Your photo. Your choice.

Meet My Look creates AI treatment illustrations for an artist or clinic. The clinic’s request page identifies its business, privacy contact and privacy notice when client access is enabled. Contact that clinic about your request or deletion. Meet My Look is operated by SFG Consulting Limited. sean@salonsgoonline.com

Your details, then your selfie

On a two-step offer, Continue saves your first name, email, any requested mobile number, the contact notice version and time, and advertising source tags. This happens before a photo is uploaded. A clinic with an enabled early-contact connection receives those details once, even if you leave before adding a selfie. Unfinished requests do not create an AI image or use a preview credit. If you add a selfie, it is attached to that same request.

What happens to your photo?

Selecting a photo prepares a smaller copy in your browser and removes embedded metadata, including location tags. It is uploaded only when you submit. You must be 18 or older and use your own photo, or have the adult’s specific permission when an artist makes a preview.

We store the original, your selected look, first name, email, phone when supplied or required by the offer, consent versions and times, and the clinic’s treatment text. Campaign submissions may also store advertising source tags from the link. The prepared photo and the artist’s selected permitted reference are sent to OpenAI to create the illustration. Contact details are not included in the image-generation prompt.

Your report and clinic follow-up

The report combines an AI image with the clinic’s supplied treatment and consultation information. In an automatic campaign it can be released without an artist reviewing each image. A review campaign waits for the artist’s approval. An illustration cannot assess suitability or guarantee a result.

When connected, the clinic’s booking and messaging system receives your name, email, supplied phone, report link, treatment breakdown, consent record and campaign source. It uses these to fulfil your requested preview and consultation enquiry. Some offers require a mobile number. Their first-step notice explains that continuing requests preview and consultation contact by text and email, including if no selfie follows. Email-only offers do not require a mobile. Where an optional text-delivery choice is shown, texts require that choice. Contact permission is recorded separately from the age and photo-permission checkbox at the photo step. You can opt out of contact at any time. This form does not subscribe you to unrelated marketing.

A successful CRM handoff does not prove that a message was delivered. Booking-link clicks are counted separately from bookings reported by the clinic. Do not include health information or other sensitive details in this form.

For built-in email delivery, Resend processes the recipient email address, message and private result link. Account confirmation and password-reset messages also use this service. Pending messages are encrypted in a short-lived queue. We retain delivery status and a protected address fingerprint to stop repeated sends to bounced or complaining addresses. You can request a review through support.

Who can open the result?

Result links contain a random access secret and do not verify the recipient’s identity. Anyone with a valid publicly enabled link can view the approved report and its photos until expiry. Keep the link private. Unapproved images are not served through a result link. Business administration is restricted to signed-in account owners. Each account can access only its own business records.

How long is information kept?

Photo and client-data retention is normally 30 days or the shorter clinic period. Unfinished contact-only requests expire within 30 days of Continue and are removed by the same batched maintenance service. Access stops at that expiry, or sooner if a link is revoked. Result links last no more than 30 days. The maintenance service removes expired originals, AI images, contact details and request records in batches; if maintenance is unavailable, deletion can be delayed while access stays blocked. The clinic can delete a preview sooner. Existing private-pilot records created before expiry controls were introduced remain until the operator deletes them.

Credit transactions, provider usage, order and operational records are kept separately for accounting, reconciliation and service security. They do not contain the uploaded photographs or contact details. Deleting a preview does not restore a credit already used to create a successful image. Failed generation returns its reserved credit. Provider records and downloaded copies have their own retention.

Accounts and payments

We store your account ID, email, name, business name, account type and the version of terms you accept. Passwords are stored as salted hashes, never plain text. Essential, secure sign-in cookies keep you logged in. Session records include expiry, network address and browser details. New email logins are separate from existing accounts until ownership has been confirmed. Stripe processes card payments. We store payment references, the price, credit amount and payment status. Card numbers and security codes stay with Stripe. For free preview eligibility, we store the Stripe card-check reference, acceptance time and terms version, plus keyed hashes of your email, business details and Stripe’s card fingerprint. We use these records to limit repeat claims across accounts; they are separate from client photos and are retained while needed to enforce the one-time allowance. Contact us to request review or deletion; some security records may need to be retained to prevent repeated claims. Payment and security records are kept separately from photos. Contact sean@salonsgoonline.com for account and billing requests.

Portfolio examples

Artists must have permission to store and display their examples and separate permission to send them as AI references. Using a reference guides the illustration; it does not train a custom model on the artist’s technique or establish that the illustrated result is achievable. Removing a reference prevents further use of it but does not erase earlier outputs.

For clinics and agencies, the business data terms explain processing roles and instructions.

Service providers and security

Meet My Look uses hosted storage, OpenAI’s image API and, for connected campaigns, the clinic’s booking and messaging service. OpenAI states API data is not used for model training by default and may retain abuse-monitoring content for up to 30 days, subject to exceptions. We do not claim a special zero-retention arrangement. OpenAI data controls.

The service stores hashes of access secrets, encrypts saved delivery connection URLs and caps generation spending by credits and daily limits. Photo-submission rate controls use a salted network fingerprint. Sign-in rate controls use your network address. If verification is configured, Cloudflare Turnstile also checks the submission. No advertising analytics cookies are added by Meet My Look.

Your choices

Contact the clinic identified on the form to request access, correction or deletion. Operators can remove a preview from Clients and disable campaigns or result links. Downloads, messages already sent, clinic-system copies and provider logs cannot be recalled by deleting a Meet My Look preview.

Pilot status

This notice describes the software’s behavior. The operator and participating clinics must confirm their business details, responsibilities, processing agreements and applicable privacy arrangements before public intake. The app does not use photos for biometric identification.