Privacy Policy

Who we are

Oove Studio is operated as a sole proprietorship based in Quebec, Canada. We are the party responsible for the personal information you share with us. The person responsible for the protection of personal information is the owner of Oove Studio, reachable at privacy@oovestudio.com. For any privacy question or request, use that address.

What we collect

We only collect what we need to prepare and deliver your analysis.

Contact details

Your first name and email address, so we can identify your order and send you your analysis.

Your intake responses

The information you choose to share about your hair, scalp, current routine, lifestyle, environment, and goals. You decide how much to tell us.

Photos

The hair photos you upload, an optional scalp photo, and the head photos used for the haircut analysis (front, both sides, and hairline; the back is optional). You can also add optional reference images to show us a style you like. These photos are the core of the analysis.

On-device measurements

As part of the haircut analysis, face measurements are calculated from your front photo inside your own browser, on your device. Only the resulting numbers (ratios and proportions) are sent to us. No face scan or biometric template is transmitted or stored.

Payment information

Payments are handled by our payment processors. We do not receive or store your full card number. We may receive confirmation that a payment succeeded and a reference to it.

Basic technical data and local storage

Your browser sends standard technical information (such as device and browser type) when it loads our site. Our pages also load fonts from Google Fonts, so Google receives the standard technical request data (such as your IP address) when a page loads. We also store a few small, non-tracking values on your device to remember your theme choice and your progress through the form. These are not advertising or cross-site tracking cookies. Our host also counts page views for us without cookies, described under Cookies and tracking below.

Why we use your information

• To create and deliver your personalized analysis.
• To communicate with you about your order and answer your questions.
• To process your payment and prevent fraud or abuse.
• If, and only if, you opt in: to create an account for you or send you emails.
• To find and fix gaps in our own method. If your analysis shows we are missing something, an ingredient we could not judge or a problem we had no good answer for, we write down what was missing and fix it for everyone who comes after you.

That last one is worth being precise about, because it is the only place your analysis feeds back into anything. What we keep is a note about the method, not about you: no photos, no name, no email, and no copy of your answers. A note may quote your order number so we can trace which run raised it, and the note outlives the answers it came from.

We do not use your information for any other purpose without asking you first.

Your consent

You consent to this policy when you submit your intake. Because photos are sensitive, we explain how they are used at the point where you upload them, and you confirm your consent there. You can withdraw your consent at any time by emailing us, though we may be unable to deliver an analysis without the information it depends on.

How we handle your photos

While we have them, photos are held in private storage that is not publicly accessible and is viewable only by us to complete your analysis.

How AI is involved

AI is involved at two points. First, when you upload your hair photo during the intake, an AI image model run by our provider Anthropic may read it to identify your hair pattern, so the rest of the form can adapt to you. Second, when we build your analysis, our analyst works with AI assistance from the same provider (Anthropic's Claude), which may process your photos and intake responses to help the analyst prepare it. In both cases, your photos and responses are not used to train Anthropic's models. A human analyst directs the work and reviews every analysis before it is sent.

How long we keep your information

We delete your photos and your intake answers within 30 days after your analysis is delivered, and sooner if you ask. If your order includes the 30-Day Check-In, we keep them until that is finished, and then the same 30-day clock starts. The face measurements described above are deleted at the same time.

While we are building your analysis, a copy of your answers and photos also sits on the analyst's own computer, so the work can be done without keeping everything online. That copy is deleted on the same schedule.

We keep your name, your email and the record of what you ordered for longer. We need those for our business and tax records, and so we can recognise you if you come back or ask us about an old order. Anything you write in a check-in or a review also stays until you remove it.

One thing sits outside the 30-day clock on purpose. If you tick the box asking to be featured in an Oove video and send before-and-after photos with your review, those photos are kept for that video, which may be made months later. They live in separate storage from your intake photos and are never swept by the 30-day deletion. You see the video before it goes out, you can say no at any point, and asking us to delete them removes them straight away.

You can have all of it deleted whenever you want. Delete your account, or email us, and it goes, including anything you wrote in a check-in or a review and any photos you sent with them. If you opt in to emails, we keep what the newsletter needs until you unsubscribe.

Who we share it with

We do not sell your personal information. We share it only with the service providers that make Oove work, and only so they can perform their function:

• Supabase: stores our database and your photos.
• Vercel: hosts our website and counts page views for us, without cookies.
• Stripe and PayPal: process payments.
• Resend: sends your analysis and any order or account emails.
• Anthropic: performs the automated hair-pattern reading described above.
• Beehiiv: hosts our newsletter list, only if you opt in to emails.

Each provider is bound to handle your information only on our instructions. We may also disclose information if the law requires it.

Where your information is stored

Our providers store and process data on servers located in the United States. This means your information may be transferred to, stored, and processed outside Quebec and Canada. By using Oove, you understand and agree to this transfer. We choose providers that offer a level of protection appropriate for this information.

Your rights

You have the right to:

• Access the personal information we hold about you.
• Correct information that is inaccurate or incomplete.
• Ask us to delete your information.
• Withdraw your consent to our use of your information.

These rights reflect Quebec's Law 25 and Canada's PIPEDA, and we extend the same choices to customers elsewhere, including those covered by the Philippines Data Privacy Act. To exercise any of them, email privacy@oovestudio.com and we will respond within the timeframe the law requires.

How we protect your information

We use reasonable safeguards, including private (non-public) photo storage and access controls, to protect your information. No method of transmission or storage is ever completely secure, so we cannot promise absolute security, but we take it seriously.

If there is a data breach

If a breach of security involving your personal information creates a risk of serious harm, we will notify the affected people and the relevant authority as required by law, and we will take reasonable steps to reduce the risk.

Children

Oove is not intended for anyone under 18. We do not knowingly collect information from people under 18. If you believe a minor has submitted information to us, contact us and we will delete it.

Cookies and tracking

We use the small, non-tracking values on your device described above to remember your theme choice and your progress through the form.

We also run Vercel Web Analytics, which counts page views so we can see which pages people actually use. It sets no cookies. It does not store your IP address, and it stands in for a visit with a one-way code that resets every day, so it cannot follow you from one day to the next or onto any other website.

We run no advertising cookies and no ad pixels. If that changes, we will update this policy and, where required, ask for your consent.

Changes to this policy

We may update this policy from time to time. The date at the top shows the most recent version. If we make a material change, we will make that clear.

Contact us

For any privacy question or request, email privacy@oovestudio.com.