Privacy Policy — Outfit Styler

This policy explains what data Outfit Styler collects, why, and how it's handled.

1. What we collect

Account data — email address and an authentication identifier (managed by our auth provider, Supabase) when you sign up.
Style brief inputs — the occasion, budget, colors, and other text you enter into the brief form.
Uploaded images — photos of yourself, anchor garments, and inspiration images you choose to upload.
Saved looks — try-on images and product lists you choose to save while signed in.
Cookies & local storage — to remember consent choices, session, and your saved looks. See section 6.

2. How we use it

To generate outfit concepts, match products, and produce AI try-on images.
To remember your preferences within a session.
To save looks you explicitly save.
To improve the service (in aggregate, not individually identifiable form).

3. Sub-processors

We share necessary data with the following providers, only to deliver the service:

OpenAI — receives your style brief text and any uploaded images to generate outfit concepts and AI try-on images. OpenAI does not use API submissions to train models. OpenAI API data usage.
Supabase — handles authentication and (optionally) stores your saved looks.
Hosting — Cloudflare Pages (planned) for serving the site.

4. Retention

Uploaded photos (face/personal): held only for the duration of the active try-on session, then automatically deleted from our servers. The client browser may retain a copy in memory until you close the tab.
Anchor item & inspiration images: deleted once try-on generation completes for that session.
Saved looks: retained until you delete them or your account.
Account: retained until you request deletion. Deletion within 30 days of request.
Server logs: rotated every 30 days.

5. Your rights (GDPR / CCPA / equivalent)

You have the right to:

Access the data we hold about you.
Correct inaccurate data.
Delete your data ("right to erasure").
Withdraw consent (e.g. revoke photo-upload consent — clears stored consent record on this device).
Port your data to another service.
Object to specific processing.
Lodge a complaint with your local data protection authority.

Email privacy@outfitstyler.example (placeholder) to exercise any right.

6. Cookies & local storage

Strictly necessary: session cookies for authentication and the in-progress styling session.
Functional: local storage for cookie-banner choice, photo-upload consent record, and UI preferences. Not used for tracking.
Analytics / advertising: none currently. Any future addition will require fresh consent.

7. Children

The service is not directed to anyone under 18. We do not knowingly collect data from minors. If you believe a minor has used the service, contact us and we will delete their data.

8. International transfers

Sub-processors (OpenAI, Supabase, Cloudflare) may process data in jurisdictions outside the EU/UK, including the United States. Where required, transfers rely on Standard Contractual Clauses or equivalent safeguards.

9. Changes

If this policy changes materially we will notify you in-product before the change takes effect.

10. Contact

privacy@outfitstyler.example (placeholder until the company domain is set up).