Privacy Policy

shadeupai ("we", "us") lets you upload a photo and see how a makeup look would appear on you, using AI image generation. This page explains what we collect, how we use it, who we share it with, and how to delete it — in plain language, matching what the product actually does.

What we collect

• Photos you upload — your bare-face photo, and, if you use that option, a reference photo of a look you want to try.
• Generated results — the AI-generated image produced from the above.
• An anonymous visitor ID — a random ID stored in a cookie so we can remember your free-try count and your generation history without requiring an account. It isn't tied to your name or email unless you subscribe to Pro.
• Email address — only if you subscribe to shadeupai Pro, collected through our payment processor at checkout.
• Basic usage events — things like which step of the flow you reached (photo uploaded, look picked, result shared), tied to the anonymous visitor ID above, not to your identity.
• Standard web request data — IP address, browser/device information, and referring page, collected automatically like on any website.

How we use it

• To generate the try-on result you asked for.
• To enforce free-try limits and Pro subscription quotas.
• To process payments and manage your subscription, through Stripe.
• To measure whether our ads are working and to prevent abuse of free tries.
• To fix bugs and understand which parts of the product people actually use.

We do not use your photos to train AI models, and we do not sell your photos or personal data to anyone.

Who we share data with

We use a small number of third-party services to run shadeupai. Each one only sees the data it needs to do its job:

• Our AI image-processing provider — receives your uploaded photos to analyze the look and render the result. It processes the images to return a result to us; it is not used by us to build a profile of you.
• Vercel — hosts the website and stores uploaded/generated images.
• Turso — hosts our database (visitor records, generation history).
• Stripe — processes payments for Pro subscriptions. We never see or store your card details; Stripe handles that directly.
• Resend — sends the occasional transactional email (like a Pro-access restore link).
• TikTok — if you arrived from a TikTok ad or interact with the site, we share limited information (a hashed version of your email if you're a Pro subscriber, your IP address, browser information, and TikTok's own click/browser identifiers) with TikTok to measure ad performance. Your email is hashed (SHA-256) before it's sent — TikTok never receives it in plain text from us.

We don't share your photos with any of these except the AI image-processing provider, which needs them to generate your result.

Cookies

• shadeup_vid — your anonymous visitor ID. Required for the product to work (tracks your free tries and history). Lasts 1 year.
• shadeup_ref — set briefly if you arrive from a friend's referral link, so we can credit them once you generate a result.
• TikTok's own advertising cookies (e.g. _ttp) are set by TikTok's pixel script when you arrive from or interact with a TikTok ad.

How long we keep your data

Uploaded and generated images are kept so you can come back and view your results, and are not automatically deleted on a schedule. You can permanently delete all of your images at any time from the tool — this removes the image files themselves and your generation history. It does not delete your visitor record (your free-try count and, if applicable, your subscription status), since that isn't photo data. If you'd like your account record removed entirely, contact us (below) and we'll take care of it.

Your rights

Depending on where you live, you may have rights to access, correct, or delete your personal data, or to object to certain uses of it. The fastest way to exercise most of this is the "Delete my images" option in the product itself. For anything else — including deleting your account record entirely — contact us using the details below.

Children's privacy

shadeupai is not directed at children, and we don't knowingly collect data from anyone under 13 (or the minimum age required in your country). If you believe a child has provided us data, contact us and we'll delete it.

Changes to this policy

If we make material changes to how we handle your data, we'll update the date at the top of this page.

Contact

Questions about this policy, or want your data deleted? Email privacy@shadeupai.com.