Ageless AI LLC Privacy Notice

Last Updated: March 16, 2026

This Privacy Notice explains how Ageless AI LLC ("Ageless""we," "our," or "us") collects, uses, discloses, and protects information when you use Ageless, our AI-powered aesthetic and wellness visualization service (the "Service"). 

By using the Service, you agree to the practices described in this Privacy Notice. If you do not agree, please do not use the Service. 

1. Information We Collect

When you interact with the Service, we may collect information from and about you. As used in this Privacy Notice, "Personal Information" means Personal Information, personally identifiable information, or personal data as defined under applicable privacy and data protection laws. 

A. Information You Provide

Ageless may collect:

  • Biometric Data and Images: A photo of yourself that you upload, from which analyses of facial and body geometry and features are derived, including skin age calculations and beauty scores. The Service is intended for images of you only; uploading images of anyone else, including minors, is prohibited. 

  • Consumer Health Data (Aesthetic and Wellness Inputs): Information you choose to provide about your physical appearance, aesthetic goals, wellness goals, skin concerns, desired treatments, and wellness protocols you have explored in the past. 

  • Contact Information: Such as your phone number (used to identify unique patients and provide you marketing SMS/RCS messages when you agree to this contact (collectively, “text messages”) and email address (used to deliver results, deletion links, send you marketing communication, and respond to inquiries). 

  • Communications: Information you provide when you contact us for support or with questions. 

B. Information Shared by Ageless

Ageless shares the following information to facilitate your care:

  • Visualization Outputs: AI-generated before/after comparisons and future self visualizations. 

  • Treatment Interests: Information about treatments you have expressed interest in through the Service.

  • Lead and Engagement Data: Lead quality scoring, engagement metrics, and financial and demographic enrichment data. 

C. Information Collected From Third Parties 

Ageless may obtain information about you from third parties, including data providers, Affiliated Practices (as defined below), and business partners. This information may include demographic, household, or interest-based information, such as estimated income range, household or marital status, or similar attributes. Information we receive from third parties may be combined with information we already have about you and may not always be accurate or up to date. 

2. Facial Image Processing and Artificial Intelligence

A. AI Processing

The Service uses artificial intelligence to generate simulated visualizations based on your uploaded images and aesthetic inputs. Uploaded images and related inputs may be processed using AI models provided by third parties models selected by Ageless. 

B. How Images Are Used

Uploaded facial images and related inputs are used solely to:

  • Generate AI-based simulated outputs for you, including before/after comparisons and treatment recommendations; 

  • Facilitate consultations and treatment planning;

  • Conduct internal quality assurance, safety review, and debugging by Ageless; and 

  • Improve and refine the Service and underlying AI systems. 

Uploaded facial images and AI-generated outputs are NOT used for targeted advertising and are NOT shared with advertising partners. 

C. Automated Decision-Making Disclosure

The Service uses automated AI processing to analyze your images and aesthetic inputs in order to generate personalized visualizations and treatment recommendations. This automated processing derives information about your body geometry and skin characteristics to produce simulation outputs. The AI-generated recommendations are provided for entertainment and educational purposes only and do not constitute medical advice. Always consult with a qualified healthcare provider before pursuing any aesthetic or wellness treatment.

3. How We Use Information

We use Personal Information for purposes consistent with this Privacy Notice, including to:

  • Provide and operate the Service, including generating and delivering AI visualizations and simulations; 

  • Facilitate aesthetic consultations and treatment planning;

  • Communicate with you, including sending results, delivering marketing and educational content,  deletion confirmations, and support responses; 

  • Improve, maintain, and secure the Service, including analytics, troubleshooting, and research and development; 

  • Detect, prevent, and investigate fraud, misuse, or security incidents; and 

  • Comply with legal obligations and protect the rights, safety, and property of Ageless. 

4. How We Disclose Information

We do not sell Personal Information. However, under certain state privacy laws the use of third party tracking technologies may constitute a sale. Please refer to sections below where we discuss our use of these technologies. 

