Consumer health data privacy

Effective November 1, 2026. Hairline Desk is operated by Inova Platforms, Inc. Contact: hairlinedesk@gmail.com.

Categories and sources

We collect your interest in hair transplant planning, hair-loss goals and associated clinic, budget, destination and date preferences when you give them to us. Your optional signed-in clinic profile may include self-reported age, hair-loss and treatment history, relevant health conditions, medications, allergies, scalp conditions and previous operations. Optional uploads include your hairline and actual result photos; separately requested AI illustrations are derived from a selected photo. These records can be linked to your account and case.

The sources are you and your requested use of the service. If you separately approve communication with an identified clinic, we may receive its replies about your assessment process, availability and requested coordination. An AI provider returns an illustration only after your separate approval of that action. We do not buy consumer health data from data brokers or collect it through advertising pixels. We do not use geofences to identify people seeking healthcare.

Purposes and consent

We use these records to store the private profile and photos you request, prepare research and questions for clinics, provide your comparison and coordination, answer support requests and, only if separately requested, generate a visual illustration. This is administrative support, not diagnosis or clinical assessment. Health-profile and photo storage require separate consent in the authenticated workspace. Terms acceptance and payment do not authorize optional AI processing, marketing use or disclosure to clinics.

Sharing and service providers

Authorized Hairline Desk operators can access records needed for your service. Google Firebase and private Google Cloud Storage provide account, database and photo infrastructure; Vercel hosts the application. These processors handle data needed to run the service. Photos and private profile records are stored in dedicated U.S. West resources. Provider processing may occur in other countries under the providers’ service terms.

We send a selected photo and editing instructions to OpenAI only after you explicitly consent to that action. We do not send your name, email, medical history or case correspondence with that request. OpenAI’s applicable safety and abuse-monitoring retention can apply; read its API data controls before requesting an illustration. AI processing is optional.

Sharing selected private health answers or photos with a specifically identified clinic requires separate approval for that recipient and information. A clinic receiving authorized information processes it under its own privacy terms. Public clinic research excludes private profile answers, photos, names and correspondence. Optional flight research sends only the route and dates to DeepSeek after you approve that search; it does not include your identity, clinic or reason for travel.

We do not sell consumer health data or share it for targeted advertising. Stripe receives checkout payment and contact information, not clinic profile answers or photos. Resend receives minimal information for email delivery and consented planning emails, not health answers or photos. We may preserve or disclose the minimum information required by a valid legal obligation; a purchase is not consent to unrelated disclosure.

The optional video library connects to Google’s YouTube player only after you choose to load a video. Google may receive your IP address, device information and viewing activity; the selected public video can indicate an interest in hair restoration. We do not include private case information. You may read the library’s text or use the rest of your workspace without loading the player. The player uses YouTube’s privacy-enhanced mode. See our video privacy explanation and Google’s privacy policy.

Your rights and choices

You can decline optional health answers, photo uploads, AI processing and flight research. Contact hairlinedesk@gmail.com or use our contact form to request access to your consumer health data, a copy, correction, deletion, information about disclosures, or withdrawal of collection or sharing consent. You do not need to send medical details in the request. We verify your identity proportionately, normally through your verified account or purchase email. You may request assistance without buying the concierge.

We respond to applicable consumer health privacy requests within 45 days. If a legally permitted extension is needed, we explain it within the initial period. We send applicable deletion requests to processors and recipients as required by law and explain any lawful retention exception. You can remove a photo and its derived illustration from live storage in the workspace. Withdrawal stops future consent-based processing; it cannot undo a prior authorized disclosure. We explain if withdrawal prevents us from providing a requested feature.

If we deny a request, reply with “Privacy appeal.” We review appeals and explain the decision within 45 days, without limiting a shorter legal deadline. Washington consumers may complain to the Washington Attorney General. You may exercise applicable rights without discrimination. A legal right to deletion or withdrawal is not waived by these terms or by purchasing.

Retention and contact

We keep consumer health data only for the requested service, consented storage and applicable legal requirements. Our routine-record retention targets are 90 days for unpaid profiles and 12 months for completed case logistics and photos, unless you request earlier deletion or lawful retention is required. Deletion requests take priority where the law requires. We explain any exception rather than treating a retention target as permission to keep unnecessary health information.

Inova Platforms, Inc., 10830 Fairbanks Way, Culver City, CA 90230, United States. Email: hairlinedesk@gmail.com.