Privacy notice

This notice covers glowlabguide.com. Contact Glow Lab Guide at hello@glowlabguide.com about this notice or your information.

Browsing and optional analytics

Our hosting provider processes technical request information, such as IP address, browser details, requested pages and security logs, to deliver and protect the site. This happens when a page is requested.

Google Analytics is optional. It starts on outside the EEA, UK and Switzerland unless you opt out. In those regions, or when location is unavailable, it waits for your opt-in. Our hosting provider supplies the country used for this initial setting; the analytics-policy endpoint returns only the setting, not your IP or country. Saved opt-outs, Global Privacy Control, Do Not Track and internal-testing exclusions take priority. It can process page visits, referring sites, device/browser information, approximate location and interactions such as guide requests or download clicks. We do not intentionally send email addresses, uploaded photos or verification tokens as analytics events. We disable advertising consent and Google Signals in the site tag.

You can reject or withdraw optional analytics in Cookies & settings. Rejecting analytics does not prevent access to the site or free guide.

Guide requests and updates

When you enter your email, we send a confirmation message through Resend. The current form offers the guide and occasional emails about Seoul clinic prices and new guides. You become an updates subscriber only after confirming. We record the signup version, confirmation time and unsubscribe choice. Earlier guide-only requests do not automatically grant permission for updates.

Unsubscribe using the link in your email or contact us to request deletion. Email delivery providers process recipient addresses, message contents and delivery records. The form uses an IP-derived hash for abuse controls; this is not a claim that technical data is anonymous.

Quote checking, photo reading and public contributions

Typed checker inputs stay in your browser unless you choose to add the quote to the index. Selecting a photo for AI reading sends that photo to our server and OpenAI to extract clinic and price information. Review the result: automated extraction can be wrong.

If you choose “Add my quote to the index,” we store the submitted clinic, district, treatment, price, consultation language, quote type/date and any extracted fields. We also store a salted IP hash for abuse review. An attached photo is saved in private storage for verification, not deliberately published. Relevant quote details may appear publicly and contribute to price statistics.

Redact names, faces, contact details, patient identifiers, diagnoses, payment information and other private details before uploading. We request price evidence, not medical records. Redaction must be done before choosing the file. You can type a price instead.

Contact messages and service providers

If you email us, we use your address, message and attachments to respond and keep a record of the enquiry. Branded email is handled through Resend and a Gmail inbox.

Our service providers include Vercel (hosting), Supabase (database/private storage), Resend and Google (email), Google Analytics (optional measurement), and OpenAI (photo extraction). Providers may process information in countries other than your own. Their contractual and privacy terms also apply to their processing; this notice does not promise local-only storage or zero provider retention.

• Vercel privacy notice
• Supabase privacy policy
• Resend privacy policy
• Google privacy policy
• OpenAI API data controls

Purposes and choices

We use your requested information to provide the guide, read a photo, publish a voluntary price contribution or answer an enquiry. Optional analytics and updates rely on your choice. Site security, abuse prevention, maintaining evidence and handling requests support the legitimate operation of the site, subject to applicable law. We do not sell personal information or give signup lists to clinics for marketing.

How long information stays

We retain active email subscriptions while updates are requested. After unsubscribe, an address and minimal consent/suppression information may remain to honour that choice and avoid re-subscribing you through an old link.

Quote contributions, private photos, extraction records and correspondence currently have no automatic expiry in our application. They may be retained for the price index, evidence review, handling the enquiry or resolving abuse/disputes. You can request removal; retention is assessed against those purposes and any applicable legal requirements. Provider logs, backups and analytics records have separate provider settings and deletion cycles, so removal is not necessarily immediate everywhere. We do not promise that unsubscribing deletes all past records.

Your requests

Depending on applicable law, you may have rights to access, correct, delete or obtain a copy of information, restrict or object to processing, withdraw consent, or complain to a data-protection authority. Email us with the relevant signup address or contribution reference. Avoid sending extra sensitive information. Removing browser cookies does not delete information already submitted.

Changes

We update this notice when our practices change and show the date above. A new use that requires consent will require the appropriate choice; a policy update alone does not opt you in.