Privacy Policy

FaceTouchUp ("we," "us," or "our") operates the website www.facetouchup.com and related services (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you access or use our Service. By using the Service, you consent to the data practices described in this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access the Service.

1. Information We Collect

We may collect the following categories of information when you interact with our Service:

Personal Information You Provide

When you create an account, subscribe to a plan, or contact us, we may collect:

  • Name and contact details (email address, phone number)
  • Billing and payment information (processed securely through third-party payment processors; we do not store full credit card numbers)
  • Practice or business information (for healthcare professional accounts)
  • Communications you send to us (support requests, feedback)

Information Collected Automatically

When you access the Service, we automatically collect:

  • Device and browser information (IP address, browser type and version, operating system)
  • Usage data (pages visited, features used, session duration, referring URLs)
  • Log data (access times, error logs, diagnostic data)

Image Data

FaceTouchUp is designed with your privacy in mind. Images uploaded to our web-based simulator are processed entirely within your browser using client-side technology. These images are not transmitted to or stored on our servers unless you explicitly choose to use features that require server-side processing, such as AI-powered simulations. When server-side processing is used, images are processed temporarily and are not retained after the session ends unless otherwise specified.

2. How We Use Your Information

We use the information we collect for the following purposes:

  • Provide, operate, and maintain the Service
  • Process transactions and manage your account
  • Improve, personalize, and expand the Service
  • Communicate with you, including for customer service, updates, and promotional communications (with your consent where required by law)
  • Monitor and analyze usage patterns and trends to enhance user experience
  • Detect, prevent, and address fraud, abuse, or technical issues
  • Comply with applicable legal obligations and enforce our terms of service

3. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to collect and store information about your interactions with the Service. Cookies are small data files placed on your device that help us improve the Service and your experience.

Types of cookies we use:

  • Essential cookies: Required for the Service to function properly, including authentication and session management.
  • Analytics cookies: Help us understand how visitors interact with the Service so we can improve it (e.g., Google Analytics).
  • Preference cookies: Remember your settings and preferences across sessions.
  • Marketing cookies: Used to deliver relevant advertisements and measure campaign effectiveness.

You can control cookies through your browser settings. Please note that disabling certain cookies may limit the functionality of the Service.

4. Data Sharing and Disclosure

We do not sell, rent, or trade your personal information to third parties. We may share your information only in the following limited circumstances:

  • Service Providers: We work with trusted third-party vendors who assist us in operating the Service (e.g., payment processing, cloud hosting, analytics). These providers are contractually bound to use your information only as necessary to perform services on our behalf and are prohibited from using it for their own purposes.
  • Legal Requirements: We may disclose your information if required by law, regulation, legal process, or governmental request, or when we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others, investigate fraud, or respond to a government request.
  • Business Transfers: In the event of a merger, acquisition, reorganization, or sale of all or a portion of our assets, your information may be transferred as part of that transaction. We will provide notice before your personal information becomes subject to a different privacy policy.
  • With Your Consent: We may share your information for purposes not described in this Privacy Policy with your explicit consent.

5. Data Security

We implement commercially reasonable administrative, technical, and physical security measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction. These measures include encrypted data transmission (SSL/TLS), secure server infrastructure, and role-based access controls.

However, no method of electronic transmission or storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security. You are responsible for maintaining the confidentiality of your account credentials.

6. Data Retention

We retain your personal information only for as long as reasonably necessary to fulfill the purposes described in this Privacy Policy, comply with our legal obligations, resolve disputes, and enforce our agreements. When your information is no longer needed, we will securely delete or anonymize it in accordance with our data retention practices.

7. Your Privacy Rights

Depending on your jurisdiction, you may have the following rights regarding your personal information:

  • Right of Access: Request a copy of the personal information we hold about you.
  • Right to Correction: Request correction of inaccurate or incomplete personal information.
  • Right to Deletion: Request deletion of your personal information, subject to certain legal exceptions.
  • Right to Portability: Request a copy of your data in a structured, commonly used, machine-readable format.
  • Right to Object: Object to the processing of your personal information for certain purposes, including direct marketing.
  • Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise any of these rights, please contact us using the information provided at the end of this policy. We will respond to your request within the timeframe required by applicable law.

8. Children's Privacy

The Service is not directed to individuals under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that we have inadvertently collected personal information from a child without verified parental consent, we will take reasonable steps to delete that information promptly. If you believe that a child has provided us with personal information, please contact us immediately.

9. International Data Transfers

Your information may be transferred to, stored, and processed in countries other than your country of residence, including the United States, where our servers and central database are located. These countries may have data protection laws that differ from those in your jurisdiction. By using the Service, you consent to the transfer of your information to such countries. We take appropriate safeguards to ensure that your information remains protected in accordance with this Privacy Policy and applicable law.

10. Third-Party Links and Services

The Service may contain links to third-party websites, services, or applications that are not operated or controlled by us. This Privacy Policy does not apply to such third-party services. We are not responsible for the content, privacy policies, or practices of any third-party services. We encourage you to review the privacy policies of any third-party services you access through the Service.

11. California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA). These include the right to know what personal information we collect, use, and disclose; the right to request deletion of your personal information; the right to correct inaccurate personal information; and the right to opt out of the sale or sharing of your personal information. As stated in this policy, we do not sell or share your personal information as defined under the CCPA/CPRA.

We will not discriminate against you for exercising your privacy rights. To submit a request, please contact us using the information provided below.

12. European Privacy Rights (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have additional rights under the General Data Protection Regulation (GDPR). Our lawful bases for processing your personal information include: performance of a contract (to provide the Service), your consent (for marketing communications and optional features), and our legitimate interests (to improve the Service, prevent fraud, and ensure security).

You have the right to lodge a complaint with your local supervisory authority if you believe that our processing of your personal information violates applicable law.

13. Do Not Track Signals

Some browsers transmit "Do Not Track" (DNT) signals to websites. Because there is no universally accepted standard for how to respond to DNT signals, we do not currently respond to them. However, you can manage your tracking preferences through your browser settings and the cookie controls described in this policy.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will update the "Last Updated" date at the top of this page and, where required by law, provide you with additional notice (such as a notice on our website or an email notification). Your continued use of the Service after any changes to this Privacy Policy constitutes your acceptance of the revised policy.

15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us.