A. Affiliated Practices 

We share your Personal Information with Affiliated Practices to enable the provision of Ageless. Ageless processes your biometric data and other Personal Information to generate AI visualizations and operate the platform, and Affiliated Practices use those visualizations to provide the Affiliated services. 

B. Service Providers and Processors

Ageless may share Personal Information with vendors that provide services on its behalf, such as:

  • Cloud hosting and storage; 

  • Analytics and performance monitoring; 

  • Email and text message delivery; 

  • Security and fraud prevention; and

  • CRM and integration partners. 

These providers may use Personal Information only as necessary to provide services and are prohibited from using it for their own purposes. When we share Personal Information with our service providers and processors, we ensure by contractual means that the transferred Personal Information is used only for the purposes for which the service provider is retained and is protected to the same degree as it is when in our possession.

C. Legal Requirements

Ageless may disclose information if required by law or if disclosure is reasonably believed necessary to:

  • Comply with legal process or government requests; 

  • Protect the rights, property, or safety of Ageless, patients, or others; or 

  • Prevent fraud, abuse, or security incidents. 

D. Business Transfers

In connection with a merger, acquisition, financing, reorganization, or sale of assets involving Ageless, Personal Information may be transferred as part of that transaction, subject to appropriate safeguards. 

E. Aggregated or De-Identified Data

Ageless may create and share aggregated or de-identified data that cannot reasonably be used to identify you, such as aggregate analytics on platform usage and treatment trends. 

5. Data Retention

Ageless retains Personal Information only as long as reasonably necessary for the purposes described in this Privacy Notice, unless a longer retention period is required or permitted by law. 

Biometric and Image Retention Notice: Uploaded images, including facial geometry (biometric identifiers), and related aesthetic inputs are retained by Ageless only until the purpose of collection has been fulfilled  or, subject to applicable laws, for no longer than one (1) year from the date of collection. Thereafter, Ageless will permanently destroy such data in accordance with applicable law.  

Exceptions: Data may be retained longer if required for active legal proceedings, fraud prevention investigations, or compliance with valid legal process. 

Account Deletion: If you delete your account, we will delete or de-identify your Personal Information, except as required to comply with our legal obligations or as otherwise described in this Privacy Notice. Notwithstanding the foregoing, biometric information is retained and deleted in accordance with biometric data retention practices described in the “Biometric and Image Retention Notice” section above.  

Practice Retention: Ageless may retain visualization outputs and related information in your patient records in accordance with our standard medical records retention policies and applicable law.

6. Your State / Provincial Privacy Rights

Depending on your state or province of residence, you may have access to certain privacy rights regarding your Personal Information. Washington residents looking for information relating to our collecting and processing of their consumer health data should refer to the Washington resident section below. Illinois or Texas residents looking for information related to our collecting and processing of their biometric information should refer to the Biometric Information section below. Please review the sections below if you are a California, Maryland, Nevada, Nebraska and Texas resident or a Canada resident. For other state residents, your privacy rights may include (if applicable):

  • The right to confirm whether or not we are processing your Personal Information and to access such Personal Information and the categories of Personal Information we are processing or have processed;

  • The right to obtain a copy of your Personal Information that we collected from and/or about you in a portable and, to the extent technically feasible, readily usable format that allows you to transmit the information to another controller without hindrance, where the processing is carried out by automated means;

  • The right to delete Personal Information that we collected from and/or about you, subject to certain exceptions;

  • The right to correct inaccurate Personal Information that we maintain about you, subject to certain exceptions;

  • The right, if applicable, to opt out of the processing of your Personal Information for purposes of (1) targeted advertising; (2) the “sale” of your Personal Information (as that term is defined by applicable law); and (3) profiling in furtherance of decisions that produce legal or similarly significant effects concerning you;

  • If we are required by applicable law to obtain your consent to process sensitive Personal Information (including sensitive Personal Information), the right to withdraw your consent; and

  • The right not to receive discriminatory treatment by us for the exercise of your privacy rights.

