Privacy Policy

Nine Mirrors is built around the most personal data a salon handles: photographs of clients' faces. This policy explains what Rapid Technologies LLC ("we") collects, why, and what happens to it. The one-line summary: client photos exist to render a consultation, are never public, are never used to train AI models, and are automatically deleted.

Who this covers

• Salons — our customers, who hold the account and upload photographs.
• Salon clients — the people photographed. Clients have no account; their salon decides what is uploaded. If you are a client, your salon is the first place to direct requests, and we will act on its instructions — or yours, where the law gives you direct rights.
• Visitors to our marketing site.

What we collect

• Account and billing data — salon name, contact email, payment records (card details are held by our payment processor, not us).
• Consultation data — the photographs a salon uploads (front and optional side view), the brief the stylist enters (face shape, hair texture, preferences, free-text notes), generated previews, shortlists, and the client's pick from the share link.
• Usage and log data — standard server logs and product usage needed to operate, meter, and secure the Service.

We do not run third-party advertising or analytics trackers, and we never sell data.

Client photographs, specifically

• Metadata is stripped on upload — including the GPS location tags most phones embed. We never store where a photo was taken.
• Storage is private. Photos and previews are held in private storage and served only through authenticated routes or unguessable tokenized links. There are no public URLs to a client's face.
• Share links are tokenized and can be revoked by the salon at any time by deleting the consultation.
• Automatic deletion. Consultations, photographs, and previews are deleted after the salon's retention window (30 days by default). Salons can delete any consultation immediately, which deletes its photographs and previews with it.
• No model training. Photographs and previews are processed by our AI rendering partners solely to generate the requested previews, under terms that do not permit using them to train models.

How we use data

• To provide the Service — rendering previews is the entire purpose of an upload.
• To bill, meter usage, and prevent abuse.
• To support you when you contact us.
• To meet legal obligations.

That list is exhaustive. No profiling, no advertising, no sale of personal data.

Who we share with

Only service providers necessary to run the product, each bound by contract:

• cloud hosting and storage infrastructure;
• AI image-rendering partners (photos are sent to them transiently, solely to render the previews a salon requested);
• our payment processor, for billing;
• authorities, if and only if the law compels it.

Security

Transport encryption everywhere, private storage with authenticated access, tokenized client links, salon-scoped credentials, and content-addressed storage keys that cannot be guessed or enumerated. No system is perfectly secure, but photographs are treated as the most sensitive thing we hold.

Your rights

Depending on where you live (including under the Virginia Consumer Data Protection Act and similar state laws), you may have rights to access, correct, delete, or receive a copy of your personal data. Salons can exercise these directly from the product or by emailing us; clients can go through their salon or contact us directly at support@ninemirrors.app. We respond within 30 days and do not discriminate for exercising rights.

Children

The Service is for professional use and not directed at children. Salons must not upload photographs of minors without a parent or guardian's consent.

Changes

We will notify salons of material changes by email or in the product at least 14 days before they take effect. See also our Terms & Conditions and Refund Policy.

Contact

Rapid Technologies LLC, 11166 Fairfax Blvd, Fairfax, VA 22031 · support@ninemirrors.app · 703.336.5350