Privacy Policy

1. Information Controller

Deanna Labs Inc., a Delaware corporation, with registered address at 8 The Green, Ste B, Dover, DE 19901, United States, is the controller responsible for the processing of your personal data.

We handle it in accordance with applicable United States federal and state privacy law. Where you are in the European Economic Area or the United Kingdom, we also handle it in accordance with the GDPR and UK GDPR, and the rights in section 13 apply to you under those laws. Our Terms are governed by Delaware law, but that choice does not remove protections your own country's law gives you.

2. Information We Collect

We collect information in the following ways:

• Account registration: name, email address, and password.
• Purchases and billing: payment information processed securely through our payment provider.
• Usage data: MiniStores created, clippings saved, and interactions with the platform.
• Session data: an authentication token kept in two places in your browser — a cookie, which is what our servers read to authenticate each request, and a copy in local storage, which the interface reads to know whether to show you as signed in. Signing out clears both.
• Photographs and images you upload: including photographs of yourself when you use Virtual Try-On, Place Me, Model Me or any other feature that puts you in a generated image. These are the most sensitive data we handle, so to be precise about what happens to them:
  • They are stored on our infrastructure (Amazon S3, served through Amazon CloudFront) and kept with your account until you or we delete them.
  • They are sent to the AI providers listed in section 5 for the sole purpose of producing the result you asked for.
  • We do not use your photographs to train AI models, and we do not sell them or disclose them to anyone other than those providers.
  • We do not use face recognition. Nothing we run identifies you from a photograph, matches you against other images, or creates a faceprint or other biometric identifier.
  • Only upload photographs you have the right to use. Do not upload images of other people without their permission.
• Generated images and videos: the results produced from your uploads, stored the same way so you can come back to them.
• Technical data: your IP address and basic request information, used to keep the service available, prevent abuse, and limit how often free features can be run.
• Telegram integration (optional): if you connect a Telegram bot, we store your bot token to operate the integration on your behalf.
• Chrome Extension (optional): if you install the Deanna Chrome Extension, it reads your authentication session from deanna.app and the URL of the page you are browsing, solely to save images to your MiniStore. No browsing history is collected or stored.
• WordPress integrations (optional): if you connect a WordPress site, we store your site URL and an installation token to operate the agent on your behalf.
• Contact details you choose to add: including a WhatsApp number, if you provide one.
• Notifications and settings: what we have sent you, what you have read, and your preferences such as your default MiniStore view.
• Administrative records: if you hold an admin role, we log the administrative actions you take.

3. Use of Information

Information we collect is used to:

• Provide, operate, and improve the Deanna platform
• Authenticate you and maintain your session securely
• Generate and display your MiniStores and clippings
• Process transactions and manage subscriptions
• Operate optional integrations (Telegram, Chrome Extension, WordPress) that you have enabled
• Send transactional emails (e.g. email verification)
• Comply with legal obligations

4. Cookies

Deanna sets a single authentication cookie to keep you logged in. It is strictly necessary and does not track you across other websites. We set no advertising or analytics cookies of our own; our analytics provider is cookieless. Embedded content from other companies — payment forms, video players — sets its own cookies. The Cookie Policy lists all of it.

5. Third-Party Services

We use the following third-party services which may process your data:

• Google (Gemini) — image and text generation. Photographs you upload for try-on, placement and similar features are processed here.
• OpenAI — text generation and image checks
• AIML API and Kling — image animation and video generation
• Amazon Web Services (S3 and CloudFront) — storage and delivery of your images and generated results
• Vercel — hosting, infrastructure and cookieless analytics
• Stripe — payment processing. Card details go to Stripe directly; we never see or store them.
• Keepa and Serper — product and search data. These receive your search terms and the image you ask us to match, not your account details.
• Hostinger (SMTP) — sending transactional email such as verification and password resets
• Telegram — optional bot integration, only if you connect one
• TikTok, Instagram, Facebook, Pinterest, WordPress — only if you connect an account to publish to it

These providers are located in the United States and elsewhere, so your data is processed internationally. Each acts under its own terms and processes your data to deliver the function you asked for.

We do not sell or share your personal data with third parties for marketing purposes.

6. Information About People Who Do Not Have an Account

MiniStores are public pages. Some information reaches us from people who never signed up:

• Enquiry forms: a MiniStore may include a contact form. If you submit one we collect your name, email address, telephone number and message, and pass them to the creator of that MiniStore so they can reply. The creator, not Deanna Labs, decides what to do with your enquiry and becomes responsible for it from that point. We also store it so the creator can see it in their dashboard.
• View statistics: we count how many times a MiniStore is viewed, storing only the MiniStore and a timestamp. We do not record who viewed it or any identifier, so these counts cannot be traced back to a person.
• Short links: links of the form deanna.app/s/… encode which MiniStore and creator they belong to, so a click can be attributed to the right MiniStore. They do not identify you.

