Client Biometric & Facial Privacy

Professional Client Privacy Standards

When photographers document weddings, corporate conferences, executive portraits, and private family celebrations, safeguarding client privacy is essential. Because BestShots analyzes facial features to verify eye sharpness, detect smiles, and group subjects across burst sequences, the platform adheres strictly to global privacy frameworks.

Our practices align with the Illinois Biometric Information Privacy Act (BIPA), Texas CUBI, the California Consumer Privacy Act (CCPA/CPRA), and the European Union General Data Protection Regulation (GDPR).

---

Strict Project-Level Data Isolation

BestShots maintains rigorous security boundaries around client imagery and facial landmarks:

1. Per-Project Data Silos: Facial descriptors and focus measurements are stored in isolated records strictly bound to your specific shoot and studio account.
2. Zero Cross-Account Matching: Facial features are analyzed solely within the boundaries of your active project to cluster burst sequences. They are never compared across different photographers' accounts, pooled into shared registries, or matched against external biometric databases.
3. No Commercial Data Sharing: Client photos, facial crops, and metadata are never sold, rented to third parties, or shared with advertising platforms.
4. Zero AI Model Training: Facial measurements and image crops are never used to train, evaluate, or fine-tune public or commercial machine learning models.

---

Irrevocable Deletion Rights

Photographers and their clients maintain complete sovereignty over all shoot data at all times:

• Immediate Single-Photo Deletion: Deleting an image from your project workspace removes its preview proxy and all associated facial landmarks immediately.
• Permanent Project Purge: Deleting a shoot permanently and irrevocably purges all associated photos, facial crops, and subject groupings from our cloud vault.
• Complete Account Closure: Closing your studio account triggers a permanent cascading deletion of all catalog records, uploaded images, and metadata history.