Privacy Policy

Last updated: 9 November 2026

1. What data we receive

From Telegram: your Telegram account ID, and the name and username you set in Telegram. The bot cannot see your phone number.

Photos: the photos you send for retouching.

Payments: your plan, payment dates and the payment ID we need for refunds. Card details are processed by Stripe: we never see or store them. The email you enter when paying by card goes to Stripe for receipts.

Support messages, if you write to us.

2. How the software works with faces

To choose the right retouching, the software finds facial features in the photo (eyes, nose, lips, face outline) and roughly estimates who is in it: a woman, a man or a child. This is used only to give each person suitable retouching. This information exists only while the photo is being processed and is not stored. We do not use it to identify you, and we do not compare faces across photos.

3. What happens to your photos

Your photos and results stay with you, in your chat with the bot. The copy we receive for processing is deleted from our server as soon as you've received your result.

A copy is kept longer in only three cases:

Photos are processed by software, not by a person. Our team only sees photos you have given permission for, in one of these ways:

These photos and their results are stored separately and are used only to make the retouching better. Our moderators may view them. We do not publish them, use them in advertising or share them with anyone. We keep them for up to 3 years and then delete them. You can ask support to delete them sooner. Software that has already learned from these photos does not change after they are deleted, but we no longer have the photos themselves.

Without your permission, we do not use your photos to train the software.

4. Why we use your data

To process your photos, track your plan limits, take payments, issue refunds, answer support requests and send you necessary messages in the bot, such as a reminder that your paid period is ending or a notice about changes to the terms or prices. We do not send marketing messages, sell data or show ads.

5. Who else is involved

Telegram (your chat with the bot), Stripe (card payments) and the hosting provider where the bot runs. Each of them processes data under its own policies.

6. Data outside Australia

Telegram, Stripe and the server where the bot runs may store and process data in other countries. We choose services that protect data, and we only share what is needed to run the bot and take payments.

7. How we protect your data

Only we have access to the server and the data. Connections to Telegram and payment services are encrypted. We store only what is listed in this policy and delete it within the periods below. No online service can be completely secure, but if anything happens to your data, we will notify you as required by law.

8. How long we keep data

Photos: usually deleted as soon as the result is delivered; photos not delivered because of an error or because the bot was blocked are kept for no more than 30 days; photos you gave permission for are kept for up to 3 years (see section 3). Subscription and payment data is kept while you have access and afterwards for as long as payment record rules require. Support conversations are kept for as long as needed to resolve your request.

9. Your rights

You can ask us to show you what data we hold about you, correct it or delete it. Just contact support. You can withdraw permission to view your photos in /settings: photos sent after that are not stored. You can delete your chat with the bot yourself in Telegram.

10. Users under 18

The service is for people aged 16 and over. If we learn that someone under 16 is using the bot without a parent's or guardian's consent, we will delete their data.

11. Website

The mirratouch.com website counts visits anonymously: how many people opened its pages, which sections they reached and where they came from. This is done by GoatCounter. No cookies, ad trackers or data that could identify a person are used for this.

12. Changes to this policy

We may update this policy. The bot will notify you in advance of any important changes. The date of the last update is shown at the top of this page.

13. Complaints

If you think we have mishandled your data, contact support, and we will reply within 30 days. If you are not satisfied with our reply, you can contact the Office of the Australian Information Commissioner (oaic.gov.au) or the data protection authority in your country.

14. Contact

The /support command in the bot, or email hello.mirratouch@gmail.com.