Privacy Policy

1. Introduction

Your privacy is of paramount importance to us. This Privacy Policy outlines how CutMatch AI collects, uses, processes, stores, and protects your information, including the photos you upload to analyze your hair characteristics.

2. Information We Collect

We collect the following types of information to provide and improve our services:

• Account Credentials: Email address and authentication tokens when you sign up/log in (via Supabase Auth).
• Profile Details: Display name, preferred length, hair type, density, hairline type, hair concerns, product preferences, and allergies.
• Uploaded Photos: Images of your head (front, side, top, and back views) uploaded specifically for AI hair diagnostics and try-on generations.
• Transaction Info: Payments, card details, and refills are processed securely by Stripe; we do not store credit card credentials on our servers.

3. How We Process Your Photos (AI Diagnostics)

When you upload your photos for a hair scan:

1. Your photos are securely stored in our encrypted storage bucket (Cloudflare R2 or Supabase Storage).
2. We transmit your photos via encrypted SSL connections to secure third-party AI models (like OpenAI APIs) for face-mapping, hairline shape, and density analysis.
3. Our AI partners process these photos solely to generate styling recommendations and rendering try-ons. They do not retain your photos or use them to train their base models.
4. We do not sell, rent, or lease your photos or biometric indicators to any third-party marketing companies.

4. Storage, Security, & Retention

We utilize enterprise-grade security structures through Supabase and cloud providers. All uploaded data is transmitted via HTTPS and encrypted at rest.

Data Retention: We store your photo files and diagnostic reports on our secure servers only as long as you choose to keep your account open. If you delete your account or click "Purge Scans" inside your workspace dashboard, all related photos and diagnostic databases are deleted from our active servers instantly.

5. Cookies & Ad Tracking Disclosures

We use cookies to maintain your login session (Supabase) and handle payments (Stripe).

Google AdSense: Free Trial accounts will see ad banner placements. We use third-party advertising services like Google AdSense, which may use cookies to serve personalized advertisements based on your visits to this and other websites. You can opt out of personalized advertising by visiting your browser settings or Google Ad Settings.

6. Your Data Rights (GDPR / CCPA Compliance)

Depending on your location, you hold legal rights regarding your personal data:

• Access: The right to request copies of your personal data and uploaded photos.
• Rectification: The right to update your profile data at any time from the profile settings panel.
• Erasure (Right to be Forgotten): The right to purge all files and account records instantly.
• Consent Withdrawal: The right to revoke our authorization to process your photos (which can be done by pausing scan submissions).

7. Children's Privacy

Our App is not intended for use by individuals under the age of 13. We do not knowingly collect personal data or photos from children under 13. If you believe a child has uploaded photos or registered, contact us and we will delete the data immediately.

8. Contact Us

If you have any questions or data requests regarding this Privacy Policy, please send an inquiry through our Support & Contact Page.