Privacy Policy

ColorFinder AI (colorfinderai.com) is a personal color analysis product operated by kraftscale GmbH, a company incorporated in Switzerland (“kraftscale”, “we”, “us”). ColorFinder AI is a product by kraftscale.com. kraftscale GmbH is the data controller for the personal information described here.

This Privacy Policy explains what we collect, why, who we share it with, and the choices you have. It works alongside our Terms of Service. Questions or requests? Email hello@colorfinderai.com.

We built ColorFinder AI to keep your photo close to you. A few things are true by design:

• The color analysis runs on your device. The measurement that produces your season and palette happens in your browser — that photo is not uploaded for the analysis itself.
• AI previews are processed in memory and then discarded. Generating the drape, hair, makeup, and outfit previews is the one step where your photo leaves your device — it is sent to our image-generation providers, used only to create your previews, and is not logged or stored by us.
• Saving your Report is optional and opt-in. If you choose to save it to an account, your selfie and Report are stored encrypted, are accessible only to you, are auto-deleted after 30 days, and can be deleted by you at any time.
• We never use your photos to train AI models, and we do not sell your personal information.

Information you provide:

• Your photo(s). Used on your device for the analysis, and sent to our image providers in memory to generate AI previews. Stored only if you opt in to save your Report (then encrypted, see above).
• Calibration inputs. Optional details you select — such as natural hair shade, eye color, how your skin reacts to sun, and an optional body-shape selection used only to tailor outfit previews — that feed the verdict and renders.
• Email address. If you create an account (via magic link / one-time code) or opt in to hear from us. Account sign-in is passwordless.
• Payment information. When you buy a Report, payment is processed by Stripe. We receive confirmation and limited details (such as the last digits and the outcome) but we never receive or store your full card number.

Information collected automatically:

• Device and usage data. Such as IP address, device and browser type, pages viewed, and actions taken, collected through our product analytics to keep the Service working, secure, and improving.
• Approximate location. A general, city/region-level estimate inferred from your IP address. We do not collect precise GPS location.

• To run your color analysis and generate your Report and AI previews.
• To process your purchase and send purchase confirmation and account emails.
• To save your Report to your account, if you opt in, and let you access or delete it.
• To operate, secure, debug, and improve the Service and prevent abuse and fraud.
• To respond to your requests and provide support.
• To comply with legal obligations and enforce our Terms.

Where the GDPR or the Swiss Federal Act on Data Protection applies, we rely on:

• Performance of a contract — to deliver the analysis, Report, and purchases you request.
• Legitimate interests — to secure, maintain, and improve the Service and prevent abuse, balanced against your rights.
• Consent — for optional things like marketing emails, which you can withdraw at any time.
• Legal obligation — where we must keep or disclose data to comply with the law.

Your photo is used to infer characteristics about your appearance. Where this is treated as sensitive data, we process it to provide the Service you have requested and on the basis of your consent, and we keep it only as described below.

We do not sell your personal information. We share it only with service providers who process it on our behalf, under contract, to run the Service:

• Stripe — payment processing.
• Supabase — authentication and encrypted storage of saved Reports.
• Replicate and the Vercel AI Gateway (which routes to Google’s Gemini image model) — to generate your AI previews from your photo, in memory.
• Resend — to send transactional and account emails.
• Vercel — website and application hosting.
• PostHog — privacy-conscious product analytics.

We may also disclose information if required by law or valid legal process, to protect the rights, safety, or property of you, us, or others, or in connection with a merger, acquisition, or sale of assets (in which case we will notify you).

We are based in Switzerland, and some of our providers are located in the United States or other countries. Where personal information is transferred outside Switzerland or the EEA, we rely on appropriate safeguards — such as the European Commission’s Standard Contractual Clauses together with the Swiss addendum, or an adequacy decision — to protect your data.

• Photos used for AI previews are processed in memory and not retained by us after the previews are generated.
• Saved Reports and selfies (only if you opt in) are stored encrypted and automatically deleted 30 days after they are saved, or sooner if you delete them.
• Account and purchase records are kept as long as needed to provide the Service and to meet legal, accounting, and tax obligations.
• Analytics and security logs are kept for a limited period and then deleted or aggregated.

Depending on where you live, you may have the right to access, correct, delete, or receive a copy of your personal information; to object to or restrict certain processing; and to withdraw consent. EEA, UK, and Swiss residents may also lodge a complaint with their data protection authority (in Switzerland, the Federal Data Protection and Information Commissioner).

California residents have rights under the CCPA, including to know, delete, and correct personal information, and to not be discriminated against for exercising them. We do not “sell” or “share” personal information as those terms are defined under the CCPA.

You can delete your saved Report and account at any time from within the Service. For any other request, email hello@colorfinderai.com. We may need to verify your identity before acting on a request.

We use technical and organizational measures to protect your information, including encryption of saved Reports and access controls that scope saved data to its owner. No method of transmission or storage is completely secure, but we work to protect your data and will notify you and the relevant authorities of a breach where required by law.

The Service is for adults (18+) and is not directed to children. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us information, contact us and we will delete it.

We use a small number of cookies and similar technologies that are necessary for the Service to function and to understand how it is used so we can improve it. Our analytics are routed through our own domain. You can control cookies through your browser settings; blocking some cookies may affect how the Service works.

We may update this Privacy Policy from time to time. We will revise the “Last updated” date above and, for material changes, provide additional notice where appropriate. Your continued use of the Service after a change takes effect means you accept the updated policy.

kraftscale GmbH
Switzerland
Email: hello@colorfinderai.com