Privacy Policy

Who we are

MedGlow ("we", "us") provides AI-powered treatment preview software for medical-aesthetics clinics. This policy covers our website (medglow.io), the MedGlow application, and the preview widget that clinics embed on their own websites. For questions, contact hello@medglow.io.

Photos and AI previews

• Photos you submit are used for one purpose: generating the treatment preview you asked for. We do not use your photos to train AI models, and we do not sell or share them.
• Photos and generated previews are encrypted in transit, stored under unguessable URLs, and automatically deleted after a retention window (at most 90 days, sooner where the clinic configures it), unless you or your clinic ask us to keep a preview (for example, by saving it to a consultation record).
• We do not create or store biometric templates, face-geometry profiles, or any identifier derived from your face. Processing is a one-shot image edit, not identification.
• Every AI preview is an illustrative simulation, not a promise of results. Actual treatment outcomes vary and can only be assessed by a qualified provider.
• The widget asks for your explicit consent before a photo is processed. If you are under 18, do not use the preview tool.

What we collect

• Widget users (patients): the photo you submit, the treatment you select, and — only if you choose to share them — your name, email, and phone number, which are delivered to the clinic whose website you used.
• Clinic accounts: account details (name, email), clinic profile, billing status, and product usage needed to run the service.
• Website visitors: privacy-respecting, cookie-light analytics (page views, referrers). We do not run advertising trackers.

Who processes data for us

We use a small set of infrastructure providers to run MedGlow: authentication (Clerk), payments (Stripe — we never see full card numbers), AI image processing (Google, Replicate), transactional email (Resend), and European-owned server hosting (Hetzner). Each receives only what it needs to perform its function.

Your rights

You can ask us to delete your photos and personal data at any time — email hello@medglow.io or ask the clinic you shared them with. If you contacted a clinic through the widget, that clinic controls your lead record; we act as its processor. Depending on where you live (including the EU/EEA, UK, California, and other US states with privacy laws), you may also have rights to access, correct, or port your data, and to complain to a supervisory authority.

Changes

We will post any changes to this policy on this page and update the date above. Material changes affecting how photos are handled will be highlighted in the product.