We use cookies and other tracking technologies to display advertisements about our products to you on nonAffiliated websites, applications, and online services. This is “targeted advertising” under applicable privacy laws. When we engage in those activities, we sell Personal Information (i.e., information from cookies) to third-party advertisers and analytics companies. We may transfer your Personal Information to joint marketing partners. Under applicable privacy laws this may be considered a “sale” of Personal Information to third parties. We do not use Personal Information for profiling in furtherance of decisions that produce legal or similarly significant effects concerning individuals.

To exercise your rights by emailing us at privacy@ageless.ai. If legally required, we will comply with your request upon verification of your identity and, to the extent applicable, the identity of the individual on whose behalf you are making such request. To do so, we will ask you to verify data points based on information we have in our records. If you are submitting a request on behalf of another individual, please use the same contact methods described above. If we refuse to take action regarding your request, you may appeal our decision by emailing us at privacy@ageless.ai.  We do not provide your Personal Information to data brokers. If you ask us to delete your Personal Information, we will not be able to provide you with the benefits of our Services because we will delete your account.Universal Opt-Out Mechanisms

Ageless recognizes the Global Privacy Control (“GPC”) signal. If you are using a browser setting or plug-in that sends an opt-out preference signal to each website you visit, we will treat that as a valid request to opt out. To download and use a browser supporting the GPC browser signal, click here: https://globalprivacycontrol.org/orgs . If you choose to use the GPC signal, you will need to turn it on for each supported browser or browser extension you use. See the “DO NOT TRACK SIGNALS” section below for information on our treatment of do not track signals.

7. Notice to Nevada Residents

Nevada law allows Nevada residents to opt out of the sale of certain types of Personal Information. Subject to several exceptions, Nevada law defines “sale” to mean the exchange of certain types of Personal Information for monetary consideration to another person. We currently do not sell Personal Information as defined in the Nevada law. However, if you are a Nevada resident, you still may submit a verified request to opt out of sales and will record your instructions and incorporate them in the future if our policy changes. You may send opt-out requests to privacy@agelessai.  

8. Notice to Maryland, Nebraska and Texas Residents

The Maryland Online Data Privacy Act (“MODPA”), Nebraska Data Privacy Act (“NDPA”), and Texas Data Privacy and Security Act (“TDPSA”) require that we provide Maryland, Nebraska, and Texas residents with a privacy notice describing our online practices regarding the collection, use, disclosure, sale, sharing, and retention of Personal Information, as well as the rights available to residents of those states. This section of the Notice applies solely to Maryland, Nebraska, and Texas residents. If you are not a resident of one of these states, this section does not apply to you.

These rights are subject to applicable exceptions and limitations under law.

  • The right to confirm whether or not we are processing your Personal Information and to access such Personal Information and the categories of Personal Information we are processing or have processed;

  • The right to obtain a copy of your Personal Information that we collected from and/or about you in a portable and, to the extent technically feasible, readily usable format that allows you to transmit the information to another controller without hindrance, where the processing is carried out by automated means;

  • The right to delete personal data that we collected from and/or about you, subject to certain exceptions;

  • The right to correct inaccurate Personal Information that we maintain about you, subject to certain exceptions; and,

  • The right, if applicable, to opt out of the processing of your personal data for purposes of (1) targeted advertising; (2) the “sale” of your Personal Information (as that term is defined by applicable law); and (3) profiling in furtherance of decisions that produce legal or similarly significant effects concerning you.

You will not be discriminated against for exercising any of these rights.

Appeals

If we deny your request, residents of Texas and Nebraska may have the right to appeal our decision. Instructions for submitting an appeal will be provided in our response to your request.

Sensitive Personal Data

MODPA imposes heightened restrictions on the processing of sensitive personal data. We process sensitive personal data only as permitted by applicable law and, where required, with your consent.

 

Texas Universal Opt‑Out Signals

If you are a Texas resident, you may exercise your right to opt out of the sale of personal data or the processing of personal data for targeted advertising through a universal opt‑out signal that is legally recognized under the TDPSA, such as the Global Privacy Control (“GPC”).

Where required by applicable law, we will process such signals as valid requests to opt out for the browser or device associated with the signal. Please note that universal opt‑out signals may not apply in all contexts and may not affect data collection or processing that is necessary to provide a product or service you have requested.

