Privacy

This page describes technical data handling. It is not a certified GDPR compliance statement and does not replace a legal review.

HairSim processes clinic account data and, when the widget is used, visitor contact details, qualification answers, and photographs submitted to generate an illustrative simulation.

Photographs are stored in private object storage with opaque keys. Access uses short-lived signed URLs after authorization. Platform administrators do not receive patient photographs or full clinical payloads through the admin console.

Marketing consent is stored separately from processing consent. The public contact surfaces ask you not to send medical information by generic email.

Retention, hosting perimeter, and subprocessors must be confirmed for production. Do not place real patient data in development environments.