Privacy Policy

Roxana Vera Boutique LLC is responsible for the personal information described here. Contact details are on the Legal Information page and at the end of this one.

• To provide the service: producing a read from your photograph and showing it back to you.
• To operate an account, take payment, and meet tax and accounting obligations.
• To keep the service secure and available, and to investigate abuse.
• To answer you when you write to us.

For anyone in the EEA or the UK, the legal bases are performance of a contract for the first two, legitimate interests for security and correspondence, and legal obligation for records we are required to keep.

Photographs you upload are used to produce your own read and for nothing
else. They are not used to train, fine-tune, evaluate or improve any model,
ours or anyone else's, and they are not sold, licensed or shared for that
purpose.

There is no setting for this because there is no alternative behaviour to switch between. If that ever changed, it would require your explicit, separate, opt-in consent, and using the service without giving it would remain possible.

• Photographs and reads: until you delete them, or until 90 days after your account is closed, whichever is first. Deleting one in your account removes the file and the read together.
• Account records: for as long as you have an account, then 90 days.
• Billing records: seven years, because tax law requires it.
• Security logs: 30 days.

Deleting your account deletes your photographs and reads. Billing records survive it because we are required to keep them, and they contain no photographs.

Nobody is sold anything. The operator does not sell personal information and does not share it for cross-context behavioural advertising, as those terms are defined in California law. It has not done so in the preceding twelve months.

Personal information is disclosed only to service providers who process it on the operator's written instructions and for no purpose of their own: hosting and storage, the payment services provider, and email delivery. Each is bound to the same restrictions.

Information may also be disclosed where the law requires it, or to establish or defend a legal claim.

This site recognises the Global Privacy Control signal. If your browser or extension sends it, we treat it as a valid opt-out of any sale or sharing of personal information for that browser, and we do not require you to do anything else.

That opt-out is applied to the browser sending the signal. Because nothing is sold or shared for advertising here in any case, the practical effect is confirmation rather than change — but the signal is read, honoured and recorded rather than ignored.

You can also make the request explicitly on the Do Not Sell or Share My Personal Information page.

The service is not directed to children under 13 and no account may be created for one. We do not knowingly collect personal information from anyone under 13, and if we learn that we have, we delete it and close the account.

A parent or guardian who believes a child under 13 has given us information should write to support@roxantique.shop and we will delete it.

Data is encrypted in transit and at rest. Access is limited to the people who need it to operate the service and is logged.

The service is operated from the United States and information may be processed there. Where information is transferred out of the EEA or the UK, it is transferred under the appropriate safeguards, including the standard contractual clauses.

If a breach affects your personal information we notify you and the relevant authorities as the law requires.

If this policy changes materially we email account holders before the change takes effect. The date at the top always reflects the current version.