How we protect your account, your labels and your documents. Plainly stated, and true to what we actually do.
Also available in: Italiano · Română
Encrypted, in transit and at rest
All traffic runs over HTTPS. Your analyses, files and account data are stored on Cloudflare's platform, which encrypts data at rest.
Your data stays yours
Each account sees only its own analyses; company accounts share only among approved members. One customer's data is never reachable by another.
Not used to train AI
The content you submit is processed by our AI provider (Anthropic) only to produce your results. Under the commercial terms we operate on, it is not used to train their models.
Passwords never stored in clear
Passwords are hashed with PBKDF2-SHA256, a per-user salt and 100,000 iterations. We never see or store your password itself.
EU data-protection safeguards
The service runs on Cloudflare's infrastructure. Personal data is handled under EU data protection law, and any transfer outside the EEA is covered by appropriate safeguards (adequacy decisions or Standard Contractual Clauses).
No tracking, no ad cookies
We use only the technical storage needed to keep you signed in and remember your language and theme. No advertising cookies, no third-party analytics, which is why you see no cookie banner.
We keep our provider chain short and use only established companies, each bound to us by a data processing agreement (Art. 28 GDPR). Their agreements are public:
You can access, correct, export or delete your data at any time. Write to info@cosmetifull.com. Our lead supervisory authority is the Romanian ANSPDCP (dataprotection.ro); you may also address the authority of your own country.