How to Submit a Request

You may submit a request by email privacy@ageless.ai.

If you are submitting a request on behalf of a resident, please submit the request through email. After submitting the request, we will require additional information to verify your authority to act on behalf of the resident.

9. Notice to California Residents

The California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020 (“CCPA”), requires that we provide California residents with a privacy notice that contains a comprehensive description of our online and offline practices regarding the collection, use, disclosure, sale, sharing, and retention of Personal Information and of the rights of California residents regarding their Personal Information. This section of the Notice is intended solely for, and is applicable only to, California residents. If you are not a California resident, this section does not apply to you, and you should not rely on it.

The CCPA defines “Personal Information” to mean information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular California resident or household. Personal Information does not include publicly available, deidentified or aggregated information or lawfully obtained, truthful information that is a matter of public concern. For purposes of this “Notice to California Residents” section we will refer to this information as “Personal Information.”Notice at Collection of Personal InformationWe currently collect and, in the 12 months prior to the Last Updated date of this Policy, have collected the following categories of Personal Information:

  • Identifiers (name, Internet Protocol address, email address)

  • Unique personal identifiers (device identifier; cookies, beacons, pixel tags, mobile ad identifiers, or other similar technology; customer number)

  • Internet or other electronic network activity information (browsing history; search history; and information regarding consumer’s interaction with website, application, or advertisement)

  • Geolocation data

  • Biometric information (a photo of yourself that you upload, from which analyses of facial and body geometry and features are derived)

  • Characteristics of protected classifications under California or federal law (sex/gender), age (40 and older)

  • Inferences drawn from above information to create a profile about a consumer reflecting the consumer’s preferences, predispositions, behavior, and attitudes

We collect Personal Information directly from California residents and from advertising networks, data analytics providers, and operating systems and platforms. We do not collect all categories of Personal Information from each source.

In addition to the purposes stated above we currently collect and have collected and sold the above categories of Personal Information for the following business or commercial purposes:

  • Helping to ensure security and integrity to the extent the use of your Personal Information is reasonably necessary and proportionate for these purposes

  • Debugging to identify and repair errors that impair existing intended functionality

  • Short-term, transient use, including, but not limited to, nonpersonalized advertising shown as part of your current interaction with us, provided that your Personal Information is not disclosed to another third party and is not used to build a profile about you or otherwise alter your individual consumer’s experience outside the current interaction with us, including, but not limited to, the contextual customization of ads shown as part of the same interaction

  • Performing services including maintaining or servicing accounts, providing customer service, verifying customer information, processing payments, providing analytic services, providing storage, or providing similar services

  • Providing advertising and marketing services, except for cross-context behavioral advertising, to you provided that, for the purpose of advertising and marketing, our service providers and/or contractors shall not combine the Personal Information of opted-out consumers that the service provider or contractor receives from us, or on our behalf with Personal Information that the service provider or contractor receives from, or on behalf of, another person or persons or collects from its own interaction with you

  • Undertaking internal research for technological development and demonstration

  • Undertaking activities to verify or maintain the quality or safety of a service or device that is owned, manufactured, manufactured for, or controlled by us, and to improve, upgrade, or enhance the service or device that is owned, manufactured, manufactured for, or controlled by us

  • Advancing our commercial or economic interests, such as by inducing another person to buy, rent, lease, join, subscribe to, provide, or exchange products, goods, property, information, or services, or enabling or effecting, directly or indirectly, a commercial transaction

Sale, Sharing, and Disclosure of Personal InformationThe following table identifies the categories of Personal Information that we sold or shared to third parties for each category, the categories of third parties to whom we sold or shared Personal Information:

Category of Personal Information

 

Categories of Third Parties

 

Identifiers (name, Internet Protocol address, email address)

 

Affiliated Practices; advertising networks; data analytics providers; social media networks; joint marketing partners

 

