Privacy Policy

Effective October 21, 2026

This policy explains how MRSLM Group LLC, a Florida limited liability company, which operates Fylvy (“Fylvy,” “we,” “us”), collects, uses and protects information when you use our website and AI headshot service.

1. Information we collect

You give us

• Photos you upload (“selfies”), which show a person's face.
• A style choice (man, woman, or prefer not to say), used only to describe the subject in image prompts.
• Your email address, collected at checkout to deliver your results and provide support.
• Messages you send us through the contact form or email.

Collected automatically

• Payment details are collected and processed by Stripe. We receive limited information such as your email, the amount, payment status, and card country, but never your full card number.
• Basic technical data such as IP address, browser type, and pages requested, recorded in standard server logs by our hosting provider for security and reliability.

We also use cookies and similar technologies, including for advertising. See section 5 for details and your choices.

2. Facial images and biometric information

Your selfies contain images of a face. To make your headshots, our AI processing provider trains a private, temporary model on those photos so it can draw the same person in new styles. Some laws (for example in Illinois, Texas, Washington, and under certain state privacy laws) may treat this as biometric information. Here is exactly how we handle it:

• Purpose: only to create the headshots you ordered. We do not use it to identify or recognize anyone, verify identity, or for any other purpose.
• Consent: we ask for your written consent (the checkbox at upload) before any photo is processed.
• No sale or profiting: we never sell, lease, trade, or otherwise profit from facial images or any model made from them.
• Retention and deletion: uploaded selfies are deleted automatically as soon as your headshots are created (or immediately if the order fails), usually within one hour and no later than 7 days after upload. The trained model is used only for your order and is deleted on request; in any case we will not keep it longer than 1 year after your order, or longer than the law allows.
• Disclosure: facial images are shared only with the service providers listed below that are needed to make your order, or if required by law.
• Security: we protect this data with at least the same care we use for other confidential information.

3. How we use information

• To create and deliver your headshots and send order emails.
• To process payments, refunds, and disputes.
• To answer support requests.
• To prevent fraud, abuse, and violations of our Acceptable Use Policy.
• To comply with legal obligations and enforce our Terms.

We do not use your photos or results to train general AI models, and we do not use them in marketing without your separate written permission.

4. Who we share it with

We share information only with service providers that help us run the Service, under contracts that limit their use to providing services to us:

• Stripe: payment processing.
• Vercel: website hosting and temporary photo storage.
• fal.ai: AI model training and image generation.
• Resend: sending order and support emails.
• Hostinger (Titan Email): our business email inbox for support messages.
• Advertising partners such as Google and Meta (Facebook/Instagram): only the browsing and device data described in section 5. Never your photos, headshots, or the content of your messages.

We may also disclose information if required by law, to protect rights and safety, or as part of a merger, sale, or reorganization of our business (in which case this policy will continue to apply). We do not sell personal information for money. Our use of advertising cookies may count as “sharing” for targeted advertising under some state laws; you can opt out at any time (see section 5).

5. Cookies and advertising

Essential cookies. Some cookies are needed for the site to work, for example to keep checkout secure. Stripe sets cookies on its checkout page to process payments and prevent fraud.

Advertising and measurement. We advertise on platforms such as Google and Meta (Facebook/Instagram). To learn which ads work and to show our ads to people who visited our site, we may use their tags and pixels. These can collect your IP address, device and browser information, the pages you visit on our site, and whether you made a purchase. We never send your photos, headshots, or messages to advertising partners.

Your choices.

• Opt out of targeted advertising on our Your Privacy Choices page.
• We honor the Global Privacy Control (GPC) browser signal as a request to opt out of sale or sharing for targeted advertising.
• You can block or delete cookies in your browser settings, and manage ad personalization in your Google and Meta account settings.

6. How long we keep it

• Uploaded selfies: deleted automatically after your headshots are created (see section 2).
• Generated headshots: available through your private link for at least 30 days, and deleted on request.
• Order and payment records: kept as long as needed for tax, accounting, and legal purposes (typically up to 7 years).
• Support messages: kept up to 2 years, then deleted.

7. Your choices and rights

Wherever you live, you can ask us to access, correct, or delete your personal information, including your photos and results. Email support@fylvy.com from the address used for your order. We'll respond within 30 days (or sooner where the law requires) and may need to verify your identity first.

California residents have the right to know what personal information we collect and how we use it, to delete it, to correct it, and to limit the use of sensitive personal information, and not to be discriminated against for using these rights. We collect the categories described in section 1 (identifiers, commercial information, images, and limited sensitive personal information in the form of facial images) for the purposes in section 3, and we disclose them only to the providers in section 4. We do not sell personal information for money. Advertising cookies (section 5) may be considered “sharing” for cross-context behavioral advertising; you can opt out on our Your Privacy Choices page or with Global Privacy Control. We use sensitive personal information (facial images) only to provide the Service you requested, and never for advertising. You may use an authorized agent to make a request.

Residents of other US states with privacy laws (such as Virginia, Colorado, Connecticut, Texas, and others) have similar rights, including to appeal a decision we make on your request. To appeal, reply to our response email with “Appeal” in the subject.

If you are in the EU, UK, or similar regions, we process your data to perform our contract with you and, for facial images, with your explicit consent, which you can withdraw at any time (withdrawing doesn't affect processing already done). You may also complain to your local data protection authority.

8. Security

We use encrypted connections (HTTPS), access controls, and reputable providers to protect your information. Result links are long, hard-to-guess private URLs. Anyone you share a link with can view those images. No system is perfectly secure, so please download your images and avoid sharing links publicly.

9. Children

The Service is for adults 18 and over. We do not knowingly collect information from or about children. If you believe a child's photo was uploaded, contact us and we'll delete it.

10. International users

We are based in the United States and our providers may process data in the US and other countries. By using the Service, you understand your information will be processed in those places.

11. Changes

We may update this policy. The date at the top shows the latest version. If we make a material change to how we use facial images, we will ask for your consent again.

Contact

Privacy questions or requests: support@fylvy.com, or use our contact page.

MRSLM Group LLC
7095 Hollywood Blvd #484, Los Angeles, CA 90028