Privacy Policy

1. Information We Collect

Depending on how you use Mehndi Lab, we may collect:

• Account information — name, email address, phone number where provided, password/authentication information, country or region, and account preferences.
• Subscription information — subscription plan, status, billing period, purchase date, renewal date, cancellation information, and transaction and invoice information.
• Payment information — payments are processed through Stripe. We do not store complete credit-card or debit-card numbers on Mehndi Lab's own systems. Stripe may independently process payment information according to its applicable privacy policy and agreements.
• Design information — designs you create, selected design elements, customization settings, saved designs, generated designs, download activity, design preferences, and stencil configurations.
• User-uploaded content — photographs, sketches, reference designs, images, and other User Content, where supported.

2. Automatically Collected Information

We may automatically collect IP address, browser type, operating system, device information, approximate location, pages visited, referring pages, access times, interaction information, error logs, and security information.

This information helps us operate, secure and improve Mehndi Lab.

3. How We Use Your Information

We may use personal information to:

• Create and manage your Account
• Provide subscription services
• Process payments
• Provide digital downloads
• Operate the Design Tool
• Save your designs
• Provide customer support
• Send service communications
• Manage billing
• Prevent fraud
• Protect Platform security
• Troubleshoot technical issues
• Analyze Platform usage
• Improve Mehndi Lab
• Develop new features
• Provide requested AI/design functionality
• Send marketing communications where permitted
• Comply with applicable law

4. Legal Basis for Processing

Depending on the circumstances, we may process personal information based on your consent, performance of a contract with you, compliance with legal obligations, legitimate business purposes where legally permitted, protection of our systems and users, or other lawful grounds under applicable law.

The UAE Personal Data Protection Law establishes a federal framework governing personal-data processing and protection.

5. Payment Processing – Stripe

Mehndi Lab uses Stripe to process subscription payments. When you make a payment, relevant information may be transmitted to Stripe, including information necessary to process the transaction.

Stripe may process information such as payment details, transaction information, billing information, subscription information, fraud-prevention information and related technical information. Stripe may act as a data processor and/or independent data controller depending on the particular processing activity. Stripe maintains its own privacy policy and data-processing documentation; users should review Stripe's privacy documentation for information about Stripe's independent processing activities.

6. Design Tool and AI Processing

Mehndi Lab may use automated technologies and AI-assisted services to provide design customization and generation features. When you use these features, information necessary to provide the requested functionality may be processed by Mehndi Lab and relevant technology providers.

We will take reasonable steps to ensure that service providers processing personal information on our behalf are subject to appropriate contractual and security requirements. AI-generated designs may not always be unique.

7. User Content

If you upload photographs or other User Content, we process that information to provide the functionality you request. You remain responsible for ensuring that you have appropriate permission to upload content containing other people.

Please do not upload:

• Emirates IDs
• Passports
• Payment-card details
• Medical information
• Passwords
• Confidential business information
• Unnecessary sensitive personal information

8. Cookies

Mehndi Lab may use cookies and similar technologies for login functionality, account security, preferences, analytics, performance monitoring, fraud prevention, and marketing measurement where permitted.

You may control cookies through your browser or available cookie-management settings. Disabling certain cookies may affect Platform functionality.

9. Marketing

Where legally permitted and where you have provided the appropriate consent or other lawful basis, we may send newsletters, product updates, new design announcements, promotions, special offers, and educational content.

You may unsubscribe from marketing emails at any time using the unsubscribe option provided in the communication or by contacting info@mehndilab.com. Transactional communications such as billing, security and Account notices may still be sent.

10. Information Sharing

We do not sell your personal information as a standalone product. We may share information with service providers necessary to operate Mehndi Lab, including:

• Stripe
• Cloud-hosting providers
• Database providers
• Authentication providers
• Email providers
• Analytics providers
• AI/design technology providers
• Cybersecurity providers
• Customer-support providers
• Professional advisers
• Government authorities where legally required

11. International Data Transfers

Some service providers used by Mehndi Lab may operate outside the United Arab Emirates. Accordingly, personal information may be processed or stored in other jurisdictions. Where required, we will implement appropriate safeguards for international transfers in accordance with applicable data-protection requirements. Stripe also maintains its own international data-transfer mechanisms and documentation.

