Privacy Policy

Scope and contact

This policy explains how Color Analysis handles personal information when you use our website, photo tools, color reports, checkout, and support. For privacy questions or requests, email support@coloranalysis.tools or visit Contact.

Information we process

• Photos and results: your uploaded image, visible features used for styling analysis, report text, and generated previews. These may contain personal information about the person pictured.
• Private session data: a report reference, expiry time, processing status, and a browser cookie that verifies access to your report.
• Account information: name, email, login information, and preferences if you create an account or use an authenticated feature. The color report flow can be used without an account.
• Payment records: order reference, amount, currency, payment status, and transaction identifiers. Our checkout provider collects the billing details needed for payment. Our application does not store full card numbers or security codes.
• Support information: your email, messages, and information you choose to provide when asking for help.
• Usage and device data: visits, referrals, browser and device information, IP address, request timing, and technical errors used to operate, measure, and protect the service.

Purposes and legal bases

We use information to deliver your requested analysis or preview, maintain private report access, confirm payment, provide support, handle refunds, prevent fraud and abuse, and maintain the website. Where you opt in to marketing messages, we use your email to send them and provide an unsubscribe option.

Where applicable law requires a legal basis, our purposes include performing the service you request, complying with legal obligations, legitimate interests in security and service operation where permitted, and consent where required. Contact us about a specific use or to withdraw consent to a consent-based use. Withdrawal does not undo processing that already occurred lawfully.

Photo processing and AI providers

Your photo is sent to the provider configured for the tool. The application supports APIMart and OpenRouter for analysis and APIMart for styling images. A provider may use underlying model and infrastructure providers to fulfil the request. A complete report may require additional processing and generated previews. Face-shape, hair-color, and other photo tools also send inputs to the relevant AI provider.

We use your photo to deliver the requested service. We do not publish uploaded photos in a public gallery or sell them. A provider's storage, subprocessors, and retention are governed by its own terms and policies. Deleting a report from our application does not automatically delete provider copies. We do not promise that every provider immediately deletes uploads or excludes every downstream use. Contact us if you need help identifying the provider used for your request.

Private reports and retention

• Free report sessions: available for up to two hours from creation.
• Checkout sessions: starting checkout can extend temporary report retention to 24 hours to allow payment.
• Paid report sessions: available for 24 hours from payment confirmation. Download your PDF and available images before expiry.
• Replacing a report: choosing Upload a new photo removes the previous private snapshot from our application. Expired reports cannot be accessed and are cleaned up during subsequent report creation; expiry does not mean every stored copy is erased at that exact instant.
• Other photo tools: some process photos in memory or use temporary provider tasks instead of a saved color-report session. Provider retention still applies.
• Accounts, transactions, and support: kept while needed for the relevant feature and for necessary accounting, legal obligations, security, or dispute resolution. These records can outlast a photo session. Contact us about the criteria for your record or to request deletion.

Private report data is not saved as a public upload or in browser localStorage. The browser displays temporary previews. Access depends on the browser session cookie; clearing it or switching browsers can end access before expiry. Downloaded files are your own copies and are not removed when the online session expires.

Sharing and international processing

We share information as needed with hosting, storage, AI, payment, email, and support providers. Report checkout currently integrates Waffo Pancake; the provider shown at checkout and on the receipt handles that transaction under its own terms. Cloudflare provides infrastructure for the deployed website. Providers and their subprocessors may process information in countries other than yours.

We may disclose information to meet legal obligations, address fraud or security incidents, protect legal rights, or support a business transfer subject to applicable safeguards. We do not sell personal information. Where legally required for international transfers, applicable transfer safeguards must be used. Contact us for information about a specific transfer.

Cookies, browser storage, and optional services

Cookies verify private report access and, where relevant, authentication and preferences. Browser storage may remember interface preferences. These functions can stop working if you block or clear the relevant storage.

Our own traffic measurement uses a pseudonymous visitor cookie with a lifetime of up to 365 days, sessionStorage for the current visit, and referral or campaign cookies lasting up to 30 days. These help count visits and understand where visitors come from; they do not contain your uploaded photo or report text.

When enabled, analytics, advertising, affiliate, or chat integrations may collect usage data or set their own cookies. Supported services include Google Analytics, Plausible, Google AdSense, and support widgets; availability depends on site configuration. Their privacy policies apply to their processing. You can manage cookies through your browser, but disabling them may affect features.

Security

We use access controls and private report-session checks. Persisted production report snapshots are encrypted, and private image responses use cache-control protections. No system or transmission method can be guaranteed secure. Do not email passwords, full card details, or unnecessary sensitive images to support.

Your choices and rights

Depending on applicable law, you may request access, correction, deletion, restriction, objection, or a portable copy of personal information, and may complain to the relevant data protection authority. Email support@coloranalysis.tools with your request. We may need to verify your identity or order ownership and may retain information required by law or needed for an unresolved dispute. Rights over data handled independently by a payment or AI provider may also need to be exercised with that provider.

You can stop using photo tools, remove an active report by starting a new photo, unsubscribe from optional marketing, and manage browser storage. Styling tools do not make decisions about your eligibility for employment, credit, healthcare, or other essential services.

Children and policy changes

The service is not intended for children under 13, or a higher minimum age required by local law. Tools marked for adults require users to be at least 18. Contact us if you believe a child has provided personal information without required permission.

We may update this policy when the service or its practices change. The date above identifies the latest update. Material changes will be communicated through the website or another appropriate channel.