Hairveal
← Back

Legal

Privacy Policy

Last updated: July 2026

1. Who We Are

Hairveal ("we," "us," or "our") operates hairveal.com, an AI-powered hair visualization tool provided to hair replacement salons as a lead generation service. This Privacy Policy explains how we collect, use, and protect your personal information when you use any Hairveal-powered tool, including salon-branded pages such as hairveal.com/arista.

2. Information We Collect

When you use a Hairveal tool, we collect:

  • Personal details: your first name, email address, and phone number, submitted via our lead capture form
  • Your photo: a photograph you upload to generate your AI hair visualization preview
  • Usage data: your IP address, browser type, and device information for security and rate limiting purposes
  • Cookies and analytics: we use essential cookies to operate the service and may use analytics tools to understand how the service is used

3. How We Use Your Information

Your photo

Your uploaded photo is sent securely to our AI image generation provider (fal.ai) solely to generate your hair visualization preview. Your photo is never stored on our servers, never shared beyond this purpose, and is permanently deleted after processing. We do not use your photo for training AI models.

Your personal details

Your name, email, and phone number are:

  • Stored securely in our database (Supabase) solely for the purpose of connecting you with the hair replacement salon whose tool you used
  • Shared with that specific salon so they can follow up with you about their services, as you consented to when submitting the form
  • Never sold to third parties
  • Never used for marketing by Hairveal directly

Usage data

Used solely for security purposes — rate limiting, fraud prevention, and protecting our service from abuse.

4. Hairveal as Intermediary

Hairveal operates as a technology platform connecting individuals with independent hair replacement salon businesses. We are a service provider to our salon partners and process personal information on their behalf. The salon partner whose tool you used is the principal data controller for your personal information once it is shared with them. Their use of your information is subject to their own privacy policy and practices. Hairveal is not responsible for how salon partners handle your personal information after it is shared with them.

If you have concerns about how a salon partner has used your information, please contact them directly. If you have concerns about how Hairveal has handled your information, contact us at privacy@hairveal.com

5. Third Parties We Work With

  • fal.ai — AI image generation (processes your photo temporarily, does not store it)
  • Supabase — secure database storage for lead information
  • Resend — email delivery service for lead notifications
  • Vercel — hosting and infrastructure

Each of these providers operates under their own privacy policies and data processing agreements.

6. The Salon Partner

When you use a Hairveal tool on a salon's branded page, that salon receives your name, email, phone number, and your response to the hair situation question. The salon is an independent business and is responsible for how they handle your contact information once received. By submitting the form you are consenting to be contacted by that specific salon regarding their hair replacement services. Salon partners are prohibited from using lead data captured through Hairveal to send bulk unsolicited marketing messages unrelated to hair replacement services.

7. Data Retention

We retain personal information for as long as necessary to fulfill the purpose it was collected for, satisfy legal obligations, or establish legal claims. Typically:

  • Your photo: deleted immediately after your preview is generated
  • Your personal details: retained for up to 12 months or until you request deletion
  • Usage and security logs: retained for 30 days

8. Your Rights

You have the right to:

  • Access: request a copy of the data we hold about you
  • Correction: request that we update or correct inaccurate data
  • Deletion: request deletion of your personal data
  • Restriction: request that we limit how we use your data
  • Withdraw consent to be contacted by the salon at any time by contacting them directly

To exercise any of these rights regarding data held by Hairveal, contact us at: privacy@hairveal.com

9. Data Security

All data is transmitted over HTTPS encryption. Personal data is stored in a secured database with role-based access controls. We do not store payment information. API keys and credentials are stored in encrypted environment variables and never exposed publicly. Please note that no internet transmission is 100% secure. While we take all reasonable steps to protect your information, we cannot guarantee absolute security of data transmitted to or from our service.

10. Children

Our service is intended for adults aged 18 and over. We do not knowingly collect data from anyone under 18. If you believe a minor has submitted data through our service please contact us at privacy@hairveal.com and we will delete it promptly.

11. Cookies

We use essential cookies required to operate the service. We do not use advertising or tracking cookies. You can disable cookies in your browser settings though this may affect service functionality.

12. Changes to This Policy

We may update this policy from time to time. The date at the top of this page reflects when it was last updated. Continued use of the service after changes constitutes acceptance of the updated policy.

13. Contact

For any privacy-related questions: privacy@hairveal.com