Privacy Policy
Last updated: October 12, 2025
1. Overview
Buzz Cut Master (“we,” “us,” or “our”) provides AI-powered virtual buzz cut try-ons, face-shape insights, hairstyle recommendations, and collaboration tools for individuals, creators, and salons. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you visit our websites, use our applications, participate in demos, or communicate with us.
By using Buzz Cut Master, you agree to the practices described below. If you do not agree, please discontinue use of the services.
We collect the following categories of information to operate and improve Buzz Cut Master:
2.1 Account and Profile Data
- Name, email address, password (hashed), locale, and any profile details you choose to share.
- Authentication tokens received from third-party sign-in providers such as Google or GitHub.
- Photos, face-shape scans, hairstyle selections, and other media you upload when using virtual try-ons or AI generation features.
- Metadata needed to process, render, and store generated outputs (for example, image dimensions, file names, and credit usage).
- Logs detailing the pages you view, buttons you click, referral URLs, session timestamps, and feature usage (e.g., credits spent on try-ons).
- Device identifiers, browser type, operating system, language, approximate geolocation inferred from IP, and error diagnostics.
2.4 Payment and Transaction Data
- Order history, plan selections, credit balances, invoices, and renewal dates.
- Payment method details are processed by trusted gateways such as Stripe and Creem; we store only tokens and limited metadata necessary to reconcile transactions.
2.5 Communications and Support
- Messages you send to support, survey responses, testimonials, or other feedback.
- Email preferences and marketing opt-in status.
2.6 Cookies and Similar Technologies
- Functional cookies to keep you signed in and remember preferences.
- Analytics and performance cookies deployed via Google Analytics, Plausible, and OpenPanel to understand product usage.
- Advertising and attribution pixels (e.g., Google AdSense) where enabled.
We use collected data to:
- Deliver core functionality such as AI try-ons, face-shape insights, credit management, content libraries, and team collaboration dashboards.
- Generate, refine, and display AI outputs, including by routing prompts and media to model providers (e.g., OpenAI, DeepSeek, OpenRouter, SiliconFlow, Kling, Replicate).
- Personalize recommendations, tutorials, and inspiration feeds.
- Process payments, subscriptions, invoices, refunds where applicable, and prevent fraudulent activity.
- Provide customer support, respond to inquiries, and send critical service notices.
- Send marketing updates or product announcements when you opt in (you may unsubscribe at any time).
- Monitor performance, debug issues, secure the platform, and comply with legal obligations.
- Uploaded images and prompts are stored in secure object storage and linked to your account so you can revisit results, unless you delete them or request removal.
- When you trigger AI generation, your media or prompt may be transmitted to third-party model providers strictly for processing that request. These providers are bound by contractual safeguards and are instructed not to use your content for their own training unless you separately consent.
- Demo endpoints clearly labeled as “demo” or “beta” are intended for experimentation; avoid submitting sensitive content to those features.
We do not sell your personal information. We share data only with:
- Service providers who help operate our platform, including hosting, storage, analytics, email delivery (Resend), payments (Stripe, Creem), authentication, logging, and customer support tools.
- AI and infrastructure partners that render try-ons or generate content (listed in Section 3) under data-processing agreements.
- Professional advisors and authorities when required by law, regulation, legal process, or to protect rights, property, or safety.
- Business transferees in connection with a merger, acquisition, financing, or sale of assets, subject to confidentiality safeguards.
Each recipient is permitted to process data only as needed to provide services to us and is required to maintain appropriate safeguards.
6. Cookies, Analytics, and Advertising
You can manage cookie preferences through your browser or device settings. Disabling certain cookies may limit functionality such as staying signed in or tracking credits.
- We use analytics tools (Google Analytics, Plausible, OpenPanel) to understand aggregated usage and improve product performance.
- Where advertising pixels are deployed (e.g., Google AdSense), we comply with regional consent requirements and honor browser-level opt-outs where available.
7. Data Retention
- Account data is retained for as long as your account remains active and for a reasonable period afterward to comply with legal or accounting requirements.
- Try-on media and generated assets are stored until you delete them from your library or request removal. If your account remains inactive for an extended period, we may archive or delete assets after providing notice.
- Billing records are maintained for the retention periods required by tax and financial regulations.
- Support communications and analytics logs are retained as needed to troubleshoot issues, improve services, and maintain security.
8. Security
We employ administrative, technical, and physical safeguards such as access controls, encryption in transit, network monitoring, and routine security reviews. No method of transmission or storage is completely secure; we encourage you to use strong passwords, enable available security features, and contact us immediately if you suspect unauthorized access.
9. International Data Transfers
We operate from the United States and may store or process information in other countries where we or our service providers maintain facilities. When transferring personal data across borders, we rely on appropriate safeguards, such as standard contractual clauses, to protect your information in line with applicable laws.
10. Your Choices and Rights
Depending on your region, you may have the right to request access, correction, deletion, restriction, or portability of your personal data, and to object to certain processing or withdraw consent. You can:
- Update account details from your profile settings.
- Delete individual try-on assets or request full deletion of your account by emailing support.
- Opt out of marketing emails by using the unsubscribe link or contacting us.
- Adjust cookie settings through your browser or consent tools where provided.
We will respond to requests within the timelines required by applicable law. We may need to verify your identity before fulfilling certain requests.
11. Children’s Privacy
Buzz Cut Master is not directed to individuals under 13 (or the age required by local law). We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will promptly delete it.
12. Changes to This Policy
We may update this Privacy Policy to reflect product, legal, or regulatory changes. When we do, we will revise the “Last updated” date and, if the changes are material, provide additional notice (e.g., via email or in-app notification). Continued use of Buzz Cut Master after a change constitutes acceptance of the updated policy.
If you have questions, concerns, or requests regarding this Privacy Policy, please reach out to:
We appreciate your trust and are committed to protecting your information while delivering confident buzz cut experiences.