Privacy Policy

1. Who we are

Fauve by FlexPresets (“FlexPresets”, “we”, “us”) is an AI color-grading service for photos and videos, operated by Zyras Global Pte. Ltd., a company incorporated in Singapore (UEN 202616444Z, registered address 160 Robinson Road, #14-04 Singapore Business Federation Center, Singapore 068914). You can reach us about privacy at contact@flexpresets.com.

This policy explains what personal data we collect, how we use it, who we share it with, and the rights you have. The English version is authoritative.

2. Information we collect

• Account data: your email address, and any name and profile photo you provide. Authentication is handled by Clerk; if you sign in with Google or Apple we receive your email and basic profile from that company.
• Media you upload: the photos and videos you choose to grade, plus any reference images. In the desktop and mobile apps these stay on your device and are not uploaded (only the content needed for AI grading is sent — see the AI processing section).
• AI requests: the text you type when you use AI grading. We keep this text to improve the service; it does not include your photos or videos.
• Project data: your saved looks, projects, studio sessions, and the grade settings and small thumbnails associated with them.
• Billing data: your plan and subscription status. Card and payment details are collected and processed by Stripe, or by Antom if you pay with AlipayHK — we do not store your full card number.
• Usage and technical data: job metrics (e.g. that a grade or export ran, its duration and status), device/browser information, IP address, and log data used for security and reliability. We also collect in-app usage events (such as opening the app or the camera, capturing, and exporting) to understand how the app is used; each event carries a random ID created when the app is first opened and, while you are signed in, your account ID. If an export or an AI grade fails, or the app crashes, the app can send an automatic problem report — versions, device, the error message and the last in-app actions, never your footage or a picture; you can turn automatic reports off in the account menu.
• Problem reports and support chat: what you write in a problem report or in the support chat on our website, a screenshot of the preview if you choose to attach one, and information about the app and your device.
• Cookies and similar technologies: cookies and browser storage that keep you signed in, remember your language and currency, and help us analyze how our website is used, including a session cookie from Clerk, a NEXT_LOCALE cookie for your language, and Microsoft Clarity’s analytics cookies (_clck, _clsk) on our website. See “Cookies and data sent to third parties” below for the full list.

3. Face detection (camera and skin tools)

The camera and the grading tools use on-device face detection (Apple's Vision and AVFoundation frameworks on iOS) solely to locate the rectangular position of faces in a frame. This powers camera autofocus and limits skin smoothing and skin-tone protection to face regions.

This is not facial recognition: we do not identify who appears in an image, and we do not create or store biometric templates or faceprints. Face positions are computed on your device, used only for the current frame or export, and immediately discarded. Face data is never stored, never uploaded to our servers, never shared with third parties, and never used for any other purpose.

4. Location

If you allow it, the camera writes where each photo or video was taken into that file on your phone. Photos and videos the mobile app sends to us have location removed first.

5. How we use your data

We do not sell your personal data, and we do not use your uploaded media to train AI models.

• To provide the service: store your media and projects, generate and apply grades, and export your results.
• To process payments, manage subscriptions, and prevent abuse of the service.
• To secure the service, debug, and improve reliability and performance.
• To communicate with you about your account, security, and service changes.
• To respond to your inquiries and problem reports.
• To send you emails about new features and promotions (you can unsubscribe at any time using the link in the email).
• To measure the effectiveness of our ads and optimize their delivery (see “Cookies and data sent to third parties”).

6. AI processing and third parties (subprocessors)

To provide AI color grading, we send the necessary media content to our AI provider, OpenAI, for processing. We send only the minimum needed to provide the feature, and per OpenAI’s data-usage policy, data sent through its API is not used to train its models.

We rely on the following processors, each under their own terms and security commitments (the country where each is located is shown in parentheses). For information sent from your browser or device to companies other than us, such as the information sent to Meta to measure our ads, see “Cookies and data sent to third parties”.

• OpenAI (United States) — AI color grading, AI suggestions, and triage of the problem reports you send us.
• Clerk (United States) — authentication and account management.
• Supabase (United States) — database and private media storage.
• Stripe (Singapore, United States) — payment processing and billing.
• Antom (Ant International, Singapore) — processing AlipayHK payments.
• Railway (United States) — application hosting.
• SendGrid (Twilio, United States) — sending email.
• Linear (United States) — managing the problem reports you send us.
• IPinfo (United States) — determining your country from your IP address, to choose the currency we show and charge.
• Jaaxis (DH Ecom LLC, United States) — the support chat on our website.
• Microsoft Clarity (Microsoft, United States) — website analytics: how visitors scroll and click on our website (heatmaps and visit recordings; text you type is masked).

7. Cookies and data sent to third parties

Our website and apps store information on your device, or send information from your device to companies other than us, as listed below.

You can delete or block cookies in your browser settings (signing in requires Clerk’s cookies). You can control how Meta uses information for ads in your Facebook or Instagram ad settings. On iPhone, turning off “Allow Apps to Request to Track” under Settings > Privacy & Security > Tracking stops the advertising ID from being sent. On Android, you can delete the advertising ID in your device settings.

