.

International transfers

These providers process data in the United States and other countries, which may have different data protection laws from yours. We use providers that commit to protecting the data they process for us, including through standard contractual clauses where those apply.

Children

The service is not for anyone under 16. Do not create an account or upload photos if you are under 16. If you believe a child has given us their data, contact us and we will delete it.

Your rights

You can access, download (Settings → Download my data), correct or delete your data from your account, or by emailing メールアドレスを表示. Depending on where you live, you may also have the right to object to or restrict how we use your data, and to complain to your local data protection authority (in Australia, the Office of the Australian Information Commissioner). We respond to requests within 30 days.

Security

Your files are stored privately and are only reachable through short-lived signed links. Connections to the site are encrypted. No system is perfectly secure, and we will tell you if a breach affects your data as the law requires.

Facebook data deletion

If you signed in with Facebook, you can remove the app in your Facebook settings; we then delete your account data automatically, or you can email us.

Changes

If we change this policy we update the date above, and for significant changes we notify you by email or on the site before they take effect.