Privacy Policy

1. What we collect

• The selfie image(s) you upload.
• Analysis results (face shape, skin tone RGB, color season, hair / makeup / outfit recommendations, generated report).
• Payment status (from Stripe — only "paid / unpaid", never card numbers).
• Necessary browser metadata (language, device type, error logs) for troubleshooting and product improvement.

2. Why we collect it

Sole purpose: generate your personal image report for this session. We do NOT do any of the following: identity recognition, face search, medical diagnosis, psychological assessment, or age / gender / ethnicity inference.

3. How we store it

• Images: S3-compatible object storage (production) or local FS (dev).
• Structured data (sessions, reports, analyses): PostgreSQL (production) or SQLite (dev).
• All third-party traffic (CV, LLM, Stripe) goes over HTTPS.

4. Retention

Selfies are auto-deleted after 30 days by default. Structured analysis data (without selfies) is kept until you request deletion. Payment records are retained for the legal minimum.

5. How to delete your data

Two options:

• Click "Delete my data" at the bottom of your report page — this immediately removes the session's images and analysis.
• Email privacy@looksona.com with your session ID (sess_…) or report ID (rep_…); we'll delete within 7 business days.

6. Things we never do

• No face recognition or face search.
• We do not sell your selfies or personal data.
• We do not use your images as model training data.
• We do not share your images with advertisers or marketing third parties.
• No medical, cosmetic, or psychological diagnosis.
• No "beauty score" of any kind.

7. Third-party services we use

• Stripe (payments) — we never see your card data. See stripe.com/privacy.
• Object storage (Cloudflare R2 / AWS S3) — for selfie images.
• LLM API (OpenAI gpt-5.5) — used to generate the full report copy. Only structured analysis labels are sent (face shape, color season, etc.); no images.
• OpenAI gpt-image-2 image generation (paid users, opt-in only) — when you check the consent box and tap "Generate hairstyle previews", we send your selfie to gpt-image-2 to render 3 preview images. OpenAI does not retain the image for training; see OpenAI's API data usage policy. This step is optional — no consent, no upload.
• Computer vision service (self-hosted by Looksona) — analyzes the image within ~60 seconds; image bytes are released from memory after analysis.

8. Minors

Looksona is for users 16 and older. If you are under 16, please use this service with a guardian's consent or do not use it. Sessions identified as belonging to minors will be proactively deleted.

9. Disclaimer

Looksona provides "color and style direction guidance," not medical advice or absolute diagnosis. Color and face-shape detection is algorithmic and may be affected by lighting, filters, and device. For any major spend (haircut, full wardrobe refresh), use your own judgment or consult a professional stylist.

10. Contact

Privacy questions, data requests, compliance: privacy@looksona.com