Privacy Policy

1. Who we are

VISAGE ("we", "us") is an AI-powered facial analysis service. Our contact email is privacy@visage.ai.

2. What data we collect

• Account data: Your email address, chosen display name and username when you register.
• Payment data: Payments are processed by Stripe. We do not store credit card numbers — ever.
• Analysis scores: If you have a paid account, we store your score history (numbers only, not photos) so you can track progress over time.
• Usage data: Standard server logs (IP address, timestamp, pages visited) for security and debugging. Logs are deleted after 30 days.

3. What we do NOT collect

• Your photos are never stored. Images are processed in real-time and immediately discarded after analysis. We have no database of your face.
• We do not build facial recognition profiles.
• We do not sell, rent or share your personal data with third parties for marketing.

4. AI Analysis

Your photo is sent to Anthropic's API (Claude) for analysis. Anthropic's privacy policy governs how they handle API data. Per Anthropic's enterprise terms, API inputs are not used to train their models.

5. Cookies

We use only essential cookies — a session token stored in your browser's local storage to keep you logged in. We do not use tracking or advertising cookies.

6. Affiliate links

Product recommendations in your report may contain Amazon affiliate links. Clicking them earns us a small commission at no cost to you. We do not track which specific products you purchase.

7. Data retention

• Account data: retained while your account is active.
• Score history: retained while your account is active, deleted on account deletion.
• Photos: never retained (processed in memory only).
• Server logs: 30 days.

8. Your rights (GDPR / CCPA)

You have the right to access, correct or delete your personal data at any time. To do so, email privacy@visage.ai or delete your account directly in the member area.

9. Children

VISAGE is not directed at children under 16. We do not knowingly collect data from minors. If you believe a minor has created an account, contact us immediately.

10. Security

We use industry-standard security: HTTPS everywhere, bcrypt password hashing, rate limiting on all auth endpoints, and regular security reviews. Despite our best efforts, no system is 100% secure — please use a strong, unique password.

11. Changes

We may update this policy. If changes are material, we will email registered users. Continued use after changes constitutes acceptance.

12. Contact

Questions? Email privacy@visage.ai.