Privacy Policy for haircut.gg
This Privacy Policy applies to the website haircut.gg and all its subdomains (the "Sites"), together with the haircut.gg web application and services (the "Services"), owned and operated by Kirill Melkozerov (sole proprietorship, based in Yerevan, Armenia, collectively, "haircut.gg", "we", "us", or "our"). This Privacy Policy describes how we collect, use, share, and secure the personal information you provide to us. It also describes your choices regarding use, access, correction, and deletion of your personal information.
1. Definitions
-
Personal information is any information about you which can be used to identify you. This includes information about you as a person (such as name, address, email, and date of birth), your devices, payment details, photos you upload, and even information about how you use a website or online service.
-
The website refers to all public-facing informational pages on our website, as well as all functional pages that require user authentication and are part of the haircut.gg service delivery. This includes, but is not limited to, landing page, contact information, terms of service, privacy policy, user dashboards, photo upload interfaces, haircut gallery pages, and account settings.
-
User Photos refers to the photos you upload to our Service to generate AI haircut portraits.
2. What Data We Collect
We collect both information you knowingly and actively provide us when using or participating in any of our services, and any information automatically sent by your devices in the course of accessing our products and services.
We only collect and use your personal information when we have a legitimate reason for doing so. In which instance, we only collect personal information that is reasonably necessary to provide our services to you.
We do not sell your personal information, your uploaded photos, or your generated portraits in any way.
Information That You Provide to Us About Yourself
When you sign up for the Services, we request information such as:
- Contact Information: email address.
- Unique Identifiers: such as username, account number, or password.
- Payment Information: credit card details (processed by our payment provider, Paddle).
- User Photos: photos you upload to generate AI haircut portraits. These photos are sent to our AI provider (Replicate) for processing and are stored for 30 days to allow you access to your personal gallery, after which they are automatically and permanently deleted.
- Generated Content: AI-generated haircut portraits created from your uploaded photos, which are also stored for 30 days and then automatically deleted.
Information Collected Automatically
When you visit our website, our servers automatically log standard data provided by your web browser. This may include your device's Internet Protocol (IP) address, your browser type and version, the pages you visit, the time and date of your visit, the time spent on each page, and other details about your visit.
Information Collected After Opt-In Permission
Upon your consent, we may use cookies and similar technologies to collect information about your location and your activities on our website, as well as information about your device and log information through our analytics provider (Posthog).
3. How We Use Your Information
We may collect, hold, use, and disclose information for the following purposes:
- To provide you with our services, including processing your uploaded photos through AI systems to generate haircut portraits.
- To process payments for Style Packs and other services.
- To communicate with you about your account, order status, and service-related notifications (such as when your portraits are ready).
- To send you your generated portraits via email.
- To provide customer support and respond to your inquiries.
- To improve our services, develop new features, and enhance the AI generation quality.
- To comply with our legal and regulatory obligations.
- To detect and prevent fraudulent activity and abuse of our Service.
4. Third-party Services and Sub-processors
We share certain information with companies that may be considered our "sub-processors" under GDPR. This information is limited to the following:
Required Services
The following services are required for the operation of our website:
- Hetzner: We use Hetzner cloud servers to host our server infrastructure. Privacy Policy of Hetzner.
- Cloudflare: We use Cloudflare as a DNS server, CDN and DDoS protection. Privacy Policy of Cloudflare.
- Paddle: We use Paddle to handle payments. Privacy Policy of Paddle.
- Replicate: We use Replicate as our AI inference provider to generate haircut portraits from your uploaded photos. Privacy Policy of Replicate.
- Resend: We use Resend to send emails, including magic link authentication and delivery of your generated portraits. Privacy Policy of Resend.
Important Notes:
- Paddle only receives your personal information when you make a purchase.
- Replicate only receives your uploaded photos when you purchase a Style Pack and request portrait generation. Your photos are processed by Replicate's AI systems and are handled in accordance with their privacy policy.
