01 /
1. Who We Are
RAFES365 is operated and registered in the United States. We are the controllers of the personal information described in this policy.
Contact: hello@rafes365.com
PRIVACY
Privacy Policy.
How your information is collected, used, protected, and shared when you use RAFES365.
LAST UPDATED / 05.01.2026
02 /
2. What We Collect
Information you provide directly
When you purchase a Face Report, Body Report, or Face + Body Bundle, we collect your name, email address, billing information processed by Stripe, intake form responses, the photos you submit for your report, and any messages you send us.
Information collected automatically
When you visit our website, we may collect IP address, approximate location, device and browser type, pages visited, time on page, referring source, and cookies or similar tracking data.
Information from third parties
We may receive payment confirmations and transaction details from Stripe, advertising attribution data from Meta, and delivery or engagement data from email providers.
03 /
3. How We Use Your Information
- Build your personalized Face Report, Body Report, or Bundle from your intake data and any photos you submit.
- Deliver your completed report and the personal note from our team that accompanies it.
- Provide email support for questions about your report.
- Process payments through Stripe.
- Operate and improve our website.
- Measure marketing and advertising performance.
- Comply with legal obligations, including tax reporting and lawful requests.
04 /
4. Your Photos
If you purchase a Face Report or Bundle, you will be asked to submit photos as part of your intake. Photos are optional for the Body Report, but strongly recommended because they allow a fuller, more accurate analysis instead of an estimate based on your stated statistics alone. Any photos you submit are used solely to build your personalized report.
Your photos are accessible only to the specific members of our team working on your report. We do not publish, share, or use your photos for marketing without your separate, explicit consent.
Submitted photos are deleted from storage once your report has been created, without you needing to request it. Your completed report and its hosting URL remain accessible for the support period described in this Privacy Policy and are removed only if you request it.
05 /
5. Payment Processing
All payments are processed by Stripe, Inc. We do not store your full credit card or banking details on our servers.
We retain transaction records, the last four digits of your payment method, and Stripe customer ID for accounting, tax, and support purposes.
06 /
6. Cookies, Tracking, and Advertising
Our website uses cookies and similar technologies for essential functionality, analytics, and marketing measurement. You can control cookies through your browser settings, although disabling certain cookies may affect site functionality.
We use Meta advertising tools, including Meta Pixel and Conversions API, to measure ad effectiveness and understand which ads and pages drive purchases. Data shared with Meta may include event type, event time, and hashed identifiers.
Our website does not currently respond to browser-level Do Not Track signals. We honor the cookie preferences you set on our site where available.
07 /
7. Who We Share Your Information With
- Service providers who help us operate, including Stripe, Resend, Vercel, Supabase, and Meta.
- The specific members of our team who work directly on building your report.
- Legal authorities if required by law, court order, or to protect our legal rights.
- We do not sell your personal information to anyone.
08 /
8. International Data Transfers
RAFES365 is based in the United States. If you access our services from outside the US, your information will be transferred to and processed in the United States. We rely on standard contractual protections where required.
09 /
9. How Long We Keep Your Information
- Intake data: retained for twelve months from your purchase date to support the email support window described in our Terms, then archived or deleted.
- Submitted photos: deleted from storage once your report has been created, without you needing to request it.
- Completed report and hosting URL: remain accessible for the twelve-month support period described in our Terms and are removed only if you request it.
- Transaction records: retained as required by US tax and accounting law, typically seven years.
- Marketing data: retained until you unsubscribe or request deletion.
- Analytics data: typically retained for 24 months in aggregated form.
10 /
10. Your Rights
Depending on where you live, you may have the right to access, correct, delete, object to processing, request portability, or withdraw consent for certain uses of your information.
To exercise any of these rights, email hello@rafes365.com. We will respond within a reasonable time, generally within 30 days.
11 /
11. Children's Privacy
Our services are intended for adults. We do not knowingly collect information from anyone under 18. If you believe a minor has provided information to us, contact hello@rafes365.com and we will delete it promptly.
12 /
12. Security
We use appropriate technical and organizational measures to protect your information, including encrypted connections, secure cloud infrastructure, access controls, and trusted service providers. No system is ever 100% secure, but we maintain industry-standard practices and review them regularly.
13 /
13. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will update the Last updated date at the top and, for material changes, notify clients by email.
14 /
14. Contact
For any privacy question or request, email hello@rafes365.com.
QUESTIONS /
We read every message personally.