Unique personal identifiers (device identifier; cookies, beacons, pixel tags, mobile ad identifiers, or other similar technology; customer number, unique pseudonym or user alias; telephone numbers, or other forms of persistent or probabilistic identifiers that can be used to identify a particular consumer or device)

 

Affiliated Practices; advertising networks; data analytics providers; social media networks;

Internet or other electronic network activity information (browsing history; search history; and information regarding consumer’s interaction with website, application, or advertisement)

 

Affiliated Practices; advertising networks; data analytics providers; social media networks

 

Commercial information (products or services purchased, obtained, or considered; other purchasing or consuming histories or tendencies; or other commercial information)

 

Affiliated Practices; advertising networks; social media networks

 

Inferences drawn from above information to create a profile about a consumer reflecting the consumer’s preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes

 

Affiliated Practices; advertising networks; social media networks

The following table identifies the categories of Personal Information that we disclosed for a business purpose for each category, the categories of recipients to whom we disclosed Personal Information.

Category of Personal Information

Categories of Recipients

Identifiers (name, Internet Protocol address, email address)

Subsidiaries and affiliates; marketing service providers; Affiliated Practices; operating systems and platforms

 

Credit card information

 

Payment processors

 

Internet or other electronic network activity information (browsing history; search history; and information regarding consumer’s interaction with website, application, or advertisement)

 

Subsidiaries and affiliates; marketing service providers; Affiliated Practices; operating systems and platforms; social media networks

 

Geolocation information

 

Subsidiaries and affiliates; Affiliated Practices; operating systems and platforms

 

Biometric information (a photo of yourself that you upload, from which analyses of facial and body geometry and features are derived)

Subsidiaries and affiliates; Affiliated Practices; operating systems and platforms

Characteristics of protected classifications under California or federal law (sex/gender), age (40 and older)

 

Subsidiaries and affiliates; Affiliated Practices; operating systems and platforms

Inferences drawn from above information to create a profile about a consumer reflecting the consumer’s preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes

 

Subsidiaries and affiliates; Affiliated Practices; operating systems and platforms

 

We disclosed Personal Information for the following business or commercial purposes:

  • Performing services including maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing analytic services, providing storage, or providing similar services

We do not knowingly collect, sell, or share the Personal Information of consumers under 18 years of age. We do not use Sensitive Personal Information for purposes other than those the CCPA and its regulations allow for.

Retention of Personal InformationWe retain your Personal Information for as long as necessary to fulfill the purposes for which we collect it, such as to provide you with the service you have requested, and for the purpose of satisfying any legal, accounting, contractual, or reporting requirements that apply to us.

Your RightsIf you are a California resident, you have the following rights with respect to your Personal Information:

  • The right to know what Personal Information we have collected about you, including the categories of Personal Information, the categories of sources from which we collected Personal Information, the business or commercial purpose for collecting, selling or sharing Personal Information (if applicable), the categories of third parties to whom we disclose Personal Information (if applicable), and the specific pieces of Personal Information we collected about you;

  • The right to delete Personal Information that we collected from you, subject to certain exceptions;

  • The right to correct inaccurate Personal Information that we maintain about you;

  • If we sell or share Personal Information, the right to opt out of the sale or sharing;

  • If we use or disclose sensitive Personal Information for purposes other than those allowed by the CCPA and its regulations, the right to limit our use or disclosure;

  • The right not to receive discriminatory treatment by us for the exercise of privacy rights the CCPA confers.

How to Submit a Request to Know, Delete, and/or CorrectYou may submit a request to know, delete, and/or correct by email privacy@ageless.ai . If you are submitting a request on behalf of a California resident, please submit the request through one of the designated methods discussed above. After submitting the request, we will require additional information to verify your authority to act on behalf of the California resident.

Our Process for Verifying a Request to Know, Delete, and/or Correct

We will comply with your request upon verification of your identity and, to the extent applicable, the identity of the California resident on whose behalf you are making such request. We will verify your identity either to a “reasonable degree of certainty” or a “reasonably high degree of certainty” depending on the sensitivity of the Personal Information and the risk of harm to you by unauthorized disclosure, deletion, or correction as applicable.

