Last updated: August 21, 2026. This policy applies to PremiumHairstyles AI, operated by PremiumHairstyles AI, .
Information we collect
We collect information you intentionally submit during the consultation, including email address, age range, current and desired hair length, texture, color preferences, style goals, maintenance preferences, bangs and gray preferences. We also process the portrait you upload, email-verification status, order/payment status, basic security/session information, and first-party campaign attribution such as UTM parameters.
How we use your information
We use this information to save your consultation, verify your email, prepare and deliver the personalized hairstyle service, provide order support, prevent fraud and abuse, maintain service security, understand first-party funnel performance and comply with legal/payment obligations.
How your photo is handled
Your portrait is stored in private storage and is not intentionally published as a public asset. Authorized operators may access a short-lived private link only when necessary to prepare or support your order. When AI generation is enabled for a protected reviewer demo or customer order, the service provides the configured image-processing provider, currently Replicate, with a short-lived signed image URL and the hairstyle instructions required to create the requested previews. The resulting images are copied back into our private storage. Only upload a portrait that you are authorized to use.
No biometric identification
The current service does not intentionally create or retain facial-recognition embeddings, biometric identity templates or medical diagnoses from uploaded portraits. Hairstyle results are visual planning material, not identity verification or health analysis.
Email verification and delivery
We send a six-digit verification code to the email you provide before checkout. Order-related messages and final hairstyle results are delivered to the verified email tied to the order. Transactional email delivery is currently provided through Resend.
Payments
Paddle acts as Merchant of Record for purchases completed through Paddle Checkout. Paddle processes billing and payment information under Paddle's own terms and privacy notice. PremiumHairstyles AI does not store full payment-card numbers.
Storage and retention
Uploaded originals are currently configured for retention of approximately 720 hours unless earlier deletion is requested or operational/legal needs require otherwise. Result files stored by PremiumHairstyles AI are currently configured for approximately 30 days. Payment, fraud, security, support and legal/audit records may be retained longer when reasonably necessary or required by law.
Service providers
We use service providers for hosting, database/storage, transactional email, payments and, when enabled, AI image processing. Current infrastructure includes Railway for application hosting, Supabase for database/private storage, Resend for transactional email, Replicate for configured AI image processing, and the payment providers described at checkout. Each provider processes data under its own contractual and privacy obligations.
Security
Private files are accessed through server-mediated operations and short-lived signed URLs. Browser clients do not receive Supabase secret keys, payment webhook secrets, Resend keys or AI-provider API keys. Administrative access is protected and sensitive operations are logged.
Analytics and browser storage
We record first-party funnel events such as landing view, quiz progression, upload completion, email verification and checkout start. We do not intentionally put raw photo content or full payment-card data into analytics metadata. See our Cookie & Storage Notice for details about essential session cookies and browser session storage.
Your choices and rights
Depending on your location, you may have rights to request access, correction, deletion, restriction, objection or portability. You may also request deletion of remaining private PremiumHairstyles AI data where applicable. Mandatory rights are not limited by this policy.
Children
The service is intended for adults and is not designed for children. Do not upload a child's portrait unless the operator has separately implemented the consent and legal safeguards required for that use case.
Contact
Privacy requests: support@example.com
Phone: .