Try it

Legal

Privacy Policy

Last updated: March 2026

This policy describes how Outfitcheck Style collects, uses, and protects the personal data of its users.

Data We Collect

We collect: account details (name, email address, profile information via OAuth authentication), uploaded images and generation parameters, technical usage signals (IP address, browser type, operating system, pages visited, timestamps), transaction and billing data managed through payment processors, support messages and optional attachments, and optional product survey responses.

How We Use Data

Data is used to: deliver AI virtual try-on services, manage accounts, billing, and credits, secure accounts and prevent abuse, improve service reliability and performance, send service communications and transaction confirmations, and measure product performance through anonymized analysis. Uploaded content is not used to train AI models.

Legal Basis for Processing (GDPR)

We process account, generation, and billing data under contract performance (Art. 6(1)(b) GDPR). We process security, abuse-prevention, and reliability data under legitimate interests (Art. 6(1)(f) GDPR). Usage analytics are processed only after your explicit consent (Art. 6(1)(a) GDPR), are limited to anonymized events, and do not include directly identifying fields. Optional marketing or advertising cookies are processed only based on explicit consent (Art. 6(1)(a) GDPR).

AI Processing and Generated Content

Outfit results are generated through AI processing, including third-party AI processing infrastructure. Processing is transient and performed solely to fulfil your request. No third-party processor uses your input data to train AI models. Outputs are synthetic content and may contain inaccuracies, visual artifacts, or imperfect fits. Outfitcheck Style does not guarantee the accuracy or quality of generated results. In accordance with Article 50 of Regulation (EU) 2024/1689 (EU AI Act), we apply AI-origin transparency measures and require truthful representation of AI-generated content when shared publicly.

Data Sharing

We share data only with the categories of providers necessary to operate the service: database and storage infrastructure, payment processing, transactional email, anonymized usage analytics, and AI processing infrastructure. We may also disclose data for legal compliance, protection of user rights and safety, or in the context of a corporate reorganization with prior notification to users. We do not sell personal data. An updated list of our sub-processors is available at outfitcheck.style/legal/subprocessors.

International Data Transfers

Some of our sub-processors may process data outside Romania and the EU/EEA, including in the United States. Each third-party processor is contractually required to comply with GDPR through Data Processing Agreements (DPAs) that include, where applicable, the Standard Contractual Clauses adopted by the European Commission.

Cookies and Tracking

We use essential cookies for authentication, sessions, and core app functionality. We use OpenPanel, an EU-hosted usage analytics service configured to operate without persistent tracking cookies. Analytics run only after your explicit consent and are limited to anonymized events without directly identifying fields.

Retention

Account data and generated content are retained until you delete them or close your account. Security logs and payment records are retained for legally required periods. Temporary AI processing inputs are deleted automatically by the AI processor within up to 1 hour.

Your Rights

Under GDPR, you have the right to: access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), portability (Art. 20), objection (Art. 21), and the right to withdraw consent at any time without affecting the lawfulness of prior processing. You also have the right to lodge a complaint with the national supervisory authority: ANSPDCP — www.dataprotection.ro. To exercise any of these rights, contact us at the address below.

Security

We use encrypted transport (TLS/HTTPS) for all communications, organization-scoped access controls, private storage for images and account data, and monitoring for security incidents. In the event of a security incident affecting your personal data, you will be notified in accordance with applicable law.

Changes to This Policy

We may update this policy periodically. Material changes will be communicated via email or a prominent notice within the application at least 14 days before taking effect. Continued use of the service after notification constitutes acceptance of the updated policy.

Contact

For privacy requests or to exercise your rights: contact@outfitcheck.style