Privacy Notice

1. Who we are

Solvici Sunless operates Solvici Shade Lab. Solvici Sunless is the data controller for the personal data described in this notice — we decide why and how it is processed.

2. Data we collect and why

• Account data — email address, login credentials, and display name. Used to create and secure your account and provide the Service. Legal basis: performance of a contract.
• Skin photographs and analysis results — images you upload and the DHA, undertone, and rinse-time results derived from them. Used to run the analysis and show your history. Legal basis: performance of a contract; where images reveal health-related characteristics we rely on your explicit consent, given by choosing to upload.
• Pro listing data — business name, studio, city, state, specialties, and booking link. Published publicly on Find a Pro at your choice. Legal basis: performance of a contract and your consent to publish.
• Subscription status — plan, tier, status, and renewal dates received from Paddle. Used to unlock paid features. Legal basis: performance of a contract.
• Usage, device, and log data — scan counts, app interactions, device identifiers, IP address, and error logs. Used for security, fraud prevention, abuse limits, troubleshooting, and product improvement. Legal basis: legitimate interests.
• Support messages — what you send us. Used to answer you. Legal basis: legitimate interests.
• Marketing — if you opt in, your email for product updates. Legal basis: consent; withdraw any time.

Payment card details are collected and processed by Paddle, not by us. We never see your full card number.

3. Who we share data with

• Service providers and subprocessors — hosting, database and authentication providers, and the AI model provider that performs image analysis.
• Paddle.com, our Merchant of Record, for the sale of subscriptions, subscription management, payments, tax compliance, invoicing, and refunds.
• Professional advisers such as legal and accounting.
• Authorities, where required by law or to protect rights and safety.

We do not sell personal data.

4. International transfers

We are based in the United States and our providers may process data in the US and elsewhere. Where data is transferred out of the UK or EEA, we rely on appropriate safeguards such as Standard Contractual Clauses or an adequacy decision.

5. Retention

Account, scan history, and listing data are kept while your account is active and for up to 12 months after deletion or closure, unless a longer period is required for legal, tax, or dispute reasons. Log data is kept for up to 12 months. Data is deleted or anonymised when it is no longer needed. You can delete individual scans or ask us to delete your account at any time.

6. Your rights

Depending on where you live, you may have rights to access, correct, delete, restrict, or port your data, to object to processing, and to withdraw consent. UK and EEA residents may complain to their supervisory authority; we respond to requests within one month. US residents, including under Illinois and California law, may request access to or deletion of personal data and opt out of any sharing for targeted advertising. To exercise a right, contact us through solvicisunless.com.

7. Security

We use appropriate technical and organisational measures, including encryption in transit, access controls, and row-level database policies so users can only reach their own records. No system is perfectly secure, but we work to protect your data and to notify you where required if something goes wrong.

8. Cookies and similar technologies

We use essential cookies and local storage to keep you signed in and to run checkout. We do not use advertising cookies. Any analytics we use is limited to aggregate product usage. You can clear or block cookies in your browser settings, though sign-in will stop working without essential cookies.

9. Children

The Service is not intended for children under 16, and we do not knowingly collect their data.

10. Changes and contact

We will update this notice as the Service changes and revise the date above. Contact Solvici Sunless through solvicisunless.com with any privacy question.