Privacy Policy

1. Overview

Khrome ("we," "us," or "our") provides an online personal color analysis experience. We operate from Ontario, Canada. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use our website, applications, and related services (collectively, the "Service"). By using the Service, you agree to this Privacy Policy.

2. Information we collect

• Account and authentication. If you sign in (for example with Google), we receive identifiers and profile details that the provider shares with us, such as your name, email address, and profile image, along with tokens needed to keep you signed in.
• Photos and analysis inputs. When you upload a selfie or other images, we process those files to run color analysis, generate previews, and deliver your results.
• Usage and device data. We collect technical information such as browser type, device type, approximate location derived from IP address, pages viewed, and timestamps. We may use analytics tools to understand product usage in aggregate.
• Payment information. Purchases are processed by our payment processor (Stripe). We do not store full payment card numbers on our servers; Stripe handles card data according to its own privacy notice.
• Communications. If you contact us, we keep the content of your message and related metadata so we can respond.

3. How we use information

We use information to:

• Provide, maintain, and improve the Service, including analysis and result delivery;
• Authenticate users, prevent fraud, and protect security;
• Process payments and fulfill purchases;
• Understand how the Service is used and develop new features;
• Comply with law, enforce our terms, and defend legal claims;
• Communicate with you about the Service, including support and transactional messages.

4. How we share information

We do not sell your personal information. We do not rent it, and we do not share it with third parties for their own independent marketing. We disclose information only as needed to run the Service, as you direct, or as required by law.

We use service providers (such as hosting, storage, authentication, analytics, and payment processing) that handle personal information on our behalf. We may also disclose information if required by law, to protect safety and rights, or as part of a business transaction such as a merger or asset sale.

Personal information may be stored or processed in Canada or in other countries where those providers operate.

5. Retention

We keep information for as long as needed to provide the Service and for legitimate business and legal purposes. You may ask us about access, correction, or deletion by contacting us as described in Section 9.

6. Security

We use reasonable safeguards to protect personal information. No online service is completely secure.

7. Your choices

You may request access to or correction of your personal information, or ask questions about our practices, by contacting us as described in Section 9. Where Canadian privacy law applies, you may have additional rights; if we cannot resolve a concern, you may contact the Office of the Privacy Commissioner of Canada (priv.gc.ca).

8. Children

The Service is not intended for children under 13. If you believe we have collected a child's information, contact us and we will delete it where required.

9. Contact

For privacy questions, use the contact or support options available in the Service.

10. Changes

We may update this Privacy Policy from time to time. We will post the new version on this page and change the "Last updated" date.