Privacy Policy

Special Notice: When analyzing your face shape, your photos are analyzed instantly right on your own device, without ever being sent to the cloud. We adhere to a strict "zero upload, zero retention" policy to guarantee your portrait privacy remains 100% secure.

Account Information: Used to authenticate users, maintain login sessions, record purchased credit balances, and deliver essential service notices (order receipts, password resets). Stored in encrypted cloud databases (AES-256 at rest, TLS 1.3 in transit). Retained for the duration of your active account, and permanently purged within thirty (30) calendar days upon verified account deletion request.

Uploaded Portrait Photos & AI Try-On Renders: Used solely to execute your requested virtual wig try-on transformations, calculate hairstyle fit, and display generation history in your private user gallery. We strictly adhere to a zero-selling policy: your private photos are never sold, rented, or used to train public AI foundation models without explicit consent. Stored in isolated access-controlled cloud storage, accessible only to your account, and permanently deletable by you at any time.

Usage, Telemetry & Analytics Data: Used to monitor service reliability, optimize model inference response times, and prevent bot abuse or DDoS attacks. Stored in pseudonymized and aggregated log analytics platforms. Telemetry and server access logs are securely rotated and deleted after 6 to 12 months.

Payment & Transaction Metadata: Used for credit entitlement provisioning, transaction accounting, billing support, and compliance with statutory financial and anti-fraud regulations. Cardholder financial credentials are handled exclusively by PCI-DSS compliant Merchant of Record partners (including Waffo Pancake and Creem); we never capture or store credit card numbers or CVV codes. Retained for 5 to 7 years in compliance with statutory financial and tax obligations.

Third-Party Vendors & Google Cookies: Third-party vendors, including Google, use cookies to serve ads based on your prior visits to our website or other websites on the Internet.

Ad Personalization: Google's use of advertising cookies enables it and its partners to serve ads to you based on your visit to our site and/or other sites across the web.

Opt-Out of Personalized Advertising: You may opt out of personalized advertising by visiting Google Ads Settings (https://www.google.com/settings/ads). Alternatively, you can opt out of third-party vendors' use of cookies for personalized advertising by visiting aboutads.info (https://www.aboutads.info).

European Economic Area (EEA) & UK Users (GDPR Compliance): In compliance with GDPR and the ePrivacy Directive, we implement consent mechanisms to obtain consent for cookies and ad personalization. Users in the EEA/UK who decline consent will only be served non-personalized ads (NPA).

California & US Residents (CCPA/CPRA Compliance): We respect your privacy rights under US state privacy laws. We do not sell your personal data. To the extent targeted advertising is considered "sharing" under California law, you maintain the full right to opt out.

Ad-Free Experience for Paid Members: We provide a 100% ad-free experience for our paid users (subscribers and credit-pack purchasers). When you are logged in as a paid member, third-party advertising displays, ad scripts, and advertising tracking cookies are completely disabled.

Right of Access / Inspection: You have the right to request access to and receive a copy of your personal data held by us.

Right to Rectification: You have the right to request correction of inaccurate, incomplete, or outdated personal information.

Right to Erasure / Account Deletion: You have the right to request the permanent deletion of your account, uploaded portrait photos, and try-on history (Right to be Forgotten).

Right to Restrict or Object: You have the right to restrict or object to the processing of your data under statutory conditions.

Right to Data Portability: You may request your personal data in a structured, commonly used, machine-readable format.

Right to Withdraw Consent: You may withdraw any previously granted consent at any time without retroactive impact.

How to Exercise Your Rights: To exercise any of these rights (including account deletion or data inquiry), please email support@wigmirror.com from your registered account email. We verify identity for your protection and will process and respond to your request within thirty (30) calendar days free of charge.