Legal

Privacy Policy

What Beauty Bee collects, where it goes, and what we will never do with it.

Last updated September 6, 2026 · Takes effect when Beauty Bee opens to the public

Who we are

Beauty Bee is an AI content studio for beauty professionals. You upload one photo and it makes the posts, reels, captions and covers you would otherwise be up at midnight making yourself.

Beauty Bee is operated by AD Venture Group LLC, a New Jersey limited liability company. That is the company responsible for the information described here, and the email and postal address at the bottom of this page reach it.

What we collect

When you create an account

• Your name and email address.
• A password, which we store only as a salted hash. We cannot read it, and nobody at Beauty Bee can tell you what it is.

Notifications you choose

Your private notification inbox stores the Beauty Bee messages sent to your account and whether you have read them. You can choose the categories you want, whether optional messages may also arrive by email, and whether you want sales and offers. Promotional notifications are off until you turn them on.

If you choose birthday messages, we store only the month and day you enter and your device time zone so the greeting arrives on the right local date. We do not ask for or store your birth year for this feature. You can turn birthday messages off in Account settings. Required password-change and urgent payment notices are kept separate from optional messages.

What you tell us about your business

All optional, all editable, all supplied by you: business name, profession, Instagram handle, location, website, bio, brand voice, call to action, and brand colours. Beauty Bee uses these to make content that sounds like you rather than like a template.

When you play Honey Flight

Beauty Bee stores a random game-run identifier and seed, the month played, start and finish times, game duration, and the score calculated by Beauty Bee's server. The game sends the timing of your in-game taps so the server can replay the flight and verify the score; the application does not retain that tap trace after verification.

Your score stays private unless you separately submit a social handle and check the public-display box. If you do, the monthly leaderboard shows only that handle, your verified score, and your rank—not your name, email address, or account identifier. You can choose Remove my public entry from the leaderboard panel at any time.

Your photos, face scan, and AI Twin

Your photo uploads, previously uploaded face-scan videos, sampled scan frames, and the images and video generated from them are stored on our servers and tied to your account. New AI Twins use photos; video face scans are temporarily unavailable. Beauty Bee uses your source photos or a previously created Twin’s sampled scan frames to create separate reference angles and an outfit view. Generated angles are estimates, not additional photographs of you, and you review the Twin before it is activated for future reels. The original source stays separate from generated views. There is a separate Content & AI Policy covering what you may upload and what happens to it.

When you connect and publish to social accounts

Beauty Bee uses the platform's own OAuth permission screen. We do not receive or store your social-media password. The platform may return an account, Page, profile, board, or channel identifier and display details, the permissions you approved, connection and expiry information, and access or refresh tokens that let Beauty Bee act within those permissions. Tokens are encrypted at rest and are not shown back to your browser.

We store the publication draft you review: the selected destinations, platform-specific captions and settings, an optional supported platform place ID and label you select, the date, time, and timezone when you schedule, and provider references, status, errors, and public link returned while each platform processes the submission.

Nothing is sent merely because you connect an account or finish a reel. When you press the final send or schedule confirmation, Beauty Bee sends the media, copy, and selected settings only to the social platforms and destination accounts shown in that review. Each receiving platform then processes the post under its own terms, privacy policy, moderation rules, and retention practices.

If you explicitly choose a supported place tag, Beauty Bee sends its platform place ID only to that selected destination. Current verified support is limited to Threads and X. We do not send the place to the other platforms or add its label to your caption as a fallback.

Payment

Payments are handled by Stripe. Your card number never reaches Beauty Bee's servers — we hold only Stripe's customer reference, which plan you are on, and your generation allowance and usage history.

When you use the Honey Line

The Honey Line sends any optional starting answers you select and your live microphone audio to OpenAI so Honey, an AI voice assistant, can start in the right place, hear you, and answer. Before the microphone starts, the Honey Line shows a recording notice beside the pickup control. Swiping or tapping to pick up after seeing that notice means you agree to those answers and audio being sent and to the call being recorded, transcribed, stored, and used for quality, training, and FAQ improvement. If you do not agree, do not pick up.

If you are signed in, you may separately turn on Use my Beauty Bee activity for that call. When it is on, Beauty Bee creates and sends a compact snapshot containing the business name and profession you entered, plus aggregate facts such as finished-content counts, whether Beauty Bee recorded a successful publish—including its destination platform and recorded UTC time—active social-connection count, tracked-post count, and Brand Kit completeness. The snapshot does not include your photos, generated media, captions, social-account identity, passwords, payment details, or client information. It is not sent when the control is off.

Beauty Bee stores the combined call audio, the caller and Honey transcript turns, the time of the call, a pseudonymous browser-session identifier, and the version of the notice accepted at pickup. Each caller turn is also copied to the owner's private FAQ Inbox for review. When the FAQ does not fully answer a question, Honey's provisional draft is saved there too. An inbox question or draft never becomes a public or live Honey answer automatically; the owner must review and publish it.