• NEXT_LOCALE (cookie, ours): remembers your display language for one year.
• fauve_ccy (cookie, ours): remembers the display currency you choose, for one year.
• fauve_product (cookie, ours): remembers whether to show you the desktop or the mobile edition, until you close your browser.
• fauve_vid (browser storage, ours): a random visitor ID. It is sent to our servers to count visits to our website, sign-ups, and purchases, and to Microsoft Clarity for website analytics. While you are signed in, it is associated with your account.
• Campaign information (browser session storage, ours): if you arrive through a link in one of our ads or emails, the campaign identifiers (such as utm_source) and a token that verifies an offer are kept until you close your browser and are sent to our servers.
• Clerk (United States): to sign you in, our website and apps send your sign-in details, IP address, and device and browser information to Clerk, and use cookies (such as __session and __client_uat) to keep you signed in. If you sign in with Google or Apple, authentication information is also exchanged with that company.
• Supabase (United States; web version): to store and display the media you upload, your browser transfers it directly to and from Supabase’s storage using short-lived signed links.
• Meta Pixel (Meta Platforms, Inc., United States; website): to measure our ads and optimize their delivery, sends Meta the URL of the page you are viewing, what you do on the page (such as viewing it, clicking the App Store or Google Play button, or starting a checkout), cookie IDs (_fbp, _fbc), your IP address, and browser information. Our servers also send the same page-view and on-page action information to Meta’s Conversions API and, when you buy on our website, the purchase amount together with your hashed email address and hashed account ID. For this, when you start a checkout we record _fbp, _fbc, your IP address, and browser information in the checkout session at Stripe.
• Meta SDK (Meta Platforms, Inc., United States; mobile apps): to measure our ads, sends Meta app installs and launches, your account ID, the app’s anonymous ID, and, where permitted, your device’s advertising ID. When you buy in the app, our servers send Meta the purchase amount together with your hashed email address and hashed account ID, the anonymous ID, and the advertising ID. On iOS, the advertising ID is sent only if you allow tracking.
• Microsoft Clarity (Microsoft Corporation, United States; website): to improve our website, sends Microsoft how you scroll and click on our pages (heatmaps and visit recordings; text you type is masked), the pages you view and what you do on them, your visitor ID (fauve_vid), how you reached us (such as the ad campaign name), your display language, your IP address, and browser information, and uses analytics cookies (_clck, _clsk).
• Jaaxis (DH Ecom LLC, United States; website only): to provide the support chat, sends Jaaxis a random visitor ID kept in your browser storage (jaaxis_vid, used for up to one year), the page you are viewing, your IP address and browser information, and what you type in the chat. Results of the chat, such as a sign-up, may be measured through our Meta Pixel (recorded in jaaxis_conv).
• App downloads and update checks: the desktop app’s installers are downloaded from GitHub (GitHub, Inc., United States), which receives your IP address and browser information. The desktop app checks GitHub for updates periodically while it is running, and the mobile apps check Expo (650 Industries, Inc., United States) when they start. When checking for and downloading updates, the apps send your IP address and information such as the app version and operating system, and the mobile apps also send a random ID for each installation.
• On-device AI models: Studio on the web and in the desktop app downloads the AI model files it uses for on-device analysis from Hugging Face (United States), and the files that run them from jsDelivr. These downloads send your IP address and browser information, never your photos or videos.
• App Store and Google Play (Apple, Google, United States; mobile apps): in-app purchases are processed by Apple or Google. To link a purchase to your account, the app attaches an identifier derived from your account ID to the purchase, and our servers verify the purchase against Apple’s or Google’s purchase record.

8. Storage, security and retention

Uploaded media is held in private storage and served to you through short-lived signed links; it is not publicly accessible. We apply access controls so that you can only reach your own data.

We keep your data for as long as your account is active. When you delete media, a project, or your account, the associated data is deleted from our systems within a reasonable period, subject to backups and any retention we are legally required to keep (e.g. transaction records).

9. Your rights and choices

Depending on where you live — including under Singapore’s Personal Data Protection Act 2012 (PDPA) and, for users in those regions, the EU/UK GDPR and similar laws — you may have the right to access, correct, delete, export, or restrict processing of your personal data, and to withdraw consent or object to certain processing.

You can update your profile and delete your saved looks, projects, and uploaded media from within the app. To delete your account and associated personal data, use the “Delete account” option in your account settings — this permanently removes your profile, media, projects, saved looks, and balances and cancels any subscription. To exercise any other right, contact us at contact@flexpresets.com; we will respond within the period required by applicable law.

10. Data deletion

Deleting media or a project removes it from your account and from active storage. Deleting your account removes your profile, saved looks, projects, studio sessions, and stored media. Some records may be retained where required by law (for example, billing and tax records held by us or Stripe).

Requests to delete data already processed by a subprocessor (e.g. authentication records at Clerk, payment records at Stripe) are forwarded to or handled under those providers’ own deletion processes.

11. International transfers

Our providers may process your data in countries other than yours, including the United States. Where required, transfers are made under appropriate safeguards (such as Standard Contractual Clauses).

12. Children

The service is not directed to children under 16, and we do not knowingly collect their personal data. If you believe a child has provided us data, contact us and we will delete it.

13. Changes to this policy

We may update this policy. If we make material changes we will update the date above and, where appropriate, notify you. Continued use after changes take effect means you accept the updated policy.

14. Contact

Questions, requests, or our data protection contact: contact@flexpresets.com.

If you are in Singapore and are not satisfied with our response, you may contact the Personal Data Protection Commission (PDPC). If you are in the EU/UK, you may also complain to your local data protection authority.