Privacy Policy

Future Cities LLC, operating LooksAudit. Contact: hello@looksmaxxinggpt.com.

We collect as little as the service needs. In detail:

• Your photo(s): sent once to the AI provider to generate your report, then deleted from our storage right after generation and in any case within 24 hours. Legal basis: your explicit consent, given on the upload form.
• Your year of birth: used only to check that you are 18 or older. We store that the check passed, not the year.
• Your consent record: the consent text version, the time, a hash of your IP address and your browser’s user-agent string, kept as evidence that consent was given.
• The report: the scores and text generated for you, kept so your private link keeps working (12 months, or until you ask us to delete it).
• Payment details: your email address and the payment reference from Stripe when you buy a report. Stripe processes your card; we never see the card number. Legal basis: performance of the contract.
• Technical data: a random visitor identifier in a cookie used to limit free scans per visitor; server logs with request paths, status codes and timing (no photos, no report content); anonymous page-view counts from Cloudflare Web Analytics, which sets no cookie.
• Email: if you buy a report we email you its link. We never put scores or photos in email.

We do not identify you from your photo, do not create or store a faceprint, face template or biometric identifier, do not run face-detection or face-matching software, do not compare your photo with anyone else’s, and do not use your photos to train any model. We do not sell personal data and do not use it for advertising.

These companies process data on our behalf, under contracts that restrict their use of it:

• xAI (SpaceXAI LLC, United States): generates the report from your photo under its zero-data-retention mode, in which inputs are not stored after the response is produced.
• Cloudflare, Inc. (United States): hosts the site, the database, photo storage during generation, bot protection (Turnstile) and anonymous analytics.
• Stripe, Inc. (United States): payments, receipts and tax calculation.
• Resend, Inc. (United States): sends the report-link email, when you have paid.

We are in the United States and our processors are too. If you are in the EU, UK or Switzerland, your data is transferred under the processors’ standard contractual clauses and the UK addendum where applicable.

• Photos: deleted right after generation; at most 24 hours.
• Reports (scores and text): 12 months, or on request.
• Public share cards: while you keep them public.
• Consent records and payment records: 6 years, as evidence and for tax law.
• Server logs: 30 days.

You can ask for a copy of your data, correction, deletion, or restriction, and you can withdraw consent at any time (withdrawal does not affect processing that already happened). Email hello@looksmaxxinggpt.com with your report link; we answer within 30 days. Residents of the EU and UK may complain to their data protection authority; residents of California and other US states with privacy laws have the rights those laws give, and we do not sell or share personal data for advertising.

The service is for adults. We do not knowingly collect data from anyone under 18; if we learn we have, we delete it.

The report is produced automatically by an AI model. It has no legal or similarly significant effect on you: it is information for you alone, and no decision about you is made with it by us or anyone else.

We will post changes here with a new date. Material changes are announced on the upload page.