Privacy Policy
Last updated: June 22, 2026 · Effective immediately
1. Who we are
PaletteMe ("PaletteMe", "we", "us", "our") is an AI-powered personal styling application that analyzes a user's facial features, body proportions, and style preferences to deliver a personalized style report, color palette, and product recommendations.
Contact:
Email: privacy@paletteme.app
For data deletion or access requests, please email us with subject line "Data Request".
2. Data we collect
We collect only the data necessary to provide our service:
- Face photos — uploaded by the user for AI appearance analysis. Transmitted securely to our AI provider (OpenAI) and not stored on our servers after analysis is complete.
- Body photos — optional, uploaded for silhouette and proportion analysis. Same handling as face photos: not retained after processing.
- Quiz answers — style preferences, height, body type, occasions, and budget preferences entered during onboarding.
- Account information — email address and display name when registering via email or Google OAuth.
- Style profile — the AI-generated text analysis (Kibbe type, color season, style direction, recommendations). Saved to your account for future access. Does not include the original photos.
- Usage analytics — anonymous, aggregated data about feature usage collected via Vercel Analytics. No personally identifiable information.
3. How we use your data
- To generate your personalized AI style analysis and report
- To save and display your style profile within your account
- To show personalized clothing, makeup, and product recommendations
- To display style reference images from Pinterest (public content only)
- To process payments for paid reports or subscriptions via Stripe
- To send account-related emails (password reset, receipt, important updates)
- To send style update emails if you subscribe to Pro — unsubscribe anytime
We do not sell, rent, or trade your personal data to any third party for marketing purposes.
4. Photos and AI analysis
Photos are processed securely for analysis. PaletteMe does not sell or share your images.
Face and body photos you upload are transmitted over an encrypted connection to OpenAI's API for AI analysis. OpenAI processes the image to extract visible facial and body features. Photos are not retained by PaletteMe after the analysis response is received, and are not used to train AI modelsunder OpenAI's API data usage policy (API inputs are not used for training by default).
The analysis output — a text description of your features and style recommendations — is saved to your account. The original photos are not saved.
5. Pinterest content
PaletteMe uses the Pinterest API to display publicly available style reference images and mood board content within your personalized style report.
How we use Pinterest data:
- We access only public Pinterest content — pins and boards that any user can view without logging in
- Pinterest images are displayed as visual style references to help users understand their recommended aesthetic (e.g., "Quiet Luxury for Soft Natural types")
- All Pinterest content is attributed to Pinterest with a visible link back to the original pin or board
- We do not store Pinterest images on our servers — they are fetched and displayed in real time via the Pinterest API
- We do not repurpose, resell, or republish Pinterest content outside of its intended display within the user's style report
- Pinterest data is used solely to enhance the user experience by providing visual inspiration relevant to their style profile
- We comply with Pinterest's API Terms of Service and Developer Guidelines
Users who interact with Pinterest content in PaletteMe are subject to Pinterest's Privacy Policy.
6. Third-party services
We use the following services to operate PaletteMe:
- OpenAI — AI analysis of face/body photos and style report generation. Privacy Policy
- Supabase — user authentication and database storage. Privacy Policy
- Pinterest API — style reference images. Public content only. Privacy Policy
- Stripe — payment processing. Card data is handled by Stripe; we do not receive or store card numbers. Privacy Policy
- Google — optional Google OAuth login. Privacy Policy
- Vercel — hosting, CDN, and anonymous analytics. Privacy Policy
7. Legal basis for processing (GDPR)
For users in the European Economic Area (EEA) and UK, we process your data under the following legal bases:
- Contract performance — processing necessary to provide the style analysis service you requested
- Legitimate interests — improving our service, preventing fraud, and security monitoring
- Consent — for optional communications such as Pro subscription updates (you can withdraw at any time)
- Legal obligation — where required by applicable law
8. Data retention
- Face and body photos: not stored — deleted immediately after analysis
- Style profile and quiz answers: retained while your account is active
- Account data (email, name): retained until you delete your account
- Payment records: retained as required by applicable financial regulations (typically 7 years)
- Analytics data: anonymous and aggregated, retained indefinitely
9. Your rights
Depending on your location, you may have the right to:
- Access — request a copy of all personal data we hold about you
- Correction — request correction of inaccurate data
- Deletion — request deletion of your account and all associated personal data
- Portability — receive your style profile data in a machine-readable format
- Objection — object to processing based on legitimate interests
- Withdraw consent — for any processing based on consent, at any time
To exercise any of these rights, email privacy@paletteme.app with subject "Data Request". We will respond within 30 days.
10. Data security
We use industry-standard security measures including TLS encryption for data in transit, encrypted storage for data at rest, and access controls limiting who can access your data. No method of transmission over the internet is 100% secure; we cannot guarantee absolute security.
11. Cookies
We use essential cookies required for authentication (keeping you logged in) and session management. We do not use advertising, tracking, or third-party marketing cookies.
12. Children
PaletteMe is not directed at children under 13 years of age. We do not knowingly collect personal data from children under 13. If you believe a child has provided us with personal data, please contact us at privacy@paletteme.app and we will delete it promptly.
13. Changes to this policy
We may update this Privacy Policy from time to time. We will notify you of material changes by email (to your registered address) and/or by displaying a prominent notice in the app at least 14 days before the change takes effect. The date at the top of this page indicates when it was last updated.