For requests to access categories of Personal Information and for requests to delete or correct Personal Information that is not sensitive and does not pose a risk of harm by unauthorized deletion or correction, we will verify your identity to a “reasonable degree of certainty” by verifying at least two data points that you previously provided to us and which we have determined to be reliable for the purpose of verifying identities.

For requests to access specific pieces of Personal Information or for requests to delete or correct Personal Information that is sensitive and poses a risk of harm by unauthorized deletion or correction, we will verify your identity to a “reasonably high degree of certainty” by verifying at least three pieces of Personal Information you previously provided to us and which we have determined to be reliable for the purpose of verifying identities. In addition, you must submit a signed declaration under penalty of perjury stating that you are the individual whose Personal Information is being requested.Right to Opt Out of Sale or Sharing of Personal InformationIf you are a California resident, you have the right to direct us to stop selling or sharing your Personal Information. You may submit a request to opt out of sales or sharing by emailing privacy@ageless.ai, Subject line:Do Not Sell or Share My Personal Information. To opt out of our use of third-party advertising Cookies please click on the Do Not Sell My Personal Information link in our website footer. If you have enabled privacy controls on your browser (such as a plugin), we will also treat that as a valid request to opt out. Please see the “Universal Opt-Out Mechanisms” section above for more information.Notice of Financial IncentiveAgeless AI offers programs, benefits, and other offerings related to the collection, retention, use, or sale of your Personal Information that may be deemed a “financial incentive” or “price or service difference” under the CCPA. We are providing you this information so that you may make an informed decision on whether to participate in our programs, including our Loyalty Program, Referral Program, and Exclusive Club. Participation in our promotional programs is always optional! You can end program participation at any time by contacting us at privacy@ageless.ai to unsubscribe or cancel your participation in any program. We will not discriminate against you, in any manner prohibited by applicable law, for exercising these rights. Please note that we may add or change incentive programs, or their terms by posting notice on the program descriptions and terms linked to above, so check them regularly.

Each financial incentive or price or service difference relates to the collection and use of Personal Information is based upon our reasonable, good-faith determination of the estimated value of such information to our business, taking into consideration the value of the offer or benefit itself and the anticipated revenue generation that may be realized by rewarding brand loyalty. We calculate the value of the offer and financial incentive by using the expense related to the offer. By participating in any of the referenced promotional programs, you agree that the benefits are reasonably related to the Personal Information collected, retained, used or sold.Shine the Light Law

If you are a California resident, California Civil Code § 1798.83 permits you to request information regarding the disclosure of your Personal Information by us to third parties for the third -parties’ direct marketing purposes (as those terms are defined in that statute). To make such a request, please send an email to privacy@ageless.ai with the subject line “Shine the Light Request.”

10. Washington Residents

Washington’s My Health My Data Act (“MHMDA”) requires that we provide Washington residents with a privacy notice describing the collection, use, share, protection, and retention of consumer health data as well as the rights available to Washington residents.

For purposes of this section only, “consumer health data” has the meaning set forth in MHMDA and means Personal Information that is linked or reasonably linkable to an identified or identifiable individual and that identifies the individual’s past, present, or future physical or mental health status. Consumer health data does not include personal data that is regulated as protected health information under the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”), when such data is collected, used, or disclosed in compliance with HIPAA and its implementing regulations.

Categories of Consumer Health We Collect

We may collect the following categories of consumer health data

  • Biometric Data: A photo of yourself that you upload, from which analyses of facial and body geometry and features are derived.

  • Demographic and Survey Information: When you participate in surveys, you may provide information such as gender, age, income range, ethnicity, family size, or marital status, which may be used to draw health‑related inferences depending on context.

  •  Affiliated Practice Information: When you go to an Affiliated Practice, you may provide information about your physical appearance, aesthetic goals, wellness goals, skin concerns, desired treatments, and wellness protocols you have explored in the past

  • Inferred Health Data: When you use our Services, we may generate inferences from the information you provide to help recommend products or services and personalize your experience.

