My Color Analysis AI
Start

Privacy Policy

Last updated: October 29, 2026

Your photo is personal, so here is exactly what happens to it and to the rest of your data when you use mycoloranalysis.ai. The short version: we use your photo only to produce your color analysis, we never sell it, never use it to train AI models and never show it publicly, and you can delete it whenever you want.

1. Who is responsible for your data

The data controller is Reshot Technologies, SAS, 60 rue François 1er, 75008 Paris, France (SIREN 939 435 988), operating as My Color Analysis AI (MyColorAnalysis AI). For any privacy question or request, email hello@mycoloranalysis.ai.

2. What we collect

  • Your answers to the analysis questions (for example natural hair and eye color, how your skin reacts to the sun).
  • Your photo, and the images we generate from it (drape previews, hair color previews).
  • Color measurements of your skin, hair and eyes. These are computed in your browser, on your device, and only the resulting color values are sent to us.
  • Your results: your choices in the draping test, your season and, if you buy it, your report.
  • Purchase details if you buy the report: your email address, the amount, the currency and the payment status, as provided by Stripe. We never receive your full card number.
  • Technical data: a one-way hash of your IP address, used to prevent abuse (for example someone running thousands of analyses), and standard server logs kept for security.
  • Usage data: the pages you visit, the steps you complete and the buttons you click, with your browser, device type and approximate country, so we can see where the Service works and where it does not (see section 7).

We do not ask for your name, we do not require an account, and we do not use your photo for face recognition or to identify you.

3. How your photo is processed

  • Your photo is uploaded to our servers and stored in Cloudflare R2 storage.
  • To produce your analysis, it is sent to AI providers acting on our behalf: Anthropic, for image analysis and writing your report, and fal.ai, for image editing (drape and hair color previews).
  • These providers process your photo only to return the result to us. Under our agreements with them, it is not used to train their models.
  • We never sell your photo, never share it for advertising and never show it publicly.

4. How long we keep it

  • Free analyses, including the photo, the generated images and the email address if you asked for your result by email, are deleted automatically after 30 days.
  • Purchased reports are kept so that your report keeps working, until you delete them. You can delete your report and its photos yourself at any time with the delete button in your report, or by emailing us.
  • Purchase records (email, amount, date) are kept for as long as accounting and tax law requires, which in France is up to 10 years, even if you delete your report.

5. Why we use your data (legal basis)

  • To provide the analysis and the report you asked for: performance of our contract with you (Article 6(1)(b) GDPR). Your photo is used only for this.
  • To process payments, refunds and keep accounting records: contract and legal obligation (Article 6(1)(b) and (c)).
  • To prevent abuse, keep the Service secure, measure traffic and improve the Service: our legitimate interest (Article 6(1)(f)).
  • To answer your emails: your request and our legitimate interest in helping you.
  • To email you your free result, if you ask for it: your consent (Article 6(1)(a)). We send the result and one reminder about the full report the next day, nothing else. Every email has a one-click unsubscribe link.

We do not send newsletters or other marketing emails.

6. Who processes data for us

  • Cloudflare: storage of photos and images (R2) and content delivery.
  • Anthropic: AI image analysis and report writing.
  • fal.ai: AI image editing for drape and hair previews.
  • Stripe: payments and refunds. Stripe processes your card details under its own privacy policy.
  • Resend: emails, such as your result or a link to your report if you ask for one.
  • PostHog: product analytics (posthog.com/privacy).
  • Google Analytics: visit statistics (policies.google.com/privacy).
  • Meta Platforms: ad measurement for visitors outside the EU/EEA, the UK and Switzerland (section 7).
  • Our hosting providers: the servers that run the site and the database.

Some of these providers are based in, or process data in, the United States. When data leaves the European Economic Area, it is protected by the EU-US Data Privacy Framework where the provider is certified, or by the European Commission's Standard Contractual Clauses.

7. Analytics, cookies and ads

  • We measure traffic with a self-hosted instance of Plausible Analytics. It does not use cookies, does not collect personal data and does not track you across sites.
  • We also use Google Analytics to measure visits: the pages viewed, how long a visit lasts, and the country and device type. It stores first-party cookies (named _ga) to recognize a returning browser. We do not link it to your photo, your email or your purchases, and it is not used to show you ads.
  • We also use PostHog for product analytics: which steps of the analysis people complete, where they get stuck and, for some visits, a recording of how the page was used. PostHog stores a random identifier in your browser (a first-party cookie and local storage) to recognize a returning visit. It is not used for advertising and is not shared with other sites. Recordings hide everything you type, and your photo and the images made from it are never recorded.
  • Meta (Facebook and Instagram), visitors outside the EU/EEA, the UK and Switzerland only. To measure and improve our Facebook and Instagram ads, these visitors load the Meta pixel on our public pages (never on the analysis, result or report pages). It sets first-party cookies (_fbp, _fbc). When such a visitor gets a free result, starts a checkout or buys, our server also tells Meta that it happened (Meta's Conversions API), with an internal ID and, for a purchase, your email in hashed (scrambled) form, plus your country, IP address, browser and the amount. We never send your photo, your season or anything else about your analysis. Visitors in the EU, the UK and Switzerland, browsers that send a Global Privacy Control signal and anyone who turns it off here are not measured: . Meta's policy: facebook.com/privacy/policy.
  • The analysis and the report do not use advertising cookies. We may store small technical values in your browser (for example the progress of your current analysis) so the Service works.
  • Our blog and guide pages show ads through Google AdSense. On those pages only, Google may use cookies or similar technologies to show and measure ads, according to its own policies and, where required, your consent choices. You can manage ad personalization at adssettings.google.com.

8. Your rights

Under the GDPR and similar laws, you have the right to:

  • access the data we hold about you and get a copy of it;
  • correct it if it is wrong;
  • delete it (you can delete a purchased report yourself from the report);
  • restrict or object to some processing, including any processing based on our legitimate interest;
  • receive your data in a portable format;
  • withdraw any consent you gave, at any time.

To exercise any of these rights, email hello@mycoloranalysis.ai from the address you used at checkout, or include your report link so we can find your analysis. We answer within one month. You can also complain to your data protection authority. In France, that is the CNIL (cnil.fr).

9. Security

Data is encrypted in transit (HTTPS). Photos are stored in private storage and are only reachable through links tied to your analysis or report. Your report link works like a key: keep it private, and delete the report if you think someone else has it.

10. Age

The Service is for people aged 16 and over. We do not knowingly process photos of children. If you believe a child's photo was uploaded, email us and we will delete it.

11. Changes

If we change this policy, we will update the date at the top. For significant changes, such as a new type of provider handling photos, we will make it clear on the site.

12. Contact

Privacy questions or requests: hello@mycoloranalysis.ai. See also our Terms of Service.