Privacy Policy

Scope

This Privacy Policy applies to AI Color Analysis at aicoloranalysis.net ("AI Color Analysis," "we," "us," or "our"). It explains what information we process, why we process it, how long we keep it, and the choices available to you.

Information We Process

Depending on how you use the service, we process:

1. Analysis session data — A random analysis identifier, an access-token hash, consent version and time, language, status, and timestamps.
2. Face-photo pixels — A full normalized pixel image derived from the photo you choose, used to generate your color analysis.
3. Derived analysis data — Face-position and photo-quality checks, sampled skin-region color measurements, seasonal scores, palettes, explanations, and engine/calibration versions.
4. Account data — Your name, email address, login method, and account activity when you create or use an account.
5. Purchase data — Product, order, payment status, transaction identifiers, currency, amount, and entitlement status. Full card details are handled by the payment provider and are not stored by us.
6. Support data — Messages, ticket history, and attachments you submit to customer support.
7. Technical data — IP-derived security and quota signals, browser/device information, request logs, cookies, and service performance data.

How Photo Analysis Works

Before upload, an on-device MediaPipe check evaluates whether exactly one face is visible and suitably positioned. Your browser then resizes the photo to at most 1024 pixels on its longest edge and converts it to sRGB pixel data. These local steps do not identify you.

After you give explicit consent and start an analysis, the original encoded JPEG, PNG, or WebP file remains on your device. The full normalized pixel image is transmitted over HTTPS to private Cloudflare R2 storage. Because those pixels preserve the visual content of the photo, we protect and retain them as photo data. The analysis engine samples limited forehead, cheek, and jaw regions to estimate color relationships and photo quality. We do not use the photo for facial recognition, identity matching, advertising, or training a general-purpose AI model.

Your photos are not placed at a public URL. Access is limited to the service components needed to process or delete the analysis.

How We Use Information

We use information to:

• Provide the requested analysis and any purchased report.
• Create and secure accounts, sessions, and report entitlements.
• Process purchases, refunds, disputes, receipts, and tax-related records.
• Enforce usage limits and prevent fraud, abuse, and unauthorized access.
• Respond to support requests and diagnose service failures.
• Measure service reliability and improve the product.
• Comply with legal obligations and enforce our Terms of Service.

We process the submitted photo based on your consent and your request for the analysis. Account, order, and support information is processed to provide the service, protect legitimate interests such as security and fraud prevention, and meet legal obligations.

Retention and Deletion

Production retention settings are designed as follows:

• The original encoded photo file is not uploaded by this analysis workflow.
• The uploaded normalized pixel image is scheduled for deletion within 24 hours.
• The analysis session, measurements, and free result expire within 30 days.
• Selecting Delete analysis requests earlier deletion of private photo objects and clears stored measurements, scores, quality data, and result content.

Deletion jobs retry when an infrastructure operation fails. A minimal deleted record and operational logs may remain for security, abuse prevention, and deletion auditing.

If you purchase a report, its generated report snapshot, order, and entitlement may remain in your account until you request deletion, the purchase is refunded or disputed, the account is deleted, or retention is required for tax, fraud, or legal purposes. Purchasing a report does not extend photo retention.

Service Providers and Sharing

We do not sell personal information. We disclose information only as needed to operate the service:

• Cloudflare provides website delivery, security, Turnstile, Workers, D1 database, private R2 storage, and queues.
• Creem, when checkout is enabled, acts as Merchant of Record and handles payment processing, taxes, receipts, refunds, and disputes. Creem receives the information necessary to complete and support the transaction.
• Analytics providers, such as Google Analytics or Plausible, may receive limited device and usage data only when the relevant analytics integration is enabled.
• Professional advisers, authorities, or other parties may receive information when required by law or reasonably necessary to protect users, the service, or legal rights.

These providers may process data in countries other than your own and apply their own legally required retention periods.

Cookies

We use cookies and similar storage for authentication, security, language and theme preferences, and essential interface state. Optional analytics cookies or scripts are used only when the corresponding analytics service is enabled. Browser settings can limit cookies, but disabling essential cookies may prevent account features from working.

Your Choices and Rights

You can delete an analysis from its result screen, update available account details, and contact us to request access, correction, export, restriction, objection, or deletion where applicable. We may need to verify your identity before completing an account-level request. Some order and transaction records must be retained to meet tax, fraud-prevention, chargeback, or other legal obligations.

Security

We use HTTPS, private object storage, access controls, hashed analysis tokens, limited retention, and deletion workflows. No system can guarantee absolute security, so please do not submit an image you are not authorized or comfortable to process.

Children

The service is not directed to children under 13. If you believe a child has submitted personal information without appropriate authorization, contact us so we can investigate and delete it.

Changes

We may update this policy when the product, providers, or legal requirements change. The date at the top shows the latest revision. Material changes will be communicated through the website or account when appropriate.

Contact

Privacy and data requests: support@aicoloranalysis.net. We aim to respond to customer support requests within three business days.