Privacy.

Powdrr AI is used by permanent makeup artists all over the world. This policy explains what we collect, why we collect it, who helps us, where your information goes, and the choices and rights you have wherever you live. If your local law gives you more protection than this policy describes, you get that protection too.

Who we are

Powdrr AI is run by Digital Scaling Solutions Limited, a company registered in England and Wales (company number 14336892) whose registered office is at 42 Goulds Close, Bletchley, Milton Keynes, MK1 1EQ, United Kingdom ("Powdrr", "we", "us"). We are the controller of the personal data described in this policy, except where we say otherwise. You can reach us about anything in it at support@powdrr.com.

What we collect

Your account. Your email address, whether you agreed to hear from us, and a record of the credits you buy and spend. Stripe takes your payment and we never see your card number.

Your business. The details you give us, such as your studio name, town, treatments, prices, policies, social media handles and website, the facts saved to your business brain, and your weekly check in numbers.

What you upload. Photos, screenshots, videos and logos. Location and camera information is removed from photos when you upload them.

What you write and make. Your conversations with Powdrr and everything it makes for you, including analyses, captions, carousels, reels, adverts and plans.

Public information you point us to. If you give us your website or a social media handle, Powdrr may read those public pages to understand your business.

Technical information. Your IP address, browser and device type, the pages and tools you use, and error reports. We need these to run the service, keep it secure and fix problems.

How we use it

We use your information to provide Powdrr AI: analysing your profile, writing in your voice, answering your questions, making your content and remembering your business. We also use it to keep accounts and the service secure, to prevent fraud and misuse, to support you when you ask for help, to check that Powdrr's answers are safe and accurate, to improve the service, to take payments and keep the records the law requires, and, if you said yes, to send you tips and offers.

If you are in the UK or the European Economic Area, our lawful bases are: performing our contract with you, to provide the service and take payments; our legitimate interests in running a secure, reliable service that keeps improving, for security, support, quality and safety checks and improvement; our legal obligations, for tax and accounting records; and your consent, for marketing emails, which you can withdraw at any time using the link in any email or by asking us.

Who can see your conversations and content

Your studio is private to you. A small number of authorised Powdrr staff, who are bound to keep it confidential, can see an account's conversations, photos and content when that is needed to answer a support request you make, to look into a fault, a payment problem, a security issue or a report of misuse, to check that Powdrr's answers are safe and accurate, and to improve the service. Every time staff open an account's conversations, that access is recorded.

To decide what to build next, we also look at how Powdrr is used across all artists, for example which tools are used most, the kinds of questions artists ask and where people get stuck. We do this with counts and summaries rather than by reading individual accounts wherever we can.

We do not use your conversations or content to train AI models, and the commercial terms of Anthropic, the company whose AI powers Powdrr, do not allow it to train its models on the content we send it. We never sell your information and never use it for advertising.

AI and automated decisions

Powdrr's analyses, scores, suggestions and content are produced automatically by AI. They are advice about your marketing and business. They do not have legal or similarly significant effects on you, and you decide what to use. AI can be wrong, so please check anything important before you rely on it.

Your clients' information

If you upload photos of your clients, you are responsible for having their permission to use them in your marketing. For those photos you are the controller and we process them on your behalf, only to provide Powdrr AI to you. They are private to your studio and you can delete them at any time. Please do not add clients' names, health information or payment details to your studio. When you ask Powdrr about a client's situation, describe it without their name or anything else that identifies them.

Your website and its enquiries

If you make a website with Powdrr AI, the details visitors send through its enquiry form (their name, contact details, the treatment they ask about and their message) belong to your business. You are the controller for them, and we store them and send them to you on your behalf, only to provide your website. We do not use them for anything else, and your website has no tracking cookies. Every website includes a privacy notice in your business name telling visitors this. Enquiries are kept while your account is open, and deleted when you delete them or your account. We also keep a record of the network a studio was saved from, as a code we cannot turn back into an address, so we can stop people making accounts to collect free credits.

Who helps us

We use trusted providers to run Powdrr AI. They may only use your information to provide their service to us, under contracts that protect it.