If you submitted an enquiry and want it deleted, write to us and we will remove it and tell the creator. You do not need an account — see our data deletion instructions.

7. Followers and Email

• Your email address is made available to the creator you follow, so they can send you updates about their MiniStores. Following is how you consent to that.
• Creators may send email campaigns to their followers through Deanna. We send these on the creator's behalf, and every one identifies who it is from and includes a way to stop receiving them.
• You can unfollow at any time, which ends access to your address for future campaigns.
• Transactional email such as verification and notifications is not marketing and is not optional while you hold an account.

Creators must comply with the law when emailing their followers, including the CAN-SPAM Act in the United States. We may suspend an account that does not.

8. Public Profiles and MiniStores

Your username, display name, avatar and the MiniStores you publish are public. They appear at deanna.app/u/your-username, on MiniStore pages, and may be indexed by search engines or shown in Explore. Setting a MiniStore to private, or deleting it, removes it from public view, though search engines may keep a cached copy for a time.

9. Paid Access, Sales Teams and Sponsored Placements

• Paid access: a creator may charge for access to a MiniStore. If you buy, Stripe processes the payment and we record which MiniStore, when and for how much, so access can be granted and the creator paid. The creator sees that you purchased access; they do not receive your payment details.
• Sales teams and referrals: if you take part, we record who referred you, which team you belong to and the resulting activity. Your name and that activity are visible to the people running the team you joined.
• Sponsored placements: some surfaces display placements booked by advertisers. These are chosen by the placement, not by profiling you. We build no advertising profiles and share nothing with advertisers or ad networks.

10. Artificial Intelligence

When you use an AI feature, what you provide — a prompt, a product, an image — is sent to the relevant provider in section 5 to produce the result.

• AI output can be inaccurate, and product prices and availability may be wrong or out of date. Verify anything you rely on before publishing it.
• Generated images and videos are synthetic. They do not depict real events.
• Training. We do not use your content to train models of our own. We send it to the providers in section 5 through their business and API offerings, under terms that do not permit them to train on it, and we enable any no-training setting a provider offers. We cannot audit their systems, so this rests on their contractual commitments rather than on our inspection.
• Their retention. Providers keep a copy for a limited period to deliver the service and to run abuse checks — typically around 30 days — after which they delete it. That window is set by each provider and we cannot shorten it. See section 14 for what deletion means in practice.

11. Affiliate Links

MiniStores contain affiliate links, including Amazon Associates links. When someone buys through one, we or the MiniStore creator may earn a commission at no extra cost to the buyer. Clicking an affiliate link takes you to the merchant, whose own privacy policy then applies.

12. We Do Not Sell Your Information

We do not sell personal information, and we do not share it for cross-context behavioural advertising, as those terms are defined under California law. We have not done so in the preceding twelve months.

The disclosures we do make are the ones described above and nothing else: to the providers in section 5 who act on our instructions; to a creator whose MiniStore you submitted an enquiry through, or whom you chose to follow; and to a team you joined. See Your Privacy Choices.

13. Data Protection Rights

Under applicable privacy laws, you have the right to access, rectify, erase, restrict, and object to the processing of your personal data, as well as the right to data portability, to opt out of sale or sharing, and to limit the use of sensitive information. We will not discriminate against you for exercising them. These rights apply whether or not you have an account — including if we hold only an enquiry you submitted.

To exercise them, see Your Privacy Choices, or contact us using the details in section 16. We respond within 30 days, or 45 days where an extension is permitted.

14. Data Retention

Your personal data is retained only for as long as necessary to fulfill the purposes for which it was collected, to operate your account, and to comply with our legal obligations. You may request deletion of your account and associated data at any time — see our data deletion instructions.

Access tokens for connected accounts are deleted immediately when you disconnect. Enquiries submitted through a MiniStore are kept while the creator's account is active, or until either of you asks us to delete them. Anonymous view counts are kept indefinitely because they identify no one.

15. Children and Security

The Service is not directed to children under 13, and we do not knowingly collect their information. If you are between 13 and 18, you may use it only with the involvement of a parent or guardian. If you believe a child has given us information, contact us and we will delete it.

We protect information with encryption in transit, hashed passwords, access controls and signed session tokens. No system is perfectly secure, and we cannot guarantee absolute security, but we will notify you and the relevant authorities of a breach where the law requires it.

16. Contact

For any questions or requests regarding this privacy policy, please contact us at:
Deanna Labs Inc. (a Delaware corporation)
8 The Green, Ste B, Dover, DE 19901, United States
admin@deannalabs.com