Privacy, plainly.

Effective November 1, 2026. Inova Platforms, Inc. operates Hairline Desk. Contact: hairlinedesk@gmail.com.

What we collect

We collect the logistical brief you submit: your name, email, departure city, preferred dates, treatment budget, destination preferences and date flexibility. We also retain purchase identifiers, payment status, your acceptance of terms and support messages. Please do not submit identity documents or card details. Health answers belong only in the optional private clinic profile after sign-in and explicit storage consent. Optional hairline photos belong in the dedicated private photo area, not in messages or the public contact form.

How we use it

We use this information to provide research and coordination, communicate with you, manage payments and refunds, prevent abuse and maintain required business records. We do not sell or share your information for advertising, and this website uses no advertising pixels or marketing cookies.

Your private clinic profile

With your explicit consent, the signed-in profile collects your self-reported age, hair-loss goals and history, treatment history, relevant health conditions, regular medications, allergies, skin or scalp conditions and previous operations. You may answer “unsure,” save a draft and return later. These answers are stored privately in our U.S. West Firebase database and reviewed only by your verified account and authorized operators. They are not sent to Stripe, advertising services or an AI provider.

We use the profile to prepare clinic inquiries and identify unanswered intake questions. It is not a diagnosis, medical assessment or clinical clearance. Confirming a profile does not authorize disclosure: we ask separately before sending selected information and photos to identified clinics. Unpaid profiles follow the 90-day routine-record retention policy; supported case records follow the case retention policy below. Contact us for correction or deletion.

Payments and hosting

When an ad brings you here, we may save a limited campaign code in your browser for up to 30 days and associate it with your account and order. This measures which campaigns lead to signups, briefs and payments. We do not store advertising click identifiers or send your brief, account activity or payment events to advertising platforms.

Stripe processes payments and receives the payment and contact information you provide in its checkout. We receive payment identifiers and status; we do not receive or store full payment card numbers. The site is hosted on Vercel, with the brief and private workspace stored in a dedicated Google Firebase Firestore database in the U.S. West region. Firebase Authentication manages account login. Resend delivers transactional order and update emails on our behalf. If you explicitly request planning emails in your verified workspace, Resend also receives your email address, subscription preference and whether you have purchased, so sales reminders can stop after purchase. Photos, brief answers and private correspondence are not sent to the marketing system. Emails contain minimal information and link back to your private workspace; email delivery, open and link activity may be recorded by the email provider. These service providers process data to operate the service. Data may be processed in the United States and other countries where they operate. See Stripe’s privacy notice for its payment processing practices.

Private photos and AI illustrations

If you upload a hairline or actual result photo, we store an optimized copy in private Google Cloud Storage in the U.S. West region, with its details in Firebase. Uploads require your consent and confirmation that you are an adult and the photo is yours. Location metadata is removed. Photos are accessible only to your verified account and authorized Hairline Desk operators. Uploading does not publish them, use them in advertising or send them to clinics.

Creating an AI illustration is a separate, optional action. After you consent, we send the selected photo and a fixed editing instruction to OpenAI. We do not send your name, email, medical history or case correspondence. OpenAI processes the photo under its API data practices, including applicable safety and abuse-monitoring retention. Read OpenAI’s API data controls before choosing this option. Do not request an illustration if you do not want OpenAI to process your photo.

AI illustrations are labeled in the workspace and on the image itself. They are visual concepts, not medical advice, predictions of results or evidence of a completed procedure. Actual result photos remain separately labeled. You can permanently remove a photo and its derived illustration from our live storage in your workspace. Removal does not override a service provider’s required retention. Photos expire from our storage after 12 months unless you remove them sooner.

Independent read of clinic research

To help rank clinic options, an operator may send the written research notes for a clinic (country, whether a surgeon, written quote and credential source are on file, and the operator’s summary of credentials, price and aftercare) to TypeSafe’s Jev language model. The request omits the clinic and surgeon names, masks any names, links, email addresses or phone numbers typed into those notes (including yours, if one were entered by mistake), and contains no information about you, your photos or your messages. The result is one signal among several in your ranking, and the ranking screen explains every factor. It grades how well the paperwork supports an option. It is not a rating of surgical skill or results.

Clinic communication

We can ask clinics about generic pricing and date availability without identifying you. We seek your approval before sharing your identity or contact details for a named assessment or appointment. Medical information can be sent by you, or by your concierge with your specific approval, through a clinic’s approved channel. A clinic’s own privacy terms govern information shared with it.

Retention and security

Access to customer briefs is limited to authorized operators. Unpaid briefs and routine support records are retained for up to 90 days; completed case logistics are retained for up to 12 months unless a longer period is needed to resolve a request or meet legal obligations. Necessary transaction and accounting records may be kept longer. Technical logs and daily hashed network identifiers may be used for security and abuse prevention. No system can guarantee absolute security.

Your choices

Planning emails are optional and are never a condition of opening an account or purchasing. The email preference is unchecked by default. You can switch it off in your workspace or use the unsubscribe link in any marketing email without signing in. Order and requested support updates remain separate. We retain a record of your consent and withdrawal to respect your preference.

To request access, correction or deletion, use our contact form or email us from the address used in your brief. We may need to verify the request. We honor applicable privacy rights and explain any retention needed for legal or accounting reasons. We do not enroll you in marketing when you purchase. The public site is available without login. Your private workspace and checkout require a verified Firebase account. Authorized operators use restricted accounts.