MY.ORGANICS does not store the images you send. Photos are used only to generate the aesthetic analysis and deleted from our server within seconds of the response. No database, no backup, no ML training, no profiling. Consent is requested every time you submit.

Last updated 3 May 2026.

This notice describes how MY.ORGANICS ("we") processes the photograph you choose to send through the EVA Virtual Assistant in order to receive a personalised aesthetic consultation. It applies exclusively to the photo analysis feature: for the general processing of your data on myorganics.com, the main privacy policy applies.

What it is

It is a chatbot feature that lets you upload a photo of your face or hair to receive an aesthetic suggestion (hair type, perceived skin hydration, cosmetic points of attention). It is not a dermatological or medical diagnosis and in no way replaces consultation with a qualified professional.

What happens to the photo

  • Transmission: the photo is sent over HTTPS to our backend server.
  • Immediate sanitisation: we strip any EXIF metadata (including GPS coordinates) before any other processing.
  • Analysis: we forward the sanitised photo to an artificial intelligence provider (Anthropic, Claude model) which returns a structured profile in JSON format.
  • Deletion (within seconds): the photo is deleted from our server immediately after the response is generated. It is not saved in any database, not archived, not backed up. The temporary file is removed from disk within milliseconds of the response being sent to the client.
  • Logging: in the application log we record only technical metadata (size, format, language, outcome) — never the image, no biometric data, no identifiers of the person.

What we DO NOT do

  • We do not save the image in our systems (no database, no file storage, no permanent backup).
  • We do not identify the person depicted (no facial recognition, no age/ethnicity/gender estimation for profiling purposes).
  • We do not share the photo with third parties other than the technical AI analysis provider.
  • We do not use the photo to train machine learning models.
  • We do not profile users for advertising.

Legal basis and consent

The processing is based on your explicit consent (Art. 6.1.a and Art. 9.2.a GDPR), which you give by ticking the dedicated box before sending the first photo. You can revoke consent at any time by ceasing to use the feature and clearing your browser's local data.

Special categories of data

A photograph of the face may contain elements that, under certain conditions, qualify as "biometric data" under Art. 9 GDPR. For this reason we require explicit consent and have minimised retention (deletion within seconds). We perform no biometric template extraction.

Transfer outside the EU

The AI analysis provider (Anthropic) is based in the United States. The transfer takes place on the basis of the European Commission's Standard Contractual Clauses. A Zero Data Retention agreement with the provider is being signed: during the initial rollout, the photo may be retained by Anthropic for up to 30 days for abuse monitoring, after which it is deleted; it is not used to train models.

Your rights

You can exercise your GDPR rights (access, deletion, objection, restriction) by writing to support@myorganics.com. Please consider, however, that given the few-second lifecycle of the photo on our server, a deletion request will only concern any technical log metadata (which never contains the photo or identifying data).

Data Controller

SMÀ Srl — Via Bianche 3, 36010 Schio (VI), Italy — VAT/Tax ID 03547050249 — Court of jurisdiction: Tribunale di Vicenza. For any questions about this feature: support@myorganics.com.