Certain categories of personal data that we collect may constitute consumer health data under MHMDA depending on context, including whether the data identifies you or reasonably allows inferences about your physical or mental health

Purpose of Collecting and Using Consumer Health Data

We collect and use consumer health data only for purposes permitted under applicable law, including:

  • Provide and operate the Service, including generating and delivering AI visualizations and simulations;

  • Facilitate aesthetic consultations and treatment planning;

  • Communicate with you, including sending results, delivering marketing and educational content, deletion confirmations, and support responses;

  • Improve, maintain, and secure the Service, including analytics, troubleshooting, and research and development;

  • Detect, prevent, and investigate fraud, misuse, or security incidents; and

  • Comply with legal obligations and protect the rights, safety, and property of Ageless.

We do not collect, use, or share consumer health data for purposes beyond those disclosed in this Notice without obtaining valid consent, unless otherwise permitted by law.

Categories of Sources of Consumer Health Data

We collect consumer health data from the following sources:

  • Directly from you when you interact with our Service; 

  • From Affiliated Practices, where applicable; and 

  • Third party marketing providers

Sharing and Sale of Consumer Health Data

We do not sell consumer health data as defined in MHMDA. For more information about our sharing practices, please refer to the sections above.

Geofencing

We do not use geofencing technology around healthcare facilities for the purpose of identifying, tracking, or sending notifications related to consumer health data where prohibited by law.

Consumer Health Data Rights

If you are a Washington resident, you have the right to:

  • Confirm whether we are collecting, using, sharing, or selling your consumer health data;

  • Access your consumer health data, including a list of third parties and affiliates with whom we have shared or sold such data;

  • Withdraw consent for our collection or sharing of your consumer health data; and

  • Request deletion of your consumer health data.

Exercising your Rights

To exercise your consumer health data rights, you may submit a request via email to privacy@ageless.ai. We may require verification of your identity before processing your request. If we deny your request, you may appeal our decision using the same contact method. We will respond to appeals in accordance with applicable law.

Data Retention

We retain consumer health data only as long as necessary to fulfill the purposes stated in this Notice or as required by law, after which the data is securely deleted or de-identified.

11. Biometric Information

Illinois’ Biometric Information Privacy Act (“BIPA”) and the Texas Capture or Use of Biometric Identifier Act (“CUBA”) requires that we provide Illinois and Texas residents with a privacy notice describing the collection, use, share, protection, and retention of biometric information.

Collection and Use of Biometric Information

We may collect and process your biometric information, including facial geometry and facial feature measurements, when you upload images or otherwise use certain visualization and analysis features of the Service.

Biometric information is collected solely for the purpose of providing the Service, including generating visual outputs requested by you, facilitating consultations, maintaining platform security, improving functionality, and complying with legal obligations.

We will obtain your prior informed consent before collecting or using biometric information.

Disclosure of Biometric Information

We do not sell biometric information and do not disclose biometric information in exchange for monetary or other valuable consideration.

Biometric information may be disclosed only as permitted by law and only to:

  • Service providers and processors that assist with operating the Service and processing images on our behalf;

  • Affiliated practices involved in consultations and to administrate our Services; and

  • Parties as required by law or to protect the rights, safety, and security of the Company and others.

All recipients are contractually required to protect biometric information and are prohibited from using it for any purpose other than providing services to us.

Retention and Destruction

Biometric information is retained only for as long as reasonably necessary to fulfill the purposes for which it was collected.

Unless a shorter period applies or a longer period is required or permitted by law, biometric information is permanently deleted or irreversibly destroyed when the initial purpose for collection has been satisfied or no longer than one (1) year from the date of collection.

Your Choices and Rights

Depending on your state of residence, you may have the right to:

  • Request access to your biometric information;

  • Request deletion of your biometric information;

  • Withdraw consent to the collection or processing of biometric information; and

  • Exercise additional rights under applicable privacy laws.

Requests may be submitted by contacting us at privacy@ageless.ai. We may take reasonable steps to verify your identity before responding.

