Information we collect
When you sign in, we receive basic Google profile information such as your email address, display name, avatar URL and email verification status.
When you generate a look preview, you provide a photo, file metadata, template direction, optional notes and generation job information.
When you buy credits, checkout is processed through the configured secure payment provider, currently PayPal or another production-ready provider depending on environment readiness. The payment provider may collect billing details such as your name, billing address, payment method details, IP address and tax information according to its own terms and privacy notices. On our side we only store payment metadata such as provider, plan, amount, currency, status, timestamps, checkout or order references and credit ledger entries. We do not store full card details.
Photo handling
The original uploaded base64 photo payload is kept in server memory only while the generation job runs. The database stores job metadata, generation settings, credits and result URLs, not the original base64 photo.
The photo is sent to an image generation provider for the single hairstyle request. The provider returns a generated result or task status, and LookStage records the result URL when available.
If the server restarts before the in-memory photo payload is consumed, the job may fail and credits are refunded automatically.
Cookies and sessions
LookStage uses server-side session cookies for Google login. We do not store JWTs in browser storage.
Session cookies help keep you signed in, protect account actions and attach generation jobs and credit balances to the correct user.
Data use and sharing
We use your information to provide login, generate hairstyle previews, manage credits, process payments, prevent abuse and answer support requests.
We share data with service providers only as needed for the product: Google for login, an image generation provider for look previews, and the configured payment provider for checkout, payment processing and refunds.
We do not sell your personal information or use uploaded photos to build a public gallery without your permission.
Cross-border transfers and GDPR
Creem, PayPal or any later configured payment provider processes payment-related personal data under its own terms and privacy notices. We keep only the payment metadata needed to grant credits, investigate billing issues and meet accounting obligations.
EU and UK users may exercise data subject rights β including access, deletion, correction, portability and objection β by emailing [email protected]. We will respond within statutory time limits and within three business days for the initial reply.
Contact
For privacy questions or deletion requests, email [email protected]. Include the email address used for your LookStage account so we can locate the right records.