Beauty Bee builds an opted-in account snapshot when you turn the control on so you can preview a relevant fact, then refreshes it at call start. It does not save a separate snapshot with the call. If you or Honey say one of its facts aloud, that spoken part may appear in the stored transcript and recording under the same retention period.

Do not share passwords, card details, health records, information about another person, or other sensitive information during a call.

Site analytics, cookies, and live presence

Necessary technology includes a session cookie so you stay signed in, a cookie that remembers your privacy choices, security controls, and ordinary server logs. The account-session value is stored hashed on our side and expires on its own. The privacy-choice cookie contains a random value. A privacy-choice receipt stores a receipt ID, a one-way hash of that random value, your Analytics and Marketing choices, the policy version, the choice time, and whether Global Privacy Control or Do Not Track was observed. If you are signed in when you save the choice, the receipt may also be associated with your account.

If you allow Analytics, our first-party system records a pseudonymous browser identifier, a per-tab session, the Beauty Bee page or app area visited, the referring site's host name, campaign tags such as UTM source and campaign, a broad device class, country code supplied by Cloudflare, and the event time. If you are signed in, a session may be associated with your account. We do not store a raw IP address, full user-agent string, full referring URL, search query, or fingerprint in the audience-analytics tables.

Analytics also records privacy-minimized product-use signals: code-authored control and form identifiers, same-site destination areas, selected template IDs, scroll-depth milestones, elapsed and visible engagement time, interaction counts, and rounded page-performance measurements such as response, DOM-ready, load, paint, layout-shift, and interaction timing. When you select a file, Analytics may record only its broad type and size range — never its name or contents. Technical failures are recorded only as a category such as script, resource-load, or unhandled-promise error; exception messages and stack traces are not sent through this audience-analytics channel.

With Analytics allowed, a heartbeat while the page is visible lets the owner see how many visitors were active during the previous two minutes. For a signed-in customer, the private owner dashboard may show the customer's name or business name, current Beauty Bee area, and last-active time. It does not show the contents of a customer's photo, generated media, messages, or off-site activity.

Beauty Bee also creates server-confirmed operational events when an account is created, a generation starts or finishes, protected content is downloaded, or a checkout or payment is confirmed. These are used to operate the service and keep owner totals honest; a browser cannot declare its own completed generation or purchase. When an account is deleted, identifying links are deleted or removed from the operational history where the law allows the anonymous count to remain.

Content performance and booking attribution

If you use Content Analytics, you can add a social post's title, platform, publication date, optional post URL, current view and engagement totals, and business results such as DMs, leads, bookings, completed appointments, payments, and refunds. Until an approved provider connection is active, those results are clearly marked as manually reported. Beauty Bee also lets you create a unique first-party link that forwards a visitor to an official Square, Vagaro, Fresha, or GlossGenius booking page. The link records a click count and adds campaign labels to the destination. If Analytics is not allowed, the click is counted without a browser identifier. The analytics API can also store the named provider and external post, booking, or payment identifiers needed to match and de-duplicate imported records when a connection is added.

What we do not do

• We do not sell your personal information. To anyone, for any price.
• We do not use your photos, face scan, or AI Twin to train AI models. Not ours, and we do not licence them to anyone else for that purpose.
• We do not track you around the internet right now. No Meta pixel, TikTok pixel, Google advertising tag, or other remarketing vendor is active. Marketing permission is unavailable while no vendor is connected. Before that changes, we will name the vendor and purpose, update the policy version, and ask for a fresh choice before loading it.
• We do not sell or share your information for cross-context behavioral advertising.
• We do not send you marketing you did not ask for.

Who else touches your information

The companies needed to run the parts of Beauty Bee you use include:

• fal.ai — runs the AI models. Receives the source images needed for the AI Twin or content you asked for, plus the generation instructions. For Twins previously created from a face-scan video, Beauty Bee uses the saved still frames without sending the raw scan video.
• OpenAI — powers the Honey Line AI voice. Receives any optional starting answers you selected and live audio when you choose to use that feature. If you separately turn on account personalization, OpenAI also receives the compact snapshot described above. It returns Honey's response and the transcript events used to document the conversation.
• Stripe — takes payments. Receives your payment details directly; we never see the card.
• Render — hosts the service and stores the database and your files.
• Cloudflare — sits in front of the site and carries traffic to it.
• Your selected social platforms — Instagram, Facebook, Threads, TikTok, Pinterest, YouTube, or X receives the finished media, copy, destination, and settings only when you confirm a post for that platform. A connected platform also supplies the account details and OAuth authorization needed to provide this feature.

Our hosting, generation, voice, and payment providers process information to provide their part of Beauty Bee. A social platform processes a confirmed post as the operator of the account you chose and under its own agreement with you; publishing through Beauty Bee does not replace that agreement. None of these disclosures gives Beauty Bee permission to sell your information.