12. Notice to Canadian Residents

Consent

We process your Personal Information with your consent. We will collect and process your biometric information or other sensitive Personal Information with your express consent. In some cases, at the time of collecting your Personal Information, we may provide you with additional information regarding the processing of your Personal Information. We may also, in certain circumstances, obtain your specific consent for the use or sharing of your Personal Information, including where required by law (e.g., for the collection of biometric information).

Privacy Rights

In addition to the privacy rights set forth in section 6 of this Privacy Notice, you have the:

  • Right to withdraw your consent to the collection, use and disclosure of Personal Information in accordance with this Privacy Notice at any time upon reasonable notice to us in writing, subject to legal or contractual restrictions. The withdrawal of your consent may affect our ability to provide the Services. In certain situations, we may be entitled to retain your Personal Information in order to comply with applicable legal requirements, to establish, exercise or defend our rights or legal claims, and for other legitimate business purposes described therein.

  • Right to change your cookies preferences when you visit our website. By default, only necessary cookies are activated on our website. You can choose to enable or disable some or all of these cookies, but disabling some of them may affect your browsing experience.

  • Right to revoke your consent at any time and unsubscribe from our marketing communications. You may revoke your consent by clicking on the link provided in every newsletter or by using the contact details below to send a message. 

13. Cookies and Tracking Choices

Our Affiliated Practices may choose to integrate certain tracking technologies when using the Ageless product. This may include the use of Meta Pixel, TikTok Pixel, Google Ads and/or Google Analytics with the purpose of aiding in their own analytics. You can opt out of the use of Google Analytics by downloading an add-on for your web browser, here .

You can control cookies through your browser settings. Disabling cookies may limit certain functionality of the Service. Some advertising partners may also provide opt-out mechanisms directly.

For more information about your choices regarding online tracking, you may visit the Digital Advertising Alliance's opt-out page at www.aboutads.info/choices or the Network Advertising Initiative's opt-out page at www.networkadvertising.org/choices .

14. Do Not Track Signals

Your browser settings may allow you to automatically transmit a “Do Not Track” signal to online services you visit. Note, however, there is no consensus among industry participants as to what “Do Not Track” means in this context. Like many online services, we currently do not alter our practices when we receive a “Do Not Track” signal from a visitor’s browser. To find out more about “Do Not Track,” you can visit https://www.allaboutdnt.com , but we are not responsible for the completeness or accuracy of this third-party information.

15. Marketing Communications

You may opt out of receiving marketing emails or text messages from us at any time. To stop marketing emails, click on the “unsubscribe” link included in any email we send. To stop marketing text messages, reply STOP to any message. You may receive a confirmation message acknowledging your request. Opting out of marketing communications does not affect your receipt of transactional or service-related messages. Messages and data rates may apply.

16. Children

The Service is not directed to individuals under 18 years of age, and we do not knowingly collect Personal Information from anyone under 18 through the Ageless platform. If we learn that Personal Information has been collected from someone under 18, we will take reasonable steps to delete the information promptly. If you believe biometric or other Personal Information has been inadvertently collected from a minor, please contact Ageless.

17. Security

Ageless takes reasonable administrative, technical, and organizational measures to protect Personal Information from unauthorized access, loss, misuse, or alteration. These measures include encryption, access controls, and regular security assessments. However, no system is completely secure, and absolute security cannot be guaranteed.

18. International Users

The Service is intended for use in the United States and Canada. Information may be processed and stored in the United States. If you access the Service from outside the United States and Canada, please be aware that your information may be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your jurisdiction.

19. Changes to This Privacy Notice

We may update this Privacy Notice from time to time to reflect changes in our practices or applicable law. If we make material changes, we will provide appropriate notice (such as by posting a notice on our website or in our office) and update the "Last Updated" date at the top of this Privacy Notice. Continued use of the Service after such changes indicates your acceptance of the revised Notice.

20. Contact Us

For questions about this Privacy Notice, privacy requests, deletion requests, or other inquiries, please contact:

By mail, Ageless AI LLC,  228 Park Ave S, PMB 675181 New York, NY 10003-0103. 

By email, privacy@ageless.ai

Powered by
© 2026 Ageless.ai. Built to restore clarity in aesthetics.