PRIVACY
POLICY

1. INTRODUCTION

Beauty Hub AI ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform and services.

By using Beauty Hub AI, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our services.

2. INFORMATION WE COLLECT

2.1 Personal Information

We collect information that you provide directly to us:

• Account information (name, email address, password)
• Business information (company name, industry, website)
• Payment information (processed securely through Stripe)
• Profile information (preferences, settings)
• Communications with our support team

2.2 Content You Create

When you use our AI tools, we collect and store the content you create, upload, and generate, including images, videos, text, and project files. You retain full ownership of this content.

2.3 Usage Information

We automatically collect information about how you interact with our platform:

• Device information (browser type, operating system, device type)
• Log data (IP address, access times, pages viewed)
• Usage patterns (features used, credits consumed)
• Performance data (load times, errors, crashes)

2.4 Cookies and Tracking

We use cookies and similar tracking technologies to enhance your experience. See our Cookie Policy for details.

3. HOW WE USE YOUR INFORMATION

We use the information we collect to:

• Provide, maintain, and improve our services
• Process your transactions and manage your subscriptions
• Send you technical notices, updates, and support messages
• Respond to your comments and questions
• Develop new features and services
• Analyze usage patterns to improve user experience
• Detect, prevent, and address technical issues and fraud
• Comply with legal obligations

We do NOT use your content to train AI models without your explicit opt-in consent.

4. HOW WE SHARE YOUR INFORMATION

We may share your information in the following circumstances:

4.1 Service Providers

We share information with third-party service providers who perform services on our behalf:

• Payment processing (Stripe)
• Cloud hosting and storage (Supabase, AWS)
• AI model providers (OpenAI, Replicate)
• Analytics providers (Google Analytics)
• Customer support tools

4.2 Legal Requirements

We may disclose your information if required by law or in response to valid legal requests from public authorities.

4.3 Business Transfers

If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

We do NOT sell your personal information to third parties.

5. DATA SECURITY

We implement industry-standard security measures to protect your information:

• AES-256 encryption for data at rest
• TLS 1.3 encryption for data in transit
• Regular security audits and penetration testing
• SOC 2 Type II certification (in progress)
• Access controls and authentication requirements
• Regular backups and disaster recovery procedures

However, no method of transmission over the Internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

6. DATA RETENTION

We retain your information for as long as necessary to:

• Provide our services to you
• Comply with legal obligations
• Resolve disputes and enforce our agreements

When you delete your account, we will delete or anonymize your personal information within 30 days, except where we are required to retain it for legal purposes. Content you created remains yours and can be downloaded before account deletion.

7. YOUR RIGHTS

Depending on your location, you may have the following rights:

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate information
• Deletion: Request deletion of your personal information
• Portability: Request a copy of your data in a structured format
• Objection: Object to certain processing of your data
• Restriction: Request restriction of processing in certain circumstances
• Withdraw Consent: Withdraw consent for data processing

To exercise these rights, contact us at privacy@beautyhubai.com. We will respond within 30 days.

8. GDPR & CCPA COMPLIANCE

8.1 European Users (GDPR)

If you are in the European Economic Area (EEA), you have specific rights under the General Data Protection Regulation (GDPR). We process your data based on legitimate interests, contractual necessity, or your consent. You have the right to lodge a complaint with your local data protection authority.

8.2 California Users (CCPA)

If you are a California resident, the California Consumer Privacy Act (CCPA) provides you with rights regarding your personal information. You have the right to know what information we collect, request deletion, and opt-out of the sale of your information (which we do not do).

9. CHILDREN'S PRIVACY

Our services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

10. INTERNATIONAL DATA TRANSFERS

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the European Commission.

11. CHANGES TO THIS POLICY

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or through a prominent notice on our platform. Your continued use of our services after changes indicates acceptance of the updated policy.

12. CONTACT US

If you have questions about this Privacy Policy or our data practices, please contact us: