Privacy Policy

Effective Date: June 9, 2026

This Privacy Policy describes how PlusLooks ("we", "us", "our"), operated by an individual developer, collects, uses, stores, and shares your personal information when you use our website and AI virtual try-on service at pluslooks.com (the "Service").

1. Information We Collect

1.1 Information You Provide

• Account information: When you register, we collect your name, email address, and optionally a profile picture. If you sign up via Google or GitHub OAuth, we receive your public profile information (name, email, avatar) from that provider.
• Photos you upload: When you use the virtual try-on feature, you may upload clothing photos and/or a personal photo (custom model). These images are processed by our AI providers to generate try-on results.
• Contact messages: If you contact us via our contact page or email, we collect your name, email address, and message content.

1.2 Information Collected Automatically

• Device and session data: When you use the Service, we automatically collect your IP address, browser type, operating system, and device identifiers. This data is stored in your session record for security and authentication purposes.
• Usage data: We collect information about how you interact with the Service, including pages visited, features used, and generation history (body type, skin color, output angle, resolution, aspect ratio, background settings).

1.3 Payment Information

When you make a purchase, payment processing is handled by Creem (creem.io). We do not collect or store your credit card or bank account information. We store transaction records including product ID, payment status, billing period, and Creem customer/subscription IDs.

1.4 Cookies

We use cookies and similar technologies as described in our Cookie Policy.

2. How We Use Your Information

We use your personal information for the following purposes:

• Provide the Service: Create and manage your account, process virtual try-on requests, store and display your results.
• Authentication: Verify your identity, maintain login sessions, and secure your account.
• Credits and billing: Manage your credit balance, process payments via Creem, and track transaction history.
• Communication: Send service-related emails (password reset, email verification), respond to your inquiries, and deliver newsletter updates (you can unsubscribe at any time).
• Security: Detect and prevent fraud, abuse, unauthorized access, and other illegal activities.
• Improvement: Analyze usage patterns and fix technical issues to improve the Service.

3. How Your Information Is Shared

We do not sell your personal information. We share data only with the following third parties as necessary to provide the Service:

3.1 AI Processing Providers

Your uploaded photos (clothing images and custom model photos) are sent to APIMart (Wan 2.7 Image API) to generate virtual try-on results. These providers process your images solely to fulfill your request. Please review their privacy policies:

• APIMart: https://apimart.ai

3.2 Cloud Storage

All uploaded images and generated try-on results are stored on Cloudflare R2 (files.pluslooks.com). Images are stored with public URLs. You can delete your try-on history at any time from your account settings.

3.3 Payment Processor

Payment data is processed by Creem (creem.io). We share your email address and user ID with Creem to process transactions. Creem handles all payment card data in compliance with PCI-DSS standards.

3.4 Email Service

We use Resend (resend.com) to send transactional emails (password reset, email verification, contact form messages). Your email address and email content are transmitted to Resend for delivery.

3.5 Authentication Providers

If you sign in via Google or GitHub, these providers receive your authentication request. We collect only your public profile information (name, email, avatar).

3.6 Live Chat

We use Crisp (crisp.chat) for customer support chat. Crisp may collect your chat messages, email, and browsing data on our site.

3.7 Bot Protection

We use Cloudflare Turnstile to verify that you are human during registration and login. Turnstile may collect tokens and device information for fraud prevention.

3.8 Admin Notifications

When you make a payment, anonymized notification data (username, payment amount, transaction ID) is sent to our private Discord or Feishu channel for order monitoring. No sensitive personal data is included.

4. Data Retention

• Account data: We retain your account information for as long as your account is active.
• Session data: Sessions expire after 7 days. IP address and user agent are stored with each session.
• Try-on images: Uploaded and generated images are stored on Cloudflare R2 indefinitely unless you delete them. Deleting a history record removes it from your visible history but the image file may persist on R2 until manually purged. Contact us to request full image deletion.
• Payment records: Transaction records are retained indefinitely for accounting and dispute resolution.
• Contact messages: Messages are sent via email and are not stored in our database. They persist only in our email inbox.

5. Your Rights

Depending on your jurisdiction, you may have the following rights:

• Access: Request a copy of your personal data.
• Correction: Request correction of inaccurate data.
• Deletion: Request deletion of your account and associated data.
• Data portability: Request your data in a structured format.
• Withdraw consent: Withdraw consent for data processing (e.g., unsubscribe from newsletter).
• Object: Object to certain types of data processing.

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within 30 days.

6. International Data Transfers

Your data may be transferred to and processed in countries other than your country of residence. Our servers and third-party providers (Cloudflare, APIMart, Creem, Resend) may operate in the United States, Europe, or other regions. We take appropriate safeguards to protect your data during international transfers.

7. Children's Privacy

Our Service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we discover that a child under 13 has provided us with personal data, we will delete it immediately.

8. Data Security

We implement reasonable technical and organizational measures to protect your personal data, including:

• Encrypted data transmission (HTTPS/TLS)
• Secure cloud storage with access controls
• Authentication tokens and session management
• Regular security monitoring

However, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated version on this page with a revised effective date. Your continued use of the Service after changes are posted constitutes your acceptance of the updated policy.

10. Contact Us

If you have any questions about this Privacy Policy or your personal data, please contact us:

• Email: [email protected]
• Contact Page: pluslooks.com/contact