Privacy Policy

1. Introduction

Welcome to Your Look, a service provided by The Mom Edit ("we," "us," or "our"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you interact with our Instagram-based shopping assistant service.

Your Look helps you discover and shop fashion looks featured on The Mom Edit's Instagram account. When you comment on our posts with specific keywords, our automated system sends you direct messages with links to shop the featured items.

By interacting with our service through Instagram, you consent to the data practices described in this Privacy Policy. If you do not agree with this policy, please do not interact with our service.

2. Information We Collect

We collect the following categories of information:

2.1 Information from Instagram

When you interact with our service, we receive the following from Instagram's API:

• Instagram User ID: A unique identifier associated with your Instagram account
• Instagram Username: Your public Instagram handle
• Comment Content: The text of comments you post on our Instagram posts
• Media Information: The identifier of the Instagram post you commented on

2.2 Automatically Generated Data

Our system automatically generates and stores:

• Interaction Logs: Records of when you interacted with our service, including timestamps and the type of response sent
• Image Embeddings: Mathematical representations of Instagram post images used to match your requests with relevant fashion looks (these do not contain personal information)

2.3 Information We Do NOT Collect

We do not collect or have access to:

• Your Instagram password or login credentials
• Your private Instagram posts or stories
• Your Instagram direct messages (except those we send to you)
• Your followers, following lists, or other social connections
• Your email address, phone number, or other contact information (unless you provide it directly)

3. How We Use Your Information

We use the information we collect for the following purposes:

3.1 Service Delivery

• To process your comment and identify which fashion look you're interested in
• To send you direct messages with shopping links for requested items
• To reply to your comments confirming we've sent you information

3.2 Service Improvement

• To analyze usage patterns and improve our matching algorithm
• To prevent abuse and ensure fair use of our service (rate limiting)
• To troubleshoot technical issues

3.3 Legal Compliance

• To comply with applicable laws and regulations
• To respond to legal requests and prevent harm

4. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA), our legal basis for processing your information includes:

• Consent: By commenting on our posts with trigger words, you consent to receiving our automated responses
• Legitimate Interests: We process data to improve our services and prevent abuse, where these interests are not overridden by your rights
• Legal Obligations: We may process data to comply with applicable laws

5. Information Sharing and Disclosure

We do not sell, rent, or trade your personal information. We may share information only in the following limited circumstances:

5.1 Service Providers

We use the following third-party services to operate Your Look:

• Meta/Instagram: To receive webhook notifications and send messages (Instagram Privacy Policy)
• Google Cloud Platform: For secure data storage and processing (Google Cloud Privacy)
• Firebase: For database and hosting services (Firebase Privacy)

5.2 Legal Requirements

We may disclose information if required to do so by law or in response to valid legal requests.

5.3 Business Transfers

If The Mom Edit is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

6. Data Retention

We retain your information for the following periods:

• Interaction Logs: Retained for 90 days for service improvement and abuse prevention, then automatically deleted
• Image Embeddings: Retained indefinitely as they contain no personal information

You may request deletion of your data at any time by following the instructions on our Data Deletion page.

7. Your Privacy Rights

Depending on your location, you may have the following rights:

7.1 All Users

• Access: Request a copy of the personal information we hold about you
• Deletion: Request deletion of your personal information
• Opt-Out: Stop using our service at any time by not commenting on our posts

7.2 European Economic Area (GDPR)

• Rectification: Request correction of inaccurate information
• Restriction: Request restriction of processing
• Portability: Request transfer of your data in a portable format
• Object: Object to processing based on legitimate interests
• Withdraw Consent: Withdraw consent at any time

7.3 California Residents (CCPA)

• Know: Right to know what personal information is collected
• Delete: Right to request deletion of personal information
• Non-Discrimination: Right not to be discriminated against for exercising your rights

Note: We do not sell personal information as defined under the CCPA.

To exercise any of these rights, please contact us at support@themomedit.com.

8. Data Security

We implement appropriate technical and organizational measures to protect your information, including:

• Encryption of data in transit (TLS/HTTPS) and at rest
• Access controls limiting who can access personal data
• Regular security assessments and updates
• Secure credential storage using industry-standard encryption (AES-256)

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

9. Children's Privacy

Our service is not directed to children under 13 years of age (or 16 in the EEA). We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately at support@themomedit.com, and we will take steps to delete such information.

10. International Data Transfers

Your information may be transferred to and processed in the United States, where our servers are located. If you are located outside the United States, please be aware that your information will be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your country.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a new "Last Updated" date. Your continued use of the service after changes are posted constitutes acceptance of the updated policy.

12. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: