Privacy Policy

Effective 16 September 2026 · XP Farm Studio, Portugal

XP Farm Studio, Portugal operates Make Me Look and is the data controller for the information described here. This page explains exactly what the service stores, where it goes, and how to get rid of it.

What we collect, and how long we keep it

What	Why	Kept for
Your Slack user and workspace IDs	To know whose picture and which workspace's credits	Until the app is removed
Your original profile picture	So `reset` can put it back, and so each generation restyles the real you	Until you run `reset`, or ask us to delete it
Your prompts	To generate the image, and to reuse the result if you repeat a prompt	6 days
Generated images	To show you the result and let you apply or post it	7 days
A Slack access token	To read your picture and, if you ask, change it or post as you	Until the app is removed or access revoked
Credit balance and purchase records	To meter usage and account for payments	While the workspace exists; purchase records as long as tax law requires
Your email address, if you give it	To tell you about the beta	Until you ask us to remove it

We do not collect your Slack messages, channels, or files. The app cannot read conversations, and asks for no scope that would let it.

Where your picture goes

Generating an image means sending your profile picture and your prompt to OpenRouter, which routes it to the image model — currently Meta's Muse Image. Your picture leaves our systems to do this. It is the one transfer that matters most, so we are stating it plainly rather than burying it.

We do not use your images or prompts to train any model, and we do not sell or share them with anyone beyond the processors below. We cannot control what those providers do under their own terms, so read theirs if it matters to you.

Slack — the app runs there; your picture comes from and can be written back to your Slack profile.
OpenRouter, and through it the image model provider — image generation.
Amazon Web Services — hosting and storage, in the London region (eu-west-2).
PayPal — payment processing, if you buy credits. We receive confirmation that a payment completed, not your payment details.

Legal basis

We process this data to provide a service you asked for (performance of a contract), and to run and bill for it (legitimate interests). Beta emails are sent because you gave us the address for that purpose, and you can withdraw that at any time.

Your rights

You can ask for a copy of your data, ask us to correct it, ask us to delete it, or object to how we use it. Write to contact@xpfarmstudio.com and we will respond within two business days.

Two things you can do without asking us: run reset to restore and remove your stored original picture, and remove the app from your Slack workspace, which revokes our access. If you are in the EU or UK and are unhappy with how we have handled this, you can complain to your data protection authority — in Portugal, the CNPD.

Security

Data is encrypted in transit and at rest. Access tokens and payment credentials are held in a managed secret store, not in configuration or code. Stored images sit in a private bucket that is not publicly readable. No system is perfectly secure, and we will tell affected users promptly if something goes wrong.

Children

The service is not intended for anyone under 16, and we do not knowingly collect their data.

Changes

We will update this page when our handling changes and move the effective date. If a change is significant, we will say so rather than leave you to notice.