Privacy Policy
Last updated: June 12, 2026
1. Data controller
Promptolook (promptolook.com) is operated by Keenvo Tech OÜ, registered in Estonia (17457927), Harju maakond, Tallinn, Kesklinna linnaosa, Järvevana tee 9, 11314. Keenvo Tech OÜ is the data controller responsible for your personal data under applicable data protection laws (including the GDPR and the LGPD). Advertising, traffic acquisition, and monetization services are provided by ActiveView OÜ, registered in Estonia (16639782), Kotkapoja tn 2a-10, Tallinn 10615, Harju, Estonia. You can reach the controller at support@promptolook.com.
2. What we collect
We collect the email you sign up with, the prompts and images you submit, photos you upload for visual search, answers and preferences you share in quizzes and style tools, and basic usage telemetry (page views, clicks, outcomes).
3. How we use it
We use what you submit only to fulfill your request (generate a look, run a visual search, or return your personalized style and beauty insights). Telemetry is used to improve the product, measure conversion, and run A/B tests. We do not sell personal data.
4. Third-party services
Authentication and data storage are handled by Supabase. Payments are processed by Stripe; we never store your card number, CVC, or full card details, only a Stripe customer ID. Hosting is provided by Vercel. Transactional email is delivered through Resend. If you sign in with Google, we receive your name and email from your Google profile.
Image generation, visual search, and personalized insights are powered by third-party AI and search providers; your inputs are processed only to fulfill your request. We do not use your images to train models.
5. Advertising
Free accounts may be shown ads served through Google’s ad network (Google Ad Manager) and certified ad partners. These third-party vendors use cookies and similar technologies to serve ads based on your prior visits to this and other websites. Opting out disables interest-based targeting only; you may still see non-personalized, contextual ads. Paid subscribers are not shown ads.
You can opt out of personalized advertising at Google My Ad Center or aboutads.info. To learn how Google uses information from sites that use its services, see How Google uses information from partner sites.
6. Affiliate links
Some links to third-party products or services on Promptolook are affiliate links. If you click one and make a purchase or sign up, we may earn a commission at no extra cost to you. We only surface options we believe fit your needs, and commissions never change our editorial picks or the substance of our guidance. Affiliate links are marked where they appear.
8. Data retention
Generated images, library items, and chat history are retained while your account is active. Account deletion removes all personal data within 30 days. Anonymized, aggregated analytics may be kept longer for reporting.
9. Your rights
You can access, update, or delete your account at any time from the app, or request a data export or deletion by emailing support@promptolook.com. Depending on where you live, the following data protection laws grant you additional rights:
GDPR — European Union, EEA & United Kingdom
General Data Protection Regulation (EU 2016/679) and UK GDPR
We process your personal data on the legal bases of contract performance (providing the service you signed up for), consent (push notifications, marketing emails), and legitimate interest (security, product analytics). You have the right to access, rectify, erase, and receive a portable copy of your data, to restrict or object to its processing, and to withdraw consent at any time without affecting prior processing. You may lodge a complaint with your local supervisory authority.
LGPD — Brazil
Lei Geral de Proteção de Dados (Law No. 13,709/2018)
You have the right to confirmation that we process your data, access to it, correction of incomplete or outdated data, anonymization or deletion of unnecessary data, portability to another provider, information about who we share data with, and revocation of consent. Requests are handled by the data controller identified above. You may also file a complaint with the ANPD (Autoridade Nacional de Proteção de Dados).
CCPA/CPRA — California, United States
California Consumer Privacy Act, as amended by the CPRA
California residents have the right to know what personal information we collect and how it is used, to request its deletion or correction, to opt out of its sale or sharing (we do not sell personal information), to limit use of sensitive personal information, and not to be discriminated against for exercising these rights.
10. Children's privacy
Promptolook is not intended for users under 18. We do not knowingly collect information from children; if you believe a child has provided us personal information, contact us and we will delete it.
11. Security
We use industry-standard measures including encryption in transit (TLS) and database row-level security. No method of transmission over the internet is 100% secure.
12. Changes to this policy
We may update this policy from time to time and will post the updated version here with a new "Last updated" date. Continued use of Promptolook after changes constitutes acceptance.
13. Contact
Keenvo Tech OÜ · support@promptolook.com · Support form