Privacy policy

1. Information we collect

• Account information: your email address, account identifier, sign-in method, and authentication/session records. Email links are used for sign-in. Previously connected provider identifiers may remain in older accounts until deletion.
• Photos and creations: photos you upload, head names, edited images, generated 3D heads, thumbnails, and smaller viewing copies. These may contain your face or another person's likeness.
• Generation records: account and job identifiers, creation attempts, prompts and settings, provider task identifiers, timestamps, processing stages, and error information.
• Billing information: payment-provider customer and subscription identifiers, subscription status, billing periods, and creation allowances. Stripe handles payment details through its checkout. SalonTwin's application does not receive or store your full payment card number.
• Landing-page click counts: a random browser identifier, click time, button location, and broad screen category (mobile, tablet, or desktop) when you click Try the free model. These records are not linked to your account, email, photos, or payment details. We do not store your IP address in these click records.
• Technical and support information: IP addresses used for security and rate limiting, request and error logs, browser/device information available to our infrastructure providers, and the category, message, reply-to email, optional screenshot, recovery request, and review record you send when contacting us.

Photo drafts, viewer settings, cached assets, and session information may also be stored on your device. When you click Create my twin, the photos are uploaded to a private draft before checkout. Generation starts only after payment and account access have been verified.

2. How we use information

We use information to sign you in, keep your account and creations available, edit photos and generate models, display hairstyles, manage subscriptions and usage limits, send sign-in and head-ready emails, respond to support requests, diagnose failures, and protect against misuse and excessive requests.

Face photos and 3D models are used to visualize appearance. SalonTwin does not use them to authenticate your identity or identify you among other people. Please upload only photos you have permission to use.

3. Email access and recovery

After a confirmed checkout, SalonTwin uses the checkout email to create or find the matching account and sends a secure, expiring login link. Payment alone does not verify ownership of the email address or give access to private content. Returning users can request a fresh email link.

If you entered the wrong checkout email, a separate verification link confirms your corrected address. An authorized support reviewer must verify purchase ownership before reconnecting that specific purchase. This does not rename another account or transfer its existing heads. We retain the original checkout email and an audit record of the review.

4. Who processes information

We use these providers to operate SalonTwin. They receive information needed for their role:

Cloudflare

Website and backend hosting, security, anonymous landing-page click records in D1, and private R2 storage for uploaded photos, edited images, models, and generation history.

Supabase

Authentication and database storage for account, subscription, usage, generation, and notification records.

OpenAI

Uploaded reference photos and editing instructions to prepare images for head creation, plus a hashed account identifier used with the image request.

Hi3D

Prepared images and generation settings to produce the 3D model, along with provider task records.

Stripe

Email and account/customer identifiers, checkout and subscription information, and payment details you provide directly to Stripe.

Resend

Email addresses and message content for authentication and service notifications, such as access links, recovery verification, support inbox messages, and a link to a completed head.

Provider handling, including their own logs, retention, and any permitted use of submitted content, is subject to the applicable provider terms and settings. Deleting content from SalonTwin does not automatically delete every copy held by a provider. We do not promise that provider copies are immediately removed or that every provider follows the same AI-training rules.

Provider notices: Cloudflare, Supabase, OpenAI, Hi3D, Stripe, Resend, Google for previously connected accounts.

We may also disclose information when required by law or when reasonably necessary to protect users, investigate fraud or abuse, or defend legal rights. SalonTwin does not sell personal information or share it for cross-context behavioral advertising. Private photos and custom heads are not publicly listed by SalonTwin.

5. Retention and deletion

Before generation: unpaid uploaded drafts expire after 24 hours. Paid drafts are retained for seven days while you complete account access. A purchase-recovery request may extend that draft retention, up to 30 days from draft creation. Expired draft photos are queued for private-storage cleanup. A purchase can still be reviewed if its draft photos have expired; you may need to upload them again.

Help and feedback: messages, optional screenshots, and recovery review records are private to authorized support reviewers and service providers. Messages are sent to the SalonTwin support inbox, where replies are handled. Support screenshots are not public links. Support and recovery records are retained to handle your request and related disputes, and do not currently have automatic deletion. Contact us to request their removal; limited transaction or security records may need to remain.

There is currently no automatic expiry for saved generation photos and history. Original uploads, edited images, generated heads, and their private diagnostic history are retained until you delete the associated head, delete the account where that feature is available, or request deletion. This includes successful, failed, and retried generations.

Deleting a head removes it from your library and queues its stored files for cleanup. Cleanup can take time and is retried if a service is unavailable. Limited database, security, transaction, or backup records may remain after file deletion where needed to operate securely, resolve disputes, or meet legal obligations.

In the test environment, self-service deletion of the shared sign-in account is disabled. You can delete individual heads or email us to request account and data deletion. Subscription cancellation alone does not delete saved content.

Local photo drafts and cached copies can remain on your device independently of cloud deletion. Remove drafts in the app and clear SalonTwin site data in your browser to remove local copies. Signing out is not the same as deleting those copies.

Our deletion process does not automatically erase provider-held copies or records. Contact us for assistance with a deletion request involving a provider.

6. Cookies and browser storage

We use essential session storage and browser storage to keep you signed in, remember viewer preferences, and save drafts. The private test site also uses a secure session cookie to control entry. Sessions can remain active between visits until you sign out, clear site data, or the session expires or is revoked.

SalonTwin uses first-party click counting hosted on Cloudflare to understand use of the landing page. A random identifier in your browser storage distinguishes repeat clicks for up to 90 days. It identifies a browser, not a named person. Click records are deleted by a daily cleanup after 90 days. Clearing site data or using another device creates a different identifier. We skip click counting when Do Not Track or Global Privacy Control is enabled, or when you opt out below. Turn off anonymous click counting

SalonTwin does not use advertising pixels or third-party behavioral analytics. It does not track you across unrelated websites for advertising. We do not change essential storage behavior in response to a browser Do Not Track signal. Because we do not sell or share personal information for targeted advertising, there is no such sale or sharing for a Global Privacy Control signal to opt out of. Stripe may use its own cookies or similar technology during checkout under its policies.

7. Security and international processing

We use HTTPS, private asset storage, authenticated access checks, and account-based database controls. Authorized administrators and service providers may access data to operate the service and troubleshoot problems. No online service can guarantee absolute security.

Our providers may process or store information outside your state or country, where data-protection laws may differ. We do not promise that all information remains in your country.

8. Your choices and privacy requests

You can use secure email sign-in links, sign out, remove local drafts, delete saved heads, and manage a subscription through Account & billing. To request access to, a copy of, correction of, or deletion of personal information, email [email protected]. We may need to verify that the request relates to your account before providing or deleting information.

Depending on your location and the laws that apply, you may also have rights to restrict or object to processing, withdraw consent where processing relies on it, or complain to your local data-protection authority. We will consider requests under applicable law. Some information is necessary to provide account and generation features.

9. Children

SalonTwin is not intended for children under 13. If you believe a child under 13 has provided personal information to us, contact us so we can investigate and address deletion.

10. Changes to this policy

We will post changes on this page and update the date above. For material changes, we will provide an additional notice in the app or by email where appropriate or required by law.