Privacy without
the guesswork.

Who operates BestShot?

BestShot’s hosted website and Watch service are operated by Stephen Lovino. For privacy, account deletion, or support, email hi@stephenlovino.com. This notice covers bestshot.site and watch.bestshot.site, and explains how the desktop app connects to Watch. Self-hosted installations are controlled by their own operators.

What we process, and why

Account and workspace information

Your name, email, profile photo, sign-in provider identifiers, workspace membership, preferences and authentication records let us sign you in, secure your account and provide the workspace. Passwords, where used, are stored as salted hashes.

Shots and conversations

Watch stores shot titles, file identifiers or media URLs, type and size, sharing settings, timestamps, edits, published transcripts or summaries, comments, reactions and view records. These provide playback, collaboration and sharing. A guest comment includes the name and message you submit.

Storage connections

When you connect Drive, we retain an encrypted authorization credential to access the specific files used with BestShot, not your entire Drive. For GoHighLevel, we retain your location ID, selected destination and encrypted private integration token. The server must be able to decrypt these credentials to provide the features you request.

Media in transit

Drive playback passes through the BestShot server using the owner’s connection. GHL uploads may pass through the server when direct upload is unavailable. Storing a video in your own account does not mean that its contents never pass through BestShot.

Local recordings and editing

Browser recordings and editing projects use browser storage on your device. An edited export is uploaded only when you choose to upload it; recording auto-upload follows the setting shown before recording. Clearing site data can remove local copies. Camera, microphone and screen capture require browser or operating-system permission.

AI features

Desktop captions and transcription use downloaded models on your device. Browser editor captions use browser-side processing and their own model downloads. Uploaded transcripts become part of the Watch shot. Server transcription and external AI summaries are currently disabled on watch.bestshot.site. Self-hosted Watch can be configured for server transcription and an external summary provider; that processing is different from local AI. We will update this notice and identify the processing provider before enabling external AI summaries on the hosted service.

Cookies, local preferences and technical information

We use session cookies for sign-in, temporary authorization cookies, and a visitor identifier for per-shot view counts. Session cookies last up to seven days; the visitor cookie lasts up to one year. Browser storage holds drafts, editor projects and preferences. Hosting and network services receive IP addresses and request information needed to deliver and protect the service. The application uses IP-based rate limits.

We use this information to deliver the service, operate and secure it, respond to support requests, prevent misuse and meet applicable legal obligations. This notice is not permission to use recordings for unrelated purposes. BestShot’s local transcription code uses downloaded speech models to transcribe your input; it does not train those models on your recordings.

Who can access my videos and data?

“Private to workspace” controls access through Watch. Workspace members can access workspace shots. People with an enabled sharing link can access that shot subject to its password and sharing settings. Anyone receiving your content can make their own copy.

GHL media links are a separate access path. Anyone who has the direct media URL may be able to open it even when the Watch page is private. Deleting or restricting a Watch link does not revoke copies or direct provider links.

Authorized service operators have technical access. BestShot is not end-to-end encrypted. The operator can access the server database and connected media within the permissions granted to BestShot. Access may be needed to operate the service, investigate security or abuse, respond to legal requirements, or help with a support request. For support involving private content, we will ask you to identify or share the relevant shot rather than treat a general support request as permission to browse your library.

There is currently no support “log in as you” feature. Reading this notice does not enable impersonation or grant an additional support session.

Hetzner provides hosting. Google provides optional sign-in and Drive storage; GitHub provides optional sign-in and software distribution; GoHighLevel/LeadConnector provides optional media storage. Profile images can load from your sign-in provider. These providers process information under their own terms and privacy notices. Data handled by them is not guaranteed to remain in Finland.

Retention and deletion

Local recordings remain in your browser until you discard them or browser storage is cleared or evicted. Watch account and shot records currently remain until deleted or removed following a request; there is no general automatic account-expiry schedule.

Deleting a Watch shot removes its Watch record and any corresponding server-local media. It does not delete the original from Google Drive or GoHighLevel, or recordings on your devices. Delete those copies separately with the relevant provider. Disconnecting a storage account removes BestShot’s saved connection but does not delete previously uploaded files.

To request account deletion or a copy of your account information, email hi@stephenlovino.com from your account address. We will verify the request and explain its scope, including shared workspace records and provider-held copies. Backup and infrastructure-log retention is not currently published as a fixed deletion period; we will explain any retained copies and applicable constraints when handling a request. We do not promise immediate deletion of every backup.

Your choices and privacy requests

• Record locally without connecting storage, or turn off automatic upload before recording.
• Choose your Watch sharing setting carefully and avoid distributing direct GHL links for confidential content.
• Disconnect providers in your account menu. You can also revoke Google access in your Google Account and revoke a GHL token with its provider.
• Manage camera, microphone and screen permissions in your browser or operating system.
• Contact us to request access, correction or deletion, or raise an objection or privacy concern. Depending on applicable law, you may have further rights and may complain to your data-protection authority.

Only record or share content you have permission to capture. Inform other participants and obtain any permission required for your recording.

Updates to this notice

We will update the date and version when this notice changes and surface material changes in Watch. The first-use summary records which notice version you acknowledged and when; that acknowledgement is not consent to unrelated processing or private support access.