Privacy Policy

This Privacy Policy explains how ES Impact Ventures LLC, doing business as ColorMatch Assist ("we", "us", "our"), collects, uses, and protects information when you use our website and app (the "Service"). We are based in the State of Texas, United States.

What we collect

• Account data: your email address, authentication identifiers, and (if you sign in with Google) your name and profile image.
• Photos and verdicts: photos you capture or upload, and the AI-generated verdicts we produce from them. Photos are only persisted to your gallery when you choose to save them.
• Subscription and billing data: handled by Stripe. We do not see or store your full card details; we receive a customer ID, subscription status, and billing metadata.
• Support communications: the contents of any support ticket you submit through /support.
• Operational logs: IP address, device/browser metadata, and request logs kept short-term for security, debugging, and abuse prevention.

How we use your information

• To provide, maintain, and improve the Service (authenticate you, generate verdicts, keep your gallery, take payment).
• To respond to your support requests.
• To detect, prevent, and address fraud, abuse, and security incidents.
• To comply with legal obligations.

We do not sell your personal information, and we do not use your photos to train third-party AI models.

Legal bases (where applicable)

Where a legal-basis framework applies to you (for example, GDPR/UK-GDPR), we rely on: performance of a contract (to deliver the Service), our legitimate interests (security, service improvement), your consent (where required), and compliance with legal obligations.

Service providers and subprocessors

We use the following providers to run the Service. Each processes personal data only on our behalf and under contract:

• Lovable Cloud — application hosting, database, authentication, and file storage.
• Stripe — subscription billing and payment processing.
• Google — Sign-in with Google (OAuth) for accounts that use it.
• Lovable AI Gateway / Google Gemini — generating color-match verdicts from your photos.

We do not currently use analytics, advertising, or tracking tools. If that changes, we will update this policy and the Cookie Policy.

How long we keep it

Saved photos and gallery entries remain until you delete them or delete your account. Account records are retained while your account is active and for a short period afterwards for tax, accounting, and legal purposes. Operational logs are retained for a limited period and then rotated.

Your rights

Depending on where you live, you may have the right to access, correct, export, restrict, or delete your personal data, and to object to certain processing. You can delete individual saved photos in the app, or delete your entire account and its data from the Account page. To exercise any other right, contact us through /support.

US state privacy rights

Texas residents have rights under the Texas Data Privacy and Security Act (TDPSA), including the right to confirm, access, correct, delete, and obtain a copy of their personal data, and to opt out of targeted advertising, sale of personal data, and certain profiling. We do not sell personal data and do not use it for targeted advertising.

California residents have rights under the CCPA/CPRA including the right to know, delete, correct, and to opt out of "sale" or "sharing" of personal information. We do not sell or share personal information as those terms are defined by California law.

To submit a request, contact us through /support. We will not discriminate against you for exercising your rights.

International users

The Service is operated from the United States. If you access it from another country, your information will be processed in the United States, which may have different data-protection laws than your country.

Security

We use industry-standard technical and organizational measures — including encryption in transit, access controls, and row-level security in our database — to protect your information. No online service is perfectly secure; use a strong, unique password and enable two-factor authentication where available.

Children

The Service is not directed at children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us with personal information, contact us through /support.

Business customers

If you use the Service on behalf of an organization and process personal data of end users through it, please review our Data Processing Addendum.

Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date above reflects the most recent version. Material changes will be communicated in-app or by email.

Contact

Questions or requests about this policy? Contact us through our Support page. Legal entity: ES Impact Ventures LLC, State of Texas, United States.