Privacy Policy

1. Who We Are

Aesthetic AI Marketing is a service operated by Magerience LLC, a Kentucky limited liability company doing business as “Aesthetic AI Marketing.” Our mailing address is 348 E Main St, Lexington, KY 40515, United States. In this policy, “we,” “us,” and “our” refer to Magerience LLC.

We provide a done-for-you social media marketing service (the “Service”) for aesthetic and medical practices, featuring an AI assistant named Mila. The Service connects to a practice’s Facebook and Instagram accounts, generates marketing content such as posts, images, and reels, schedules and publishes that content, and reports on how it performs.

This policy covers information we collect through our website at aestheticaimarketing.com and through the Aesthetic AI Marketing application, including our iOS app.

2. Information We Collect

We collect the following categories of information:

Account information

When you sign in with Facebook, we receive your name, email address, and basic profile information from your Facebook account. Facebook OAuth is our only sign-in method.

Practice and brand information you provide

To build and run your marketing, you may provide information about your practice, including:

• Team member names, titles, and photos
• Procedures and services you offer
• Brand colors, logo, and other brand assets
• Testimonials and reviews
• Photos and videos you upload, including office, team, and — only with your explicit consent — before/after photos

Connected social media data

When you connect your Facebook and Instagram accounts, we access page and account content, posts, comments, and engagement metrics through Meta’s APIs, and we publish content to those accounts on your behalf.

Payment information

Payments are processed by Stripe. We do not store your full card number; Stripe handles card details directly.

Communications data

If you opt in to SMS notifications, we collect your phone number. We use your email address to send you service-related notifications.

Usage data

We automatically collect certain technical information when you use the Service, including your IP address, browser and device type, and the pages you visit.

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Service
• Create, schedule, and publish marketing content on your behalf
• Analyze engagement and report on the performance of your content
• Send transactional and service notifications by email, by SMS if you have opted in, and by mobile push notification if you have enabled it
• Process billing and manage your subscription
• Improve and develop the Service
• Maintain the security of the Service and prevent fraud and abuse

4. AI Processing

Our content generation relies on third-party AI providers, specifically OpenAI and Anthropic. Text, brand information, and images you provide may be sent to these providers so they can generate your marketing content.

We do not use your data to train our own models. We access these providers under API terms that state they do not use data submitted through their APIs to train their models.

5. Facebook and Instagram Platform Data

We use data received from Meta Platforms solely to provide the Service to the practice that connected the account, consistent with Meta’s Platform Terms. We do not sell this data or use it for unrelated purposes.

You can disconnect your Facebook and Instagram accounts at any time from your account Settings. You may also request deletion of platform data we hold by contacting us at the address below.

6. Cookies and Analytics

We use one essential session cookie, named mila_session, to keep you signed in. It is set as HttpOnly and expires after 7 days of inactivity.

On our marketing website, we use Google Analytics (gtag.js) to understand how visitors use the site. You can opt out of Google Analytics by installing the Google Analytics opt-out browser add-on. We do not use advertising cookies.

7. Visitor Activity on Preview Pages

For prospective customers, we sometimes create personalized preview pages at URLs under /for/. On these pages we collect first-party, server-side page-activity signals — such as page views, time on page, and interactions — to gauge interest.

These pages use no third-party advertising trackers, no cross-site tracking, and no device fingerprinting.

8. How We Share Information

We do not sell your personal information. We share information only with service providers (“subprocessors”) that help us run the Service. These include:

• Meta Platforms— social publishing and account data
• Stripe— payment processing
• Twilio— SMS messaging
• Resend— email delivery
• Apple— mobile push notifications
• Google— website analytics
• OpenAI and Anthropic— AI content generation
• Supabase— database and storage hosting
• Vercel— application hosting

We may also share information to comply with the law or a valid legal request, in connection with a business transfer such as a merger or acquisition, or with your consent.

9. Data Retention

We retain your information while your account is active and for as long as needed to provide the Service. After your account is closed, we delete or anonymize your information, subject to any legal obligations that require us to keep it longer. You may request deletion sooner by contacting us.

10. Security

We use industry-standard measures to protect your information, including encryption in transit and access controls. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

11. Your Rights and Choices

You have choices about your information:

• You may access, correct, delete, or export your information.
• You can opt out of SMS messages by replying STOP.
• You can disable push notifications in your device settings.
• You can unsubscribe from non-essential email at any time.
• Depending on where you live — for example, under the EEA and UK GDPR or the California CCPA/CPRA — you may have additional statutory rights.

To exercise any of these rights, contact us at the address below. We will not discriminate against you for exercising your rights.

12. Health Information

The Service is a marketing tool for practices, not a medical-records system. We are not a HIPAA business associate, and the Service must not be used to transmit protected health information.

Practices are responsible for obtaining appropriate patient consent before uploading any patient-identifiable content, such as before/after photos or testimonials.

13. Children's Privacy

The Service is not directed to anyone under 13 years of age, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us and we will remove it.

14. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you through the Service or by email. The “Last updated” date at the top of this page reflects the most recent revision.

15. Contact Us

If you have questions about this Privacy Policy or how we handle your information, contact us at michael@aestheticaimarketing.com.

Magerience LLC
d/b/a Aesthetic AI Marketing
348 E Main St
Lexington, KY 40515
United States