• Render hosts the service and stores your studio, on servers in Frankfurt, Germany.
• Anthropic provides the AI that reads your requests and writes Powdrr's answers and content, in the United States.
• ElevenLabs records voiceovers when you choose a voice for a reel, in the United States.
• Stripe takes payments, in the United States and Ireland. Stripe also uses some payment information as an independent controller, for example to prevent fraud, under its own privacy policy.
• Resend sends your login codes, enquiry alerts and service emails, in the United States.
• Our customer relationship management provider sends account and marketing emails, in the United States.

We will also share information if the law requires it, to protect people's rights and safety, or if our business is sold or merged, in which case the new owner must keep to this policy.

International transfers

Your studio is stored in Germany, and some of our providers process information in the United States and other countries. When personal data leaves the UK or the European Economic Area, we rely on recognised safeguards: adequacy regulations or decisions, including the UK and US data bridge and the EU and US Data Privacy Framework where a provider is certified, or standard contractual clauses with the UK addendum, together with our providers' security measures. Ask us if you would like more detail.

How long we keep it

• Your studio, including business details, photos, conversations and content: until you delete it or close your account. You can delete individual photos and chats whenever you like.
• If you start setting up but never save your studio with an email: deleted after seven days.
• Records of purchases: six years, because UK tax and company law requires it.
• Server logs: up to 30 days.
• Backups: deleted information can remain in our encrypted daily backups for up to 30 days before it is overwritten.

Keeping it safe

Everything you send us travels over an encrypted connection and is stored on encrypted disks. Login links and sessions are protected, payments are handled by Stripe, and staff access is limited and recorded. No service can promise perfect security, but if a breach puts your information at risk we will tell you and the regulators as the law requires.

Your rights

Wherever you live, you can ask us for a copy of your information, ask us to correct it or delete it, ask us to restrict or stop using it, ask for it in a portable format, withdraw your consent for marketing, and object to us using it for our legitimate interests. You can delete your account and everything in it from your account page at any time.

To use any of these rights, email support@powdrr.com from the address you log in with. We may need to confirm it is you before we act. It is free, and we will answer within one month, or sooner if your local law requires it.

Concerns and complaints

If you are unhappy with how we have handled your information, please tell us first by emailing support@powdrr.com with "Privacy complaint" in the subject. We will acknowledge your complaint within 30 days, look into it properly, keep you updated and tell you the outcome.

You can also complain to a data protection regulator. In the UK that is the Information Commissioner's Office at ico.org.uk. In the European Economic Area it is the data protection authority where you live or work, and in Switzerland it is the Federal Data Protection and Information Commissioner. Elsewhere, you can contact your local privacy regulator.

If you live in the United States

In the last twelve months we have collected these categories of personal information: identifiers, such as your email and IP address; commercial information, such as the credits you buy; internet activity, such as how you use Powdrr; audio and visual information, such as the photos and videos you upload; professional information about your business; and inferences, such as Powdrr's analysis of your business profile. We collect them from you, from your device and from public pages you point us to, for the purposes described in this policy, and we disclose them only to the service providers listed above for those purposes. We do not intend to collect sensitive personal information, so please do not upload it.

We do not sell personal information, we do not share it for cross-context behavioural advertising, we do not use it for targeted advertising, and we do not profile you in ways that produce legal or similarly significant effects. Because of this there is nothing to opt out of, but we treat Global Privacy Control signals as a request to opt out in any case.

Depending on the state you live in, including California, Colorado, Connecticut, Oregon, Texas, Utah, Virginia and others, you may have the right to know what we hold, to get a copy, to correct it and to delete it. We give these rights to everyone in the United States. You can ask through an authorised agent with your written permission, and we will not treat you differently for using your rights. If we decline a request, you can appeal by replying to our decision with the word "Appeal". We will answer your appeal within the time your state's law allows and, if we still decline, tell you how to contact your state Attorney General.

Everywhere else

Wherever you are, including Canada, Australia, New Zealand, Brazil and South Africa, you can use every right in this policy, along with any extra rights your local law gives you. Please note that your information is stored in Germany and processed in the United Kingdom and the United States, as described above.

Age

Powdrr AI is for working artists aged 18 and over. It is not meant for children and we do not knowingly collect their information. If you think a child has given us information, tell us and we will delete it.

Cookies

We use one essential cookie to keep you logged in to your studio. We do not use advertising, analytics or tracking cookies.

Changes to this policy

If we change this policy we will update the date at the top, and if a change matters to you we will tell you by email or in your studio before it takes effect.