Privacy Policy

This Privacy Policy explains how we collect, use, store, and protect information when you use our Personal Color Analysis service, including the website, analysis tools, account features, and payment features.

By using the service, you agree to the practices described in this Privacy Policy.

Information We Collect

We collect information that is necessary to provide and improve the service:

Account information: If you sign in, we may collect basic profile information provided by your login provider, such as your user ID, email address, name, and profile image.
Uploaded photos: To provide Personal Color Analysis, you may upload photos for analysis.
Generated reports: The service may generate color analysis results, including visual report images and related analysis text.
Usage and analytics data: We may use analytics tools such as Google Analytics and Microsoft Clarity to understand how users interact with the website and improve the product experience.
IP address and technical data: We may collect IP addresses, browser information, device information, and similar technical data for security, fraud prevention, rate limiting, and abuse prevention.
Payment data: Payments are processed by payment providers such as Stripe. We do not store your full credit card number or sensitive card details.

Uploaded Photos and AI Processing

Personal Color Analysis requires processing the photos you upload. When you submit a photo, we may send it directly to third-party AI providers or model inference providers so they can analyze the image and produce your color analysis results.

For larger photos or technical processing needs, an uploaded photo may be temporarily stored in our storage infrastructure before or during analysis. These temporary files are used only to operate the service and are scheduled for deletion. We do not intentionally keep uploaded photos on our servers long term, and we do not use uploaded photos for unrelated purposes such as advertising, resale, or training our own models without your explicit permission.

Third-party AI providers and infrastructure providers process uploaded photos as subprocessors for the purpose of providing the service. Their processing may be subject to their own privacy and security terms.

Generated Reports and Retention

Generated reports are handled differently depending on the type of user or feature used:

Free users: Generated report images are stored only in the user's browser or client-side session. We do not intentionally store free users' generated report images in our backend storage.
Paid users: Paid users may have generation records so they can view or retrieve past reports. Paid users' generated report images and related generation records are retained for a limited time and are automatically deleted no later than 12 days after generation, unless deletion is required sooner by law, security needs, or a user request that we are able to honor.

Browser storage, downloads, screenshots, or copies that you create on your own device are controlled by you and are not deleted by our backend retention process.

How We Use Your Information

We use collected information to:

Provide, operate, and maintain the service.
Analyze uploaded photos and generate Personal Color Analysis reports.
Let paid users access recent generation records for a limited time.
Improve, personalize, and troubleshoot the website and product experience.
Monitor usage, prevent abuse, detect fraud, and protect the security of the service.
Process payments and manage subscriptions or purchases.
Communicate with you about service updates, support requests, billing, and account matters.
Comply with legal obligations and enforce our Terms of Service.

We do not sell your uploaded photos or generated reports.

Cookies and Similar Technologies

We use cookies and similar technologies such as local storage, pixels, tags, and SDKs to operate the website, remember preferences, support authentication, process payments, measure performance, understand usage, and prevent abuse.

Advertising and analytics partners may use cookies or similar technologies according to their own policies. You can control cookies through your browser settings and, where available, through the preference tools provided by those partners.

Analytics and Advertising Partners

We may use third-party analytics and advertising services, including Google Analytics, Google Ads, Google AdSense, and Microsoft Clarity. These providers may collect information such as page views, clicks, device information, browser information, approximate location based on IP address, referrer URLs, and cookie or advertising identifiers.

Google may use cookies, including advertising cookies, to serve or measure ads. You can learn more about Google's advertising technologies at https://policies.google.com/technologies/ads.

Microsoft Clarity may collect interaction data such as clicks, scrolling, and session information to help us improve usability. You can learn more at https://privacy.microsoft.com/privacystatement.

Payment Processing

Payments are processed by Stripe or other payment partners. These providers may collect payment method details, billing information, IP address, device information, and fraud-prevention signals. We do not store your full payment card details on our servers.

Stripe's Privacy Policy is available at https://stripe.com/privacy.

Subprocessors

To provide the service, we may use selected third-party providers, including:

Google Cloud Platform
- Service: Authentication, infrastructure, and related cloud services.
Vercel
- Service: Hosting and deployment infrastructure.
Cloudflare
- Service: Performance, security, content delivery, DDoS protection, and storage services.
Stripe
- Service: Payment processing, billing, and fraud prevention.
FAL
- Service: GPU computing resources and model inference.
Replicate
- Service: GPU computing resources and model inference.
Hugging Face
- Service: Model hosting, inference, and related machine learning infrastructure.
AI model providers
- Service: Image analysis, model inference, and generation of Personal Color Analysis results.

We use these providers to operate the service and process data for the purposes described in this Privacy Policy.

Data Security

We use reasonable technical and organizational measures to protect information processed by the service. However, no internet-based service can guarantee complete security. You are responsible for maintaining the security of your account, browser, and downloaded files.

Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including providing the service, maintaining account and payment records, preventing abuse, complying with legal obligations, and resolving disputes.

Uploaded photos are not intentionally retained long term on our servers. Temporary uploaded photos are scheduled for deletion. Paid users' generated report images and related generation records are retained for no more than 12 days after generation. Free users' generated report images are not intentionally stored in our backend.

Your Privacy Rights

Depending on where you live, you may have rights to access, correct, delete, restrict, object to, or receive a copy of your personal information. You may also have the right to withdraw consent where processing is based on consent.

If you make a privacy request, we will respond within the time required by applicable law. We may need to verify your identity before fulfilling certain requests.

CCPA Privacy Rights

California residents may have the right to request information about the categories and specific pieces of personal information we collect, request deletion of personal information, request correction of inaccurate personal information, and opt out of the sale or sharing of personal information where applicable.

We do not sell uploaded photos or generated reports.

GDPR Data Protection Rights

Users in the European Economic Area, United Kingdom, or other regions with similar laws may have the right to access, rectify, erase, restrict processing of, object to processing of, and request portability of personal data, subject to applicable legal limits.

Children's Information

The service is not directed to children under 13. We do not knowingly collect personal information from children under 13 without appropriate consent. If you believe that a child has provided personal information to us, please contact us and we will take appropriate steps to remove it.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will post the updated version on this page and update the effective date where appropriate. Changes are effective when posted unless otherwise stated.

Contact Us

If you have any questions or requests about this Privacy Policy, please contact us through the contact method provided on the website.