この法的文書は英語のみで提供されています。英語版が公式の法的拘束力のあるバージョンです。

Privacy Policy

Last updated: September 29, 2026

Wigwy (“we”, “our”, “us”) is committed to protecting your privacy. This policy explains how we collect, use, and safeguard your information when you use our virtual wig try-on service.

Selfies auto-deleted in 24 hours

Your uploaded selfie is automatically and permanently deleted from our servers within 24 hours via an automated S3 Lifecycle Rule. No manual action needed.

Never used for AI training

Your photos are never used to train AI models — not ours, not anyone else's. This is a core promise, not a marketing checkbox.

BIPA compliant

We obtain explicit written consent before processing any biometric data, in full compliance with the Illinois Biometric Information Privacy Act.

1. Information We Collect

1.1 Account Information

When you create an account, we collect your email address and display name. If you sign in with Google, we receive your name and email from your Google profile.

1.2 Photos

When you upload a selfie for virtual wig try-on, we temporarily store your photo on encrypted servers (Amazon S3). Your selfie is automatically deleted within 24 hours via an automated S3 Lifecycle Rule.

1.3 Biometric Data (BIPA)

Our service processes facial geometry from your uploaded selfie to generate the try-on result. Under the Illinois Biometric Information Privacy Act (BIPA), this constitutes biometric data. We obtain your explicit written consent before any biometric processing. Consent records are retained for a minimum of 5 years as required by law.

1.4 Usage Data

We collect anonymized analytics data including page views, feature usage, and session information via Google Analytics. This data does not personally identify you.

1.5 Payment Information

Payment processing is handled entirely by Stripe. We never see, store, or have access to your credit card number. We store only the Stripe transaction ID for order fulfillment.

2. How We Use Your Information

To provide the virtual wig try-on service
To process credit purchases via Stripe
To maintain your account and generation history
To improve our service via anonymized analytics
To communicate important service updates

3. What We Never Do

We never use your photos for AI model training.
Your selfies are used exclusively for generating your try-on result. Not for training, not for research, not for anything else.
We never sell your personal information to third parties.
Your data stays between you and us. Period.
We never share your photos with other users.
Your photos are private unless you explicitly create a share link.

4. Data Retention

Data Type	Retention	Why
Selfie uploads	Auto-deleted within 24 hours	S3 Lifecycle Rule — no manual action
Generated results	Until you delete them	You control your gallery
BIPA consent records	Minimum 5 years	Legal requirement under BIPA
Account information	Until you delete your account	Required for service operation
Payment records	7 years	Tax and legal requirements

5. Your Rights

Right to Deletion

Delete your account and all associated data at any time from Settings → Danger Zone. This permanently removes your profile, generations, and S3 files. Consent records are retained per BIPA requirements.

GDPR Art. 17 · CCPA §1798.105

Right to Access

You can view all your data — generations, account info, and purchase history — directly in your Gallery and Settings pages.

GDPR Art. 15 · CCPA §1798.100

Right to Withdraw Consent

You may withdraw biometric consent at any time by deleting your account. No further biometric processing will occur after withdrawal.

BIPA §15(a)

6. Security

We use industry-standard security measures to protect your data:

Encrypted storage

Amazon S3 server-side encryption (AES-256)

Encrypted transit

HTTPS for all data transmission

Short-lived access

Presigned URLs with short expiration for file access

Rate limiting

Automated rate limiting to prevent abuse

7. Children's Privacy

Wigwy is not intended for children under 13. We do not knowingly collect information from children under 13. If you believe a child has provided us with personal information, please contact us and we will promptly delete it.

8. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or a notice on our website. The “Last updated” date at the top indicates when this policy was last revised. Continued use after changes constitutes acceptance.

9. Contact

Privacy questions or data requests

[email protected]