Privacy Policy

This policy explains how AI Halloween Costume (aihalloweencostume.net, "we", "us") handles your information. The service is operated by SailorFlow LLC, a Wyoming limited liability company in the United States.

The short version

• You sign in with Google or with a one-time code sent to your email. With Google we get your name, email address and profile picture; with email we get only your email address.
• The photo you upload is sent to our AI image processing partner only to create your image. We do not store your uploaded photo.
• Your results are stored for 30 days and then deleted.
• Payments go through Stripe. We never see your card number.
• We do not sell your personal information.

What we collect

Account information. When you sign in with Google, Google shares your name, email address and profile picture with us. When you sign in with email, you give us your email address and we send a one-time sign-in code to it through our email delivery provider; the code expires after 10 minutes. We use this information to create your account, show who is signed in and contact you about your account or purchases.

Photos you upload. When you create a look, your photo is sent to our AI image processing partner only to create the image you asked for. We do not keep the uploaded photo on our servers after the image is made. We do not use your photos to train AI models.

Results. The images we create for you are stored in your account for 30 days and then deleted automatically. You can download them before then. We record which look you picked (for example, the preset name), not the image itself, in your generation history.

Purchases. Credit pack payments are handled by Stripe. Stripe collects your card details; we receive only the payment status, amount, currency and a payment reference. We keep your credit balance and order history.

Usage and device data. We use Google Analytics 4 to understand how people use the site: pages visited, buttons clicked (such as starting a look or opening checkout), approximate location, device and browser type. We do not send your name, email or photos to Google Analytics. If your browser sends a Global Privacy Control or Do Not Track signal, we do not load Google Analytics at all.

Error logs. When something breaks, we send a technical error report to PostHog: the error message, the page or feature where it happened, and browser type. We remove email addresses, links with personal parameters and image data from these reports. We do not use PostHog for marketing or session recording.

Cookies. We use cookies that keep you signed in and remember basic settings. Google Analytics sets its own cookies when it loads.

Who processes your information

We share information only with the service providers that help us run the site, and only for that purpose:

• Google: sign-in (Google account) and Google Analytics 4
• Resend: our email delivery provider, which sends one-time sign-in codes
• Our AI image processing partner: receives your uploaded photo to create your image
• Stripe: payments
• Cloudflare: hosting, storage of your results and network security
• PostHog: error tracking

We may also disclose information if the law requires it, to protect our rights or users, or as part of a sale or merger of the business (in which case this policy continues to apply to your information).

How long we keep it

• Uploaded photos: not stored by us after your image is created
• Results: 30 days, then deleted
• Account and purchase records: while your account exists, and longer where tax or accounting law requires it
• Error logs and analytics: according to the retention settings we choose in PostHog and Google Analytics

Your privacy rights (including California)

You can ask us to:

• tell you what personal information we have about you
• give you a copy of it
• correct it
• delete it and your account

California residents have these rights under the California Consumer Privacy Act (CCPA), along with the right not to be treated differently for using them. We do not sell your personal information and we do not share it for cross-context behavioral advertising. If your browser sends a Global Privacy Control signal, we honor it by not loading Google Analytics.

To make a request, email support@aihalloweencostume.net from the address on your account. We reply within 45 days. You can use an authorized agent; we may ask them to show your permission.

Children

The service is not for children under 13, and children under 13 may not create an account. If you are under 18, use the service only with a parent or guardian's involvement. A parent may upload a photo of their own child to create a costume look; the photo is handled as described above. If you believe a child under 13 has created an account, contact us and we will delete it.

Security

We use encrypted connections (HTTPS), access controls and reputable providers to protect your information. No system is perfectly secure, so we cannot guarantee absolute security.

Changes

If we change this policy, we will update the date at the top of this page. If a change is significant, we will tell signed-in users before it takes effect.

Contact

SailorFlow LLC, 30 N Gould St Ste R, Sheridan, WY 82801, United States
Email: support@aihalloweencostume.net