Privacy & your data

Plasti AI is operated by rsnc.tech.

Illustration

Continuing from the first step confirms you are an adult using your own photo alone and permits processing for illustrations you choose to create during that open tab session. A resized copy stays in browser memory until you leave or refresh. When you select a procedure and create an illustration, the photo is uploaded to private Supabase storage and sent to OpenAI for processing. A private copy is kept for manual founder quality checks for a few days after generation, then manually deleted. An illustration does not predict a treatment result. Removing the local photo, closing or refreshing the tab, or going Back does not delete server copies.

Images are not included with interest enquiries, shared with practices or reused by Plasti AI for training. OpenAI API data is not used for training by default. Its standard abuse-monitoring logs may retain API content for up to 30 days, and some safety-flagged image inputs may be retained for review. These provider periods are separate from Plasti AI storage; deleting Supabase copies does not delete provider-controlled copies. This pilot does not promise zero retention.

Consent and requests

We store the selected procedure, processing consent version and receipt time, request reference and review status. Request access, withdrawal or deletion at hello@plasti.ai with your reference; do not email photos or clinical details. Email is forwarded to the founder. An AI illustration does not predict a treatment result.

Optional contact

After a successful interest submission, the selected contact method, contact detail and PIN are held only in browser memory for prefill if you try another procedure in the same open tab. Each new procedure requires fresh contact consent and a separate submission. This information clears when you finish, close or refresh the tab. Consented email/phone, PIN and procedure interest are stored separately in Supabase for founder follow-up, with no practice sharing or marketing. Enquiries are reviewed after 30 days; this is not automatic deletion.

Technical data

Turnstile checks protect the simulation and enquiry flows. The hosting services receive connection information. Application logs and analytics exclude images, contacts, prompts, invite codes and signed image URLs. The installed app caches only icons and an offline notice. Photos and requests are not cached for offline use.

Notice updated 28 September 2026.