Privacy Policy

The Short Version

We take your privacy seriously. Here's what you need to know:

• Your photos are deleted immediately after processing (typically within 60 seconds)
• We don't train AI on your images — your photos are processed and discarded
• We don't sell your data to anyone, ever
• Generated images are stored so you can access them in your dashboard
• We use minimal third-party services — only what's necessary to run the service

1. Who We Are

LookPacks is operated as a sole proprietorship based in the United Kingdom. For privacy enquiries, contact us at cmb211087@gmail.com.

2. Information We Collect

2.1 Account Information

When you create an account, we collect:

• Email address
• Password (stored securely using Argon2id hashing — we cannot see your password)
• Account creation date

2.2 Photos You Upload

When you use our service:

• Uploaded photos are temporary. They are sent to our AI provider for processing and then permanently deleted from our servers within 60 seconds of processing completion.
• We do not store your original photos.
• Generated/transformed images are stored in your account so you can download them later. You can request deletion of these at any time.
• EXIF metadata (camera info, location data, etc.) is automatically stripped from uploads before processing.

2.3 Payment Information

We use Stripe to process payments. We do not store your card details on our servers. Stripe handles all payment data according to PCI-DSS standards. We only receive:

• Confirmation of successful payment
• A Stripe customer ID (to link purchases to your account)
• Transaction amounts and dates

2.4 Usage Data

We collect anonymous usage data via Google Analytics, including:

• Pages visited
• Features used
• Device type and browser
• Approximate geographic region (country/city level)

This data is aggregated and cannot identify you personally.

3. How We Use Your Information

We use your information to:

• Provide the photo transformation service
• Manage your account and credits
• Process payments
• Send important service updates (e.g., password resets, payment confirmations)
• Improve our service based on aggregate usage patterns

We do not:

• Sell your personal data to third parties
• Use your photos to train AI models
• Send marketing emails without your consent
• Share your information with advertisers

4. Third-Party Services

We use the following third-party services to operate LookPacks:

4.1 Google Gemini API (AI Processing)

Your photos are sent to Google's Gemini API for transformation. According to Google's API terms:

• Data sent via the paid API is not used to train Google's models
• Images are processed and not retained beyond the processing session
• See: Google AI Terms

4.2 Stripe (Payments)

Stripe processes all payments securely. See: Stripe Privacy Policy

4.3 Google Analytics

We use Google Analytics to understand how people use our site. This uses cookies. See: Google Privacy Policy

4.4 DigitalOcean (Hosting)

Our servers are hosted on DigitalOcean in their London data centre. See: DigitalOcean Privacy Policy

5. Data Retention

• Uploaded photos: Deleted within 60 seconds of processing
• Generated images: Stored until you delete them or close your account
• Account data: Retained while your account is active
• Transaction records: Retained for 7 years (legal requirement for financial records)

6. Your Rights (GDPR)

As we operate in the UK, you have rights under UK GDPR:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate data
• Erasure: Request deletion of your data ("right to be forgotten")
• Portability: Receive your data in a portable format
• Object: Object to processing of your data
• Withdraw consent: Where we rely on consent, you can withdraw it

To exercise any of these rights, email cmb211087@gmail.com. We'll respond within 30 days.

7. Data Security

We implement appropriate security measures including:

• HTTPS encryption for all data in transit
• Secure password hashing (Argon2id)
• Regular security updates
• Limited access to production systems
• Automatic deletion of uploaded photos

8. Cookies

We use the following cookies:

• Session cookie: Essential — keeps you logged in
• Google Analytics cookies: Analytics — helps us understand usage (can be blocked)

You can disable non-essential cookies in your browser settings.

9. Children's Privacy

LookPacks is not intended for users under 16. We do not knowingly collect data from children. If you believe a child has created an account, please contact us.

10. International Transfers

Your data may be processed in:

• United Kingdom: Our servers (DigitalOcean London)
• United States: Google (AI processing), Stripe (payments)

Where data is transferred outside the UK, it is protected by appropriate safeguards (Standard Contractual Clauses or equivalent).

11. Changes to This Policy

We may update this policy from time to time. Significant changes will be notified via email or a prominent notice on our website. Continued use after changes constitutes acceptance.

12. Contact Us

Questions about this privacy policy? Email us at cmb211087@gmail.com