Last updated: August 12, 2026. This policy applies to the HairLook AI service operated by HairLook AI, .
What we collect
We collect the information you intentionally provide during the style consultation, such as email address, age range, hair length and texture, current and desired color directions, styling preferences, bangs and gray preferences. We also collect the portrait you upload, generated result images, payment/order status, basic session/security data, and campaign attribution such as UTM parameters.
How your photo is used
Your uploaded photo is used to create hairstyle visualizations. It is stored in private cloud storage and may be provided through a short-lived signed URL to the configured AI image-processing provider solely for the generation workflow. The current architecture does not intentionally create or store facial-recognition embeddings, biometric identification templates, or a medical face-shape diagnosis.
Retention
The default deployment deletes original uploaded portraits after approximately 24 hours through an automated cleanup job. Generated results are retained for approximately 30 days by default. Operators can configure these periods; the live service should keep the values shown here synchronized with production settings. Operational records required for payment, fraud, tax, security, legal or audit purposes may be retained longer where reasonably necessary.
Service providers
We use service providers for hosting/database/storage, AI image processing, email delivery, and payment processing. PayPro Global may act as Merchant of Record for the digital purchase and will process payment and billing information under its own privacy terms. HairLook AI does not need to store full card details.
Security
Originals and results are designed to remain in private storage. Browser clients do not receive Supabase secret keys, PayPro secret keys or AI provider tokens. Access to results is session-based, and private files are delivered with short-lived links. Administrative photo access is logged.
Analytics
We record first-party funnel events such as landing view, quiz completion, upload completion, checkout start and dashboard access. We do not place raw photo content in analytics metadata. Campaign parameters may be stored to understand acquisition performance.
Your choices and requests
You may delete your current HairLook AI account and remaining private files from the dashboard. You may also contact us to request access, correction or deletion where applicable. Depending on where you live, additional privacy rights may apply.
Children
The service is intended for adults and is not designed for children. Do not upload a child’s portrait unless the live service has separately implemented the consent and legal safeguards required for that use case.
Contact
Privacy questions can be sent to support@example.com.
This production template should be reviewed against the operator’s actual legal entity, state/country obligations, vendor contracts and final retention settings before public launch.