Privacy Policy

• Professionals: estheticians and other skincare professionals with an EstheIQ account.
• Clients: people an esthetician invites to complete an Acne Consultation or use the Care portal.
• Visitors: anyone browsing estheiq.com or using the contact form.

Account information. Your email address, and your name and profile photo if you sign in with Google. We do not use passwords; you sign in with Google or a one-time code sent by email.

Professional activity. Ingredient lists, product names, barcodes, product page links, and label photos you submit for analysis; the resulting scores and reports; your library and training progress; and notification preferences.

Client information.For clients we store an email address only (no name or phone number), plus consultation answers about skin type, acne, triggers, and current routine, the products in a client’s Care regimen, and the results generated from them. This is skin-health information, so we collect it only after the client gives explicit consent in the app. Client emails and consultation details are encrypted in our database.

Billing. Payments are handled by Stripe. We receive your subscription status, plan, and billing period, but never your full card number.

Messages. What you send through the contact form, including your name and email, so we can reply.

Technical information. Standard server logs (IP address, browser type, pages requested, and timestamps) used for security and troubleshooting, and, if you turn on notifications, the push endpoint your browser provides.

• To sign you in, run your account, and provide the features you use.
• To score products against our Acne Safety Standards and generate recommendations, consultation plans, and reports.
• To send sign-in codes, invitations, results, and service emails.
• To process subscriptions and prevent fraud and abuse.
• To improve our ingredient database. When an ingredient name we don’t recognize is submitted, we may add it to our standards. This uses ingredient names only, never personal or client information.
• To respond to you and to meet legal obligations.

Some features use AI models (currently provided by Anthropic) to write recommendations, read ingredient lists from label photos or product pages, and summarize results. We send only what the feature needs: ingredient lists, product details, analysis results, and, for client product checks, general skin-profile details. We do not send names or email addresses. Our AI provider processes this data on our behalf and does not use it to train its models. The Acne Safety Score itself is calculated by our own rules, not by AI.

If you choose “Continue with Google,” we receive your name, email address, and profile photo from Google. We use them only to create and sign in to your EstheIQ account. We do not request access to your Gmail, Drive, contacts, or any other Google data. Our use of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements.

We share information only with service providers that help us run EstheIQ, under contracts that limit their use to providing that service:

• Google Cloud: hosting, database, file storage, and sign-in.
• Resend: delivery of sign-in codes and other emails.
• Stripe: payments and subscriptions.
• Anthropic: AI processing as described above.
• INCI ingredient database: ingredient and barcode lookups.
• Mux: training video streaming.

Within EstheIQ, a client’s consultation results are visible to the esthetician who invited them. We may also disclose information when required by law, to protect someone’s safety, or as part of a merger or sale of the business, in which case this policy will continue to apply.

We use only the cookies needed to keep you signed in and to keep the site secure. We use no advertising or analytics cookies.

We keep account information while your account is open. Client consultation and analysis records are deleted two years after they are created, and clients can delete their history sooner from the Care portal. Server logs are kept for about 30 days. When you ask us to delete your account, we delete your personal information within 30 days, except where we must keep billing records by law.

You can ask us to access, correct, export, or delete your personal information, or to stop processing it, by emailing stacie@velicutis.com. Clients can also ask the esthetician who invited them. We respond within 30 days and will not treat you differently for exercising these rights. Depending on where you live, you may have additional rights under local law, and we honor them.

We use encrypted connections (HTTPS), encrypt sensitive client data in our database, limit staff access, and use one-time sign-in codes instead of passwords. No system is perfectly secure, so we also notify affected people of a breach as the law requires.

EstheIQ is not directed to children under 13, and we do not knowingly collect their information. Clients aged 13 to 17 should use the Care portal only with a parent or guardian’s permission.

EstheIQ is hosted in the United States. If you use it from another country, your information will be transferred to and processed in the United States.

If we make material changes, we will update the date above and let account holders know by email or in the app. Questions? Email stacie@velicutis.com or use our contact page. See also our Terms of Service.