Privacy Policy

1. Introduction

IsThisCute ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service that enables beauty professionals to offer virtual try-on experiences through Instagram.

2. Information We Collect

For Beauty Professionals (Creators):

• Instagram account information (username, account ID)
• Facebook Page information linked to your Instagram account
• Email address and name
• OAuth tokens for Instagram API access (encrypted)
• Content you upload (style assets, configurations)
• Analytics about your posts and engagement

For End Users (Try-On Users):

• Temporary camera access (only while using try-on feature)
• Device information (browser type, screen size)
• Instagram username (only if commenting)
• Usage analytics (try-on sessions, features used)

3. How We Use Your Information

• To provide the virtual try-on service
• To send automated Instagram DMs in response to comments (with consent)
• To process and render try-on effects
• To provide analytics to creators
• To improve our service and develop new features
• To comply with legal obligations

4. Camera and Media Processing

Important: By default, all camera processing happens directly in your browser. Your video feed is NOT sent to our servers unless you explicitly choose "Cloud Processing Mode."

• Real-time mode: All processing is done locally on your device
• Cloud mode: Video is temporarily uploaded, processed, and immediately deleted
• We do NOT store any photos or videos from try-on sessions
• Downloaded photos are saved only to your device

5. Data Sharing

We do not sell your personal information. We may share information with:

• Service Providers: Hosting (Vercel), Database (Supabase), GPU processing (Modal)
• Meta Platforms: To facilitate Instagram integration
• Legal Requirements: If required by law or to protect our rights

6. Data Security

• All data is encrypted in transit using HTTPS
• OAuth tokens are encrypted at rest
• We use secure cloud infrastructure with regular security updates
• Access to personal data is restricted to authorized personnel only

7. Data Retention

• Creator accounts: Retained while account is active
• Analytics data: Retained for 12 months
• Try-on sessions: Metadata retained for 30 days
• Cloud processed videos: Deleted immediately after processing

8. Your Rights

You have the right to:

• Access your personal information
• Correct inaccurate information
• Request deletion of your data
• Opt-out of marketing communications
• Revoke Instagram permissions at any time

To exercise these rights, contact us at privacy@isthiscute.com

9. Cookies

We use essential cookies for authentication and session management. We also use analytics cookies to understand usage patterns. You can control cookies through your browser settings.

10. Children's Privacy

Our service is not intended for users under 13 years of age. We do not knowingly collect information from children under 13. If we discover we have collected information from a child under 13, we will delete it immediately.

11. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for such transfers in compliance with applicable law.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Effective Date."

13. Contact Information

If you have questions about this Privacy Policy or our privacy practices, please contact us at:

14. California Privacy Rights

California residents have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, the right to delete personal information, and the right to opt-out of the sale of personal information (which we do not do).

15. European Privacy Rights (GDPR)

If you are in the European Economic Area, you have additional rights under the General Data Protection Regulation (GDPR), including the right to data portability and the right to object to processing. Our legal basis for processing is consent and legitimate interests in providing our service.