Privacy Policy

1. Overview

siOsi ("we," "us," or "our") is a beauty AI app that analyzes makeup, color harmony, and facial balance using artificial intelligence. This Privacy Policy explains how we collect, use, share, and protect your information when you use our website and services (the "Service").

2. Information We Collect

We collect information to operate and improve siOsi, including:

• Account Data: email address, display name, authentication identifiers.
• Content You Provide: photos you upload for analysis, prompts, and feature selections.
• Usage & Technical Data: device and browser type, IP address, language, timestamps, pages viewed, and diagnostic logs.
• Payment Metadata: non-card identifiers returned by payment processors (e.g., transaction or customer IDs). We do not store full card numbers.

3. How We Use Information

• Provide and operate the Service, including analyzing uploaded photos and generating results.
• Maintain safety and prevent abuse, fraud, or service misuse.
• Improve performance, quality, and features through aggregated analytics.
• Communicate with you about your account, purchases, updates, and support.
• Comply with legal obligations and enforce our Terms.

Uploaded images and related data are processed securely using trusted AI providers, including OpenAI and Google Gemini, solely to generate your requested analyses. We do not use your images to train models or for unrelated purposes.

4. Analytics and Performance

We use analytics tools such as Vercel Analytics and Vercel Speed Insights to understand usage and improve performance. These services may collect technical data (e.g., IP address, device/browser, pages and events). You can control analytics cookies in your browser settings; we only load these tools after you provide consent via our cookie banner.

5. Third‑Party Login (OAuth)

You may sign in with providers such as Google, Apple, Facebook, or Instagram. When you choose one of these options, we receive basic profile information (e.g., name, email, profile image) from the provider to create and authenticate your account. We do not post to or access your social accounts beyond authentication.

6. Using siOsi in ChatGPT

When you use the siOsi plugin inside ChatGPT, ChatGPT sends us only what the tool you use needs:

• Makeup analysis: the photo you attach (as a temporary download link from OpenAI), your ChatGPT language setting, and an anonymized user ID that OpenAI generates for siOsi. We store that ID only as a one-way hash. We don't receive your name, email address, or chat history. ChatGPT may also send a coarse location hint, which we don't use or store.
• Season palette and season quiz: the season you ask about, or your quiz answers. We use them to produce the answer and don't store them. These tools don't use photos.

Your photo: we copy it to our storage (Cloudflare R2), analyze it with our AI providers (see section 3), and save the result as a look page. We locate and measure the face in the photo (for example face and lip shape) only to analyze the makeup. We don't use photos or these measurements to recognize or identify anyone. If no face is found, we delete the photo right away.

Your account and free analyses: to count your free analyses (3 per month), we create a siOsi account linked to the hashed ID. It has no email address or password.

Your look page: anyone who has its link can open it. It's excluded from search engines, and we don't list it anywhere.

Retention and deletion: photos and results from ChatGPT follow section 11 (Data Retention). To delete a look or the account, contact us (section 17) with the look's link. How ChatGPT handles your conversation is covered by OpenAI's own privacy policy.

7. Cookies and Local Storage

We use cookies and local storage to maintain your session, remember preferences, and enhance functionality.

• Essential Cookies: These cookies are necessary for the Service to function and cannot be disabled:
  • Authentication cookies (Supabase session tokens) to keep you signed in
  • OAuth state and nonce cookies for secure third-party login
  • Cloudflare Turnstile cookies for bot protection and security
  • PayPal cookies during payment processing
• Analytics Cookies (Optional): We only load these after you consent via our cookie banner:
  • Vercel Analytics cookies to understand usage patterns
  • Vercel Speed Insights cookies to monitor performance
• Local Storage: We use browser local storage to save your preferences, quiz results, and app state for a better experience.

You can control or delete cookies in your browser settings at any time. Deleting essential cookies may affect your ability to use certain features. For more details, visit our Cookie Policy.

8. Email Communication

We use your email address to send account-related updates (such as verification, receipts, and service notices) and to respond to support requests. We may occasionally send product updates or beauty insights; you can unsubscribe at any time using the link in those emails or by contacting support@siosi.me.

9. Sharing and Disclosure

We do not sell or rent your personal data. We share information with carefully selected service providers who help us operate the Service (e.g., hosting, storage/CDN, analytics, AI processing, email delivery, and payments). These partners are bound by confidentiality and data‑protection obligations and may access your data only to perform services for us. We may disclose information to comply with law, protect rights and safety, or in connection with a merger, acquisition, or asset transfer.

10. Payment Processing

Purchases are processed by third‑party payment providers. We receive limited payment metadata (like transaction IDs) to fulfill your order and manage your "Looks" credits. Card details are handled by the processor and are not stored on our servers.

11. Data Retention

Uploaded photos are retained only as long as needed to complete the requested analysis and for a short operational window (e.g., quality assurance or re‑download), after which they may be automatically deleted. Account and billing records are kept as required for legitimate business purposes and legal obligations. You can request deletion at any time.

12. Legal Bases (EEA/UK)

Where GDPR applies, we process personal data under these bases: performance of a contract (providing the Service), legitimate interests (security, fraud prevention, product improvement), consent (optional analytics/marketing), and legal obligations (tax, accounting).

13. International Transfers

We may transfer data to providers located outside your country. When we do, we rely on adequacy decisions, Standard Contractual Clauses, or equivalent safeguards to protect your information.

14. Your Rights

Depending on your location, you may have rights to access, correct, delete, or export your data, and to object to or restrict certain processing. Where processing relies on consent, you may withdraw consent at any time without affecting prior processing. To exercise rights, contact us using the details below.

15. Children

The Service is not intended for children under 13, and we do not knowingly collect personal data from them. If you believe a child has provided personal data, please contact us so we can remove it.

16. Changes to This Policy

We may update this Privacy Policy periodically. When changes are material, we will provide notice in‑app or on the website. Continued use of the Service after changes take effect constitutes acceptance of the updated policy.

17. Contact

For questions, privacy requests, or complaints, please reach out via our support form at siosi.me/support or email us at support@siosi.me.