Privacy Policy

Waitlist

The email address you enter on the waitlist form.

Color quiz

When you complete the color quiz, we collect and store your first name, email address, your answers about hair, undertone, eyes, and city, and the palette those answers produce. We use your city to look up approximate coordinates and a climate summary. Completing the quiz emails you that palette. It does not enroll you in a waitlist or marketing sequence.

Personal Color Profile

When you upload a photo to the Personal Color Profile tool, we collect the image itself, its file name, size, format, and dimensions, and the description of your coloring produced from it: skin undertone and value, hair color and temperature, eye color and value, and overall contrast — together with the color palette generated from that description.

Automatically

Our hosting provider records standard request logs — IP address, browser user agent, and the pages requested. We use cookieless page analytics that do not identify individual visitors. If you sign in to a password-protected area of the site, we set a sign-in cookie. We do not use advertising or tracking cookies.

A photo of your face, and the attributes we derive from it, may count as biometric information or sensitive personal information under laws including the Illinois Biometric Information Privacy Act, the Texas Capture or Use of Biometric Identifier Act, the EU and UK GDPR, and the California Consumer Privacy Act. We treat it that way regardless of where you live.

What we do with your photo. We run automated quality checks on it (is there exactly one face, is it sharp enough, is the lighting usable, are the eyes covered), then send it to OpenAI for analysis, store it in private file storage, and store the resulting description and palette in our database. The photo is never given a public URL; it is served only through an access-controlled route.

What we do not do. We do not use facial recognition. We do not create a faceprint or template to identify you, do not match your photo against other photos or any database, do not use your photo to train our own models, and do not sell it, share it for advertising, or disclose it to anyone other than the processors listed below.

Consent. We ask you to confirm your consent on the upload screen before any photo leaves your device, and the upload does not proceed without it. You can withdraw consent at any time by deleting the profile or emailing us — see “Your choices and rights”.

Who can see it. The Personal Color Profile tool currently sits behind a shared operator password, and profiles created with it — including their photos — are visible to everyone who holds that password. Please upload only your own photo, and only one you are comfortable with the people operating Tailor seeing.

To produce your color profile, we send your photo and a fixed instruction prompt to OpenAI’s API, which returns a structured description of your coloring. We do not send your name, email address, phone number, birth year, or city to OpenAI.

OpenAI processes it as our service provider, under its own API terms. OpenAI states that data submitted through its API is not used to train its models and is retained for a limited period for abuse monitoring before deletion. That is OpenAI’s policy rather than ours, and it can change — the current version is published at openai.com/policies/api-data-usage-policies.

If you would rather your photo were never sent to OpenAI, do not upload one. Nothing else on this site sends your information to OpenAI.

We use what you give us to produce and send you the thing you asked for — your colorway or your color profile — to email you launch updates, early access invitations, and occasional news about Tailor, to answer you when you contact us, and to operate, secure, and debug the site.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising.

We use a small number of service providers. They act on our instructions and receive only what their job requires:

• OpenAI — analyzes your face photo. Receives the photo. See above.
• Mapbox — city suggestions and geocoding. Receives the city text you type.
• Open-Meteo — long-term climate summary. Receives the approximate coordinates of that city.
• Resend — waitlist storage and email delivery. Receives your email address, first name, and colorway.
• Vercel — hosting, private file storage for photos, and cookieless analytics. Receives request logs and anything we store as a file.
• Neon — the managed PostgreSQL database where everything described above is stored.

We may also disclose information if the law requires it, or to protect our rights or someone’s safety. These providers are based in the United States, so if you are in the EEA or the UK, your information is transferred there under the transfer terms in their agreements with us.

• Waitlist email — until you unsubscribe or ask us to delete it.
• Color quiz profile — name, email, answers (including city), coordinates, climate summary, and palette: kept for up to 24 months from your last interaction with us, and deleted sooner if you ask.
• Face photos — kept for no more than 12 months from upload, and deleted sooner if you ask. Deleting a profile removes both the stored image and the attributes derived from it.
• Request logs — kept by our hosting provider for a short period, typically about 30 days.
• Analytics — aggregate counts only, with no identifiers tied to you.

We act on deletion requests within 30 days. We may keep a minimal record that you asked to be deleted or unsubscribed, so that we can honor it.

Everything travels over HTTPS. Face photos are held in private storage under non-guessable keys, are never publicly addressable, and are served only through access-controlled routes. Internal tools are password protected, and access to the database is limited to the people running Tailor. No system is perfectly secure, but we do not keep more than we need, and photos are the first thing we delete.

You can ask us for a copy of what we hold about you, ask us to correct it, or ask us to delete it — including your face photo and everything derived from it. Email hello@yourtailor.co from the address you used, and we will respond within 30 days. You can unsubscribe from our emails at any time using the link in any message we send. Giving us your phone number is optional, and we will remove it on request while keeping the rest of your profile.

If you are in the EEA or the UK: we rely on your consent for face photos and for marketing email, and on our legitimate interest in running and improving Tailor for the rest. You can withdraw consent at any time without affecting processing already carried out, and you have rights of access, rectification, erasure, restriction, objection, and portability, plus the right to complain to your supervisory authority.

If you are in California: you have the right to know, delete, and correct your personal information, and to limit our use of sensitive personal information. We use sensitive information — your photo and what we derive from it — only to provide the color profile you asked for. We will not discriminate against you for exercising any of these rights.

Tailor is not intended for anyone under 16, and we do not knowingly collect information from children. Please do not upload a photo of a child. If you believe a child has given us information, contact us and we will delete it.

If we change this policy, we will update the date at the top. If we ever want to use face photos for something not described here, we will ask for your consent again before doing it.