Privacy

No. It is read for the technique and then it is gone.

A reference photograph you upload is held in memory for the length of a single request. It is not written to disk, not put into object storage, not saved to a database, not attached to your account and not backed up. Nothing that could reconstruct the image survives the request.

What is kept is a technique label from a fixed list — knotless braids, a sew-in with a closure, mature locs, and so on — and that label is the entire content of what is kept.

No. No person recognition and no facial analysis of any kind is performed, requested or stored.

We do not derive, infer or record a face, an identity, an age, a gender, a skin tone or an expression from anything you upload, and there is no field anywhere in this service that could hold one. The instruction sent with the image explicitly forbids describing the person, and everything that comes back is reduced to a technique identifier before it reaches any other part of the system.

We generate no image of any hairstyle, so there is no rendering of you or of anybody else anywhere in this service.

No, and we go out of our way not to.

If what you write mentions hair loss, thinning, the condition of your scalp, breakage, soreness or anything else of that kind, the estimate stops instead of running and you are given a referral to a dermatologist or a trichologist. That message is not analysed, not scored, not attached to your account as a profile attribute and not used to train anything.

We do not knowingly collect any category of sensitive personal information, and we do not use or disclose sensitive personal information for the purpose of inferring characteristics about anyone.

No. Nothing you upload, type or generate here is used to train, fine-tune or evaluate any model, ours or anyone else's.

Account details: your email address, a hashed password, and the fact that you confirmed you are 18 or over.

Subscription details: which plan you are on, the term, renewal dates, the receipts, and the last four digits and brand of the card as they are given to us by the payment processor. Full card details never reach this site.

Use of the service: the technique labels you looked at, the estimates produced, and how much of your monthly allowance is left.

Basic security and operational logs: IP address, browser and timestamps, kept for 30 days and used to keep the service up and to deal with abuse.

That is the complete list. There is no analytics product on this site, no advertising technology, no cross-site tracking, no fingerprinting, no session recording and no third-party pixel of any kind.

Because we need it to give you the service you asked for and to keep the account you created, because we are required to keep records of payments, and because we have a legitimate interest in keeping the service secure. Where consent is the basis — the one cookie described in the cookie policy — you can withdraw it at any time and nothing else changes.

No. We do not sell personal information and we do not share it for cross-context behavioural advertising, as those terms are defined by the California Consumer Privacy Act as amended.

We honour Global Privacy Control signals automatically. If your browser or extension sends one, we treat it as a valid opt-out for that browser and you do not have to do anything else.

There is a permanent link in the footer of every page — "Do Not Sell or Share My Personal Information" — leading to a page of its own that says the same thing in more detail.

Only the suppliers that make the service run: the hosting provider that serves this site, the database and authentication provider that holds your account, the payment processor that takes the money, and the provider that sends transactional email. Each of them is bound by contract to process the data only on our instructions.

If a model is configured to read reference photographs, the image is passed to it for the length of that one request under an agreement that forbids retention and forbids training. If no model is configured — which is how this service ships — nothing leaves at all and you choose the technique yourself.

We do not disclose personal information to anyone else except where the law requires it, and we would tell you if that happened unless we were forbidden to.

Reference photographs: not at all. They do not survive the request.

Account and use records: while your account exists, and for 30 days after you delete it, after which they are erased.

Payment records: seven years, because tax and accounting rules require it. These are amounts, dates and invoice numbers, not card details.

Security logs: 30 days.

You can ask us what we hold about you, ask for a copy of it, ask us to correct it, ask us to delete it, ask us to limit what we do with it, and object to what we do with it. You can also ask us not to sell or share it, which is a question we can only answer one way, because we do not.

There are two ways to ask, and neither of them requires you to create an account: email support@authenticstyles.shop, or telephone +1 359 468 8962. Signed-in users can also delete an account outright from the account page, which erases everything described above.

We answer within 45 days. If a request is genuinely complex we may take another 45 days and we will tell you why before the first 45 are up.

We will never charge you, degrade the service, change your price or refuse you anything because you exercised a right. If we ever have to verify who you are before acting on a request, we ask for the minimum that will do it and we delete what we asked for once the request is closed.

The service is hosted in the United States and may be accessed by our suppliers elsewhere. Where personal information is transferred out of the region it was collected in, that transfer is made under the standard contractual clauses or an equivalent lawful mechanism.

Traffic is served over HTTPS with HSTS. Passwords are stored hashed. Access to production systems is restricted to the people who need it, and we review that list.

If a breach ever affects you, we will tell you and the relevant regulator within the time the law allows, and we will tell you what we know rather than what is comfortable.

The service is not offered to children under 13 and we do not knowingly collect personal information from them. A subscription requires you to be 18 or over.

If you believe a child under 13 has given us information, write to support@authenticstyles.shop and we will delete it.