01
Scope and contact
This policy describes information handled through ManeStory at manestory.beauty. Contact the ManeStory team at hello@manestory.beauty with questions or privacy requests. Salons also have their own responsibilities for collecting client information, obtaining permission and deciding where finished content is published.
02
Information we handle
- Studio accounts: email address, salon name, password hash, verification status, sign-in sessions and account security records. We do not store plaintext account passwords.
- Content you provide: client names or labels, service and visit details, photographs, salon branding, booking links, editing choices and permission confirmations.
- Work records: uploaded assets, generated images and videos, captions, processing status, review choices, usage allowances and retention dates.
- Payments and support: order references, payment and refund status, and messages you send us. Payment details entered in hosted checkout are handled by the payment provider; ManeStory does not receive full card numbers or card security codes.
- Technical information: request, security and error information needed to operate the website and prevent misuse. Hosting and payment providers may also process IP addresses and device or browser information.
03
Why we use it
We use this information to create and secure studio accounts, verify email addresses, recover account access, process photographs, generate and deliver editions, keep requested client history, administer trials and payments, answer support requests and investigate abuse.
Depending on the law that applies and our role, processing may be necessary to provide the requested service, protect legitimate security and operational interests, comply with legal obligations, or carry out a choice requiring consent. A privacy notice does not replace consent where consent is required.
04
Client photographs and AI features
Before uploading, salons must have permission and the necessary rights to photograph the client and upload, process and store the images. Optional AI processing and extended history are presented separately in the product. Permission to create a private keepsake does not automatically authorize social-media publication or advertising.
Some features process photographs on our backend; enabled generative features may send photographs and instructions to external image or video providers. These features can change visual details. Review the face, hair color, cut and other important details before using an output.
Local skin-light adjustments use face and skin detection to locate editable areas, not to identify a person. We do not use this feature for identity matching. We do not use uploaded client photographs to train our own models or turn them into public marketing examples without separate permission. External providers have their own processing and retention terms; this policy does not promise that every provider has zero retention.
05
Service providers and international processing
We use providers for necessary parts of the service, including Vercel for website hosting, Cloudflare for network delivery, Resend for account emails and Dodo Payments for enabled checkout. Optional image processing may use Alibaba Cloud services; enabled video features may use configured external generation services. Our backend infrastructure stores account and work records and runs media processing.
Information may be processed in countries other than yours, including China and countries used by our hosting, email, AI and payment providers. Applicable transfer requirements and provider terms depend on the service involved. Contact us if you need more information before uploading client material.
We do not sell client photographs or account information. We may disclose information where necessary to comply with lawful requests, protect people and the service, or carry out a business transfer subject to appropriate protections.
06
Cookies and browser storage
We use an essential sign-in cookie to keep your session authenticated. Blocking it prevents normal studio access. The current application does not include advertising tracking pixels. Linked services and hosted checkout have their own cookie and privacy notices.
We use self-hosted Umami for aggregate visits and campaign statistics. Our analytics integration sends only a page category, campaign labels, referrer host and browser information, never client photographs, account emails, passwords or authentication links. IP addresses are processed to estimate visitors; they are not stored as raw IP addresses in the analytics event database. Hosting security logs are separate.
We keep the first campaign source in your browser for up to 30 days and attach it to your account when you register, to understand which channels lead to subscriptions and successful deliveries. We honor Do Not Track and Global Privacy Control for optional browser analytics. You can also disable optional analytics on this browser below; essential account and payment records remain necessary for the service.
07
Retention and deletion
Edition files normally have a 30-day retention period. Where a salon separately chooses client-history retention, the period can be 365 days. The expiry date displayed on the edition controls its download availability; revisions can retain the original expiry date, and payment does not extend it. Download files you need before they expire.
Salons can delete editions and client records using the available studio controls. Expired or deleted files are removed through the service’s deletion process. Account, billing, security and consent records can have different retention needs. Backups may retain copies until their rotation or removal; deletion from the active workspace is not a promise of immediate removal from every backup or external provider.
For account deletion or a request involving a person shown in a photograph, contact us. Information required for payment reconciliation, legal obligations or dispute handling may need to be retained after other data is deleted.
08
Your choices and rights
Depending on your location, you may have rights to access, correct, delete, restrict or object to processing, receive a copy of information, withdraw consent or complain to a relevant privacy authority. Email hello@manestory.beauty. We may verify the request and coordinate with the salon that supplied the content. Withdrawing consent does not undo processing already lawfully completed.
Deleting a ManeStory copy does not remove copies already downloaded or published by a salon or client. Contact the publisher or relevant platform about those copies.
09
Security and children
We use measures such as authenticated access, password hashing and private media storage. No online service or transmission method is completely secure.
Studio accounts are intended for adults acting for a salon or business. Do not knowingly upload photographs of children under 13. For older minors, obtain appropriate parent or guardian authorization and any other permission required by applicable law. Contact us if you believe a child’s information has been uploaded improperly.
10
Changes
We may update this policy as the service changes. The effective date appears on this page. Where required, we will provide additional notice or request consent for material changes.