How long we keep it

We keep your account information and your files for as long as your account is open, because that is what makes your library and your history work. Ask us to delete them and we will. Some records we have to keep longer — payment and tax records in particular — and we keep only those.

Honey Line call audio and full transcripts are kept for up to 90 days by default, then deleted. Individual caller transcript turns and Honey's provisional drafts copied to the private FAQ Inbox may remain until the owner reviews, dismisses, or converts them into a Beauty Bee FAQ draft. Minimal consent and operational records may be kept longer where needed to document the recording permission or protect the service.

Social connection records and encrypted OAuth tokens are kept while the connection is active or while they are needed to resolve a submission already in progress. Pending publication drafts and schedules remain while they are active. After you send or cancel, the reviewed settings and completed, cancelled, or failed per-platform outcomes can remain in your content history while your Beauty Bee account is open. Disconnecting or revoking a platform stops future use of that authorization, but does not delete a post already delivered to the platform. Delete that post from the platform itself if you no longer want it there.

Raw first-party audience sessions, audience events, and privacy-choice receipts are normally kept for 400 days and removed by a daily sweep, so a record may remain for no more than 401 days. A browser identifier attached to a booking-link click is removed by the daily sweep after 90 days and may therefore remain for no more than 91 days. A de-identified, event-level click record containing the tracking link and click time, but no browser identifier, is normally kept for 760 days and may remain for no more than 761 days so customers can compare long-running campaigns. Social-post metrics and business outcomes you enter remain with your account until you delete the account or ask us to remove or correct a specific manually entered record. Notification choices, birthday month and day, inbox messages, and delivery records also remain with your account and are deleted when the account is permanently deleted. Encrypted disaster-recovery backups may retain an inaccessible copy for up to 30 additional days; restored backups are put through the current deletion and retention jobs before being used.

Honey Flight run records remain with your account so Beauty Bee can verify monthly results and investigate manipulated scores. Removing a public entry hides the handle and score from the leaderboard immediately; closing the account deletes the associated run records under the account-deletion process described below.

Your choices

The Privacy choices button is available throughout the site. Necessary technology cannot be switched off in the tool because sign-in, security, billing, and the saved choice depend on it. Analytics is off until you choose it, and you can reject it or change your mind at any time. Marketing remains disabled while no advertising vendor is configured; a future policy version will ask again before any such tool can run. Withdrawing Analytics deletes that browser's first-party audience sessions and removes its identifier from booking-link clicks; the minimum consent receipt and de-identified counts may remain.

Beauty Bee honors a browser's Global Privacy Control signal by keeping Marketing off, even if an older saved choice said yes. We also treat a Do Not Track signal as a request to keep both Analytics and Marketing off.

Account notification choices are separate from website Analytics and Marketing choices. Open Account, then Notifications, to turn optional categories or email delivery on or off. Promotional messages require an explicit opt-in, and every optional notification email includes a link to turn off that category.

Whoever you are and wherever you live, you can ask us to:

• Tell you what we hold about you.
• Correct anything that is wrong.
• Delete your account and the information in it.
• Send you a copy of what you gave us.
• Disconnect a social account or revoke Beauty Bee's access in that platform's account settings.

Deleting is self-service: open Account in Beauty Bee, choose Close my account, and confirm with your password. You are signed out straight away, and any subscription is paused so you are not charged while the account is closed.

Your information is then held for 30 days. Sign back in during that window and the account comes back exactly as it was, plan included. After 30 days it is deleted for good — your photos, your generated content, your history — any subscription is cancelled at that point, and we cannot get any of it back for you.

For anything else, email [email protected] and say which. We will reply within 30 days. We will not charge you, and we will not make your account worse for asking.

Depending on where you live — New Jersey, other US states with privacy laws, the UK or the EU — you may have these rights by statute rather than by our choosing, along with the right to complain to your data protection regulator. We handle every request the same way regardless.

Security

Passwords are hashed with a per-user salt and never stored readably. Session tokens are stored hashed and expire. Social access and refresh tokens are encrypted at rest with a separate server-side key, and one-use OAuth requests are protected against being attached to the wrong signed-in account. Traffic runs over HTTPS. No system is perfect, and anyone who tells you theirs is should not be trusted with your data — but if we ever discover a breach affecting your information, we will tell you.

Children

Beauty Bee is a tool for working professionals and is not for anyone under 18. We do not knowingly collect information from children. If you believe a child has given us information, email us and we will remove it.

Changes

If we change this policy in a way that affects you, we will say so here and date it. Continuing to use Beauty Bee after that means the new version applies.

Contact us

Email

[email protected]

Hours

8am – 8pm Eastern

Mail

AD Venture Group LLC
418 Broadway #7708
Albany, NY 12207
USA

This policy is governed by the laws of the State of New Jersey.