- We do not share your photos or generated portraits with any other third parties.
Optional Services
The following services are optional and are strictly opt-in:
- Posthog: We use Posthog to collect usage statistics and improve our service. Privacy Policy of Posthog.
5. Data Retention and Automatic Deletion
- User Photos: Your uploaded photos are stored securely for 30 days to allow you access to your personal gallery. After 30 days, your original photos are automatically and permanently deleted from our servers.
- Generated Portraits: All AI-generated haircut portraits are stored for 30 days and then automatically and permanently deleted from our servers.
- Account Information: Your email address and account information are retained for as long as your account is active or as needed to provide you with our services.
- Payment Information: We do not store your credit card details. All payment information is handled by Paddle.
If you request deletion of your account before the 30-day period, we will delete your photos, generated portraits, and personal data from our systems within 7 days, except where we are required to retain it for legal or regulatory reasons (such as transaction records for tax compliance).
6. Security
We take reasonable precautions to protect your personal information and uploaded photos from unauthorized access, use, or disclosure, including:
- Encryption of data in transit (HTTPS/TLS)
- Secure storage of uploaded photos and generated portraits
- Access controls and authentication requirements
- Regular security assessments
However, please be aware that no method of transmission over the internet, or method of electronic storage, is 100% secure. While we strive to protect your personal information and photos, we cannot guarantee absolute security.
7. Your Rights
You have the right to:
- Access your personal information: Request a copy of the personal data we hold about you.
- Correct inaccurate or incomplete information: Update your account details at any time.
- Request deletion of your personal information: Delete your account and all associated data before the automatic 30-day deletion period.
- Object to or restrict the processing of your data: Opt out of optional services like analytics.
- Data portability: Request your data in a commonly used, machine-readable format.
- Withdraw consent: Opt out of optional data collection (such as analytics) at any time.
To exercise these rights, please contact us at [email protected].
8. Children's Privacy
haircut.gg does not knowingly collect information from or direct any of our Website or content specifically to children under the age of 16. Our Terms of Service require users to be at least 16 years old. If we learn or have reason to suspect that a user is under the age of 16, we will immediately close that account and delete all associated data.
9. International Data Transfers
Our service is operated from Yerevan, Armenia, and our servers are located in data centers operated by Hetzner. If you are accessing our service from outside Armenia, please be aware that your information may be transferred to, stored, and processed in locations where our service providers operate. By using the Service, you consent to such transfers.
10. Use of Your Photos
We want to be crystal clear about how we use your photos:
- We will never use your photos for any purpose other than generating your requested haircut portraits.
- We will never use your photos to train AI models or for any other commercial purpose.
- We will never share, sell, or distribute your photos to third parties (except Replicate, solely for the purpose of processing your portrait generation request).
- We will never publicly display your photos or use them in marketing materials without your explicit, written consent.
- Your photos and generated portraits are automatically deleted after 30 days.
11. Cookies and Tracking Technologies
We use cookies and similar tracking technologies to:
- Maintain your logged-in session
- Remember your preferences
- Provide basic website functionality
- Collect analytics data (only with your opt-in consent via Posthog)
You can control cookies through your browser settings. However, disabling certain cookies may limit your ability to use some features of our Service.
12. Changes to This Policy
We may update this privacy policy from time to time. We will notify you of any material changes by:
- Posting the new privacy policy on this page and updating the "Effective Date" at the end of this policy
- Sending an email notification to registered users (if the changes significantly affect how we handle your data)
We encourage you to review this privacy policy periodically. Your continued use of the Service after changes are posted constitutes your acceptance of the updated policy.
13. Contact Us
If you have any questions about this privacy policy, our treatment of your personal information, or wish to exercise your data rights, please contact us at:
Email: [email protected]
Business Name: haircut.gg
Operator: Kirill Melkozerov
Location: Yerevan, Armenia
Effective Date: October 1, 2025