Privacy Policy

1. Data Controller

Kartikships (kartikships.xyz) is the data controller for personal information processed through MirrorCut. For privacy requests, contact us at contact@kartikships.xyz.

2. Information We Collect

We collect the following categories of information:

• Account information: email address, authentication identifiers, and profile details from sign-up or OAuth providers (such as Google).
• Uploaded photos: selfies and other images you upload to generate hairstyle previews.
• Usage data: generation history, selected styles, credit balance, and interactions with the app.
• Payment-related information: transaction identifiers, purchase amounts, and billing metadata processed by our payment provider. We do not store full payment card numbers.
• Technical data: browser type, device information, IP address, and cookies or similar session identifiers needed to operate the service.

3. How We Use Information

• Provide and improve MirrorCut, including generating previews and barber cards.
• Authenticate users and maintain account security.
• Process credit purchases and maintain billing records.
• Respond to support requests and communicate service updates.
• Monitor abuse, fraud, and compliance with our terms.
• Analyze aggregated usage to improve product performance and reliability.

4. Photo Uploads

Photos you upload are stored securely and used to generate your hairstyle previews. They are associated with your account and are not made public unless you choose to share generated results yourself.

We do not use your photos for advertising. We do not sell your photos to third parties.

You may request deletion of your account and associated photos by contacting support. Some records may be retained where required for legal, security, or billing purposes.

5. How We Share Information

We share information only as needed to operate the service, comply with law, or protect rights and safety. We do not sell personal information.

• Infrastructure providers: Supabase (authentication, database, and file storage).
• Payment processing: Dodo Payments, which acts as Merchant of Record for applicable purchases and handles payment collection, invoicing, taxes, and refunds according to its policies.
• AI processing providers: services used to generate hairstyle previews from your uploaded photos.
• Legal and safety: when required by law, court order, or to prevent fraud, abuse, or harm.

6. Cookies and Session Data

We use cookies and similar technologies to keep you signed in, remember preferences, and protect the service. Essential session cookies are required for authentication.

You can control non-essential cookies through your browser settings, but some features may not work correctly if essential cookies are disabled.

7. Data Retention

We retain account and generation data for as long as your account is active or as needed to provide the service.

Billing and transaction records may be retained longer where required for accounting, tax, or legal compliance.

When you request deletion, we will delete or anonymize personal data within a reasonable timeframe, subject to lawful retention requirements.

8. Security

We use administrative, technical, and organizational measures designed to protect your information, including encrypted transport (HTTPS) and access controls on stored data.

No method of transmission or storage is completely secure. Please use a strong, unique password and protect your account credentials.

9. Your Rights

Depending on your location, you may have rights to access, correct, delete, or export your personal data, or to object to certain processing.

To exercise these rights, contact contact@kartikships.xyz. We may need to verify your identity before fulfilling a request.

If you are in the European Economic Area or United Kingdom, you may also have the right to lodge a complaint with your local data protection authority.

10. Children's Privacy

MirrorCut is not directed to children under 13 (or the minimum age required in your jurisdiction). We do not knowingly collect personal information from children. Contact us if you believe a child has provided personal information.

11. International Transfers

Your information may be processed in countries other than your own, including where our service providers operate. We take steps to ensure appropriate safeguards are in place for such transfers.

12. Changes to This Policy

We may update this Privacy Policy from time to time. The 'Last updated' date at the top reflects the latest revision. Material changes may be communicated through the website or by email where appropriate.

13. Contact Us

Privacy questions or requests can be sent to contact@kartikships.xyz or through our Contact page.