12. Data Security

We use reasonable technical and organizational measures to protect personal information from unauthorized access, alteration, disclosure, loss or misuse. However, no online system can be guaranteed to be completely secure. You are responsible for protecting your Account credentials.

13. Data Retention

We retain personal information for as long as reasonably necessary for providing our services, maintaining your Account, processing subscriptions, maintaining financial records, preventing fraud, resolving disputes, enforcing our agreements, complying with legal obligations, and maintaining security.

When information is no longer required, we may delete, anonymize or securely dispose of it, subject to applicable legal requirements.

14. Your Privacy Rights

Subject to applicable law, you may have rights including the ability to:

• Request access to your personal information
• Request correction of inaccurate information
• Request deletion where legally applicable
• Request restriction of processing
• Object to certain processing
• Withdraw consent where applicable
• Request information about processing
• Exercise other rights provided under applicable data-protection law

15. Account Deletion

You may request deletion of your Mehndi Lab Account by contacting info@mehndilab.com. Deleting your Account may result in loss of saved designs, design history, preferences, download history, and subscription information associated with the Account.

We may retain certain information where required by law or reasonably necessary for accounting, fraud prevention, dispute resolution, security or enforcement purposes.

16. Children's Privacy

Mehndi Lab is not specifically directed toward children. We do not knowingly collect personal information from children in violation of applicable law. If you believe a child has provided personal information to us without appropriate authorization, please contact us.

17. Third-Party Websites

Mehndi Lab may contain links to third-party websites or services. We are not responsible for the privacy practices of third parties. You should review the relevant third party's privacy policy before providing personal information.

18. Data Breaches

If we become aware of a personal-data security incident requiring notification under applicable law, we will take appropriate steps to investigate, mitigate and notify relevant parties or authorities as required.

19. Commercial Use License

Mehndi Lab is designed for professional henna artists, mehndi artists, salons, bridal artists, beauty businesses and other professionals who use henna designs as part of their services.

Subject to your active subscription and compliance with our Terms, Mehndi Lab grants you a limited, non-exclusive, non-transferable license to use downloaded and generated designs for commercial henna services. Subscribers may use Mehndi Lab designs to:

• Provide paid henna services to clients
• Create bridal henna designs for paying customers
• Create mehndi designs for weddings and events
• Provide henna services through salons or beauty businesses
• Print and use permitted designs as physical henna stencils
• Apply the resulting henna artwork to clients
• Use the resulting physical henna artwork in their professional portfolio
• Photograph completed henna work for their own business portfolio
• Display completed henna work on their website and social-media accounts
• Use completed henna artwork in advertising their henna services
• Use customized designs created through Mehndi Lab as part of their client services

20. What Commercial Use Does Not Include

Your subscription does not give you ownership of Mehndi Lab's original designs, artwork, software or design library. You may not:

• Resell Mehndi Lab digital designs
• Sell downloaded stencil files
• Sell Mehndi Lab designs as digital products
• Upload Mehndi Lab designs to digital marketplaces
• Distribute downloaded designs to other artists
• Share design files with clients for independent use
• Create a competing design library
• Provide downloaded designs to another business for its own use
• Sublicense Mehndi Lab designs
• Claim Mehndi Lab's original artwork as your own
• Use Mehndi Lab designs to create a competing subscription or design platform
• Systematically reproduce or redistribute substantial portions of the Mehndi Lab design library

21. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The updated version will be published on the Mehndi Lab website with a revised “Last Updated” date. Where appropriate and legally required, we may notify users of material changes.

22. Governing Law

This Privacy Policy is governed by applicable laws of the United Arab Emirates, including applicable UAE data-protection legislation.

23. Contact Us

Operated by Megan Technical and Marketing Services FZE, SRTIP Free Zone, Sharjah, United Arab Emirates.

Email: info@mehndilab.com · Website: www.mehndilab.com. For privacy requests, please use info@mehndilab.com.