Data Privacy Policy

Last Updated: February 10, 2025

This Data Privacy Policy (“Policy”) describes how styleadvice.ai (“we,” “us,” or “our”) collects, uses, and discloses personal data when you visit or use the services provided via styleadvice.ai (the “Website”). It also explains your rights and how to exercise them. By accessing or using the Website, you agree to the collection and use of information in accordance with this Policy.

1. Age Requirement

This Website is intended solely for individuals who are 18 years of age or older. By using the Website, you represent and warrant that you meet this requirement. We do not knowingly collect or process personal data from individuals under the age of 18. If you believe we may have collected personal data from someone under 18, please contact us immediately so we can delete it.

2. Data Controller

For the purposes of the European General Data Protection Regulation (GDPR) and other applicable data protection laws, styleadvice.ai is the “data controller” responsible for the processing of your personal data.

3. Personal Data We Collect

We collect only the minimum amount of personal data necessary to provide and improve our services. The data we collect includes:

• Email Address: Provided by you during account registration and/or purchase.
• Images: Uploaded by you for face analysis.

We do not collect addresses, phone numbers, billing information, or social media handles. Payment processing information (e.g., credit card details) is handled directly by our payment processor and is not stored on our servers.

4. Purpose and Legal Basis for Processing

We process personal data for the following purposes:

• Account Registration: To create and manage your user account.
• Payment Processing: To facilitate one-time payments via our payment provider (Stripe).
• Service Provisioning: To analyze uploaded images and deliver AI-powered styling recommendations.
• Analytics: To understand how users interact with our Website and services in order to improve them (using internal analytics only).
• Marketing Newsletters: To send you emails about new features, promotions, or updates if you have consented to receive such communications.

Our legal basis for processing personal data is consent. By using our services and/or explicitly consenting (for example, by checking a box during sign-up), you agree to our use of your personal data as outlined in this Policy.

5. How We Use AI and Automated Processing

Our face analysis uses artificial intelligence (“AI”) provided by OpenAI and our own models to generate styling recommendations. This process is automated, but it does not produce legal or similarly significant effects on individuals. The analysis is provided solely for informational and entertainment purposes and should not be considered medical or psychological advice.

6. Data Sharing and Recipients

We share personal data with the following third parties for the purposes described above:

• Stripe (Payment Processor): We provide your email address for payment processing and transaction confirmations. Payment details are collected directly by Stripe.
• Email Service Provider (Sendgrid): We share your email address to send you marketing newsletters or essential service updates.
• Hosting Providers (Render.com): Your uploaded images and other data are stored on servers operated by our hosting provider. Render.com servers are located in the United States.
• OpenAI: Your images are temporarily shared with OpenAI’s API to perform the face analysis. OpenAI’s infrastructure may also be located in the United States.

We do not sell or rent your personal data to third parties.

7. Cookies and Tracking Technologies

We use essential cookies to enable core functionalities of our Website, such as user authentication, and analytics cookies for internal usage statistics. We do not use third-party analytics services or external tracking pixels. By using the Website, you consent to our use of cookies.

8. International Data Transfers

Personal data, including images, may be transferred outside the European Economic Area (EEA), specifically to the United States, for processing by our hosting providers (Render.com) and AI service provider (OpenAI). Currently, we do not have Standard Contractual Clauses (SCCs) or other GDPR-compliant mechanisms in place. By using our services, you acknowledge and consent to these transfers.

We strive to implement appropriate safeguards to protect your data, but you understand that data protection regulations in the United States may differ from those within the EEA.

9. Data Retention

We retain your personal data for as long as necessary to fulfill the purposes for which it was collected. This means:

• Account-Related Data and Email: Retained until you request deletion of your account or otherwise opt out.
• Uploaded Images: Stored for as long as you want to keep them. You can request deletion at any time by contacting us.
• Marketing Communications: Retained until you unsubscribe or request removal.

We will delete or anonymize your personal data upon your request or when it is no longer needed for the purpose(s) for which it was collected, unless we are required by law to retain it.

10. Your Data Subject Rights

Under the GDPR, you have the right to:

• Access: Request information about how we process your data and obtain a copy of it.
• Rectification: Request that we correct inaccurate or incomplete data.
• Erasure (Right to be Forgotten): Request deletion of your personal data.
• Restriction: Request that we limit the processing of your personal data under certain circumstances.
• Portability: Receive your personal data in a structured, commonly used, and machine-readable format and have the right to transmit it to another controller.
• Object: Object to processing based on legitimate interests or for direct marketing purposes.
• Withdraw Consent: Where processing is based on consent, you can withdraw that consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.

To exercise any of these rights, please contact us at contact@styleadvice.ai.

11. Security Measures

We employ industry best practices to protect your personal data, including but not limited to: encryption in transit (HTTPS), secure hosting environments with access controls, and regular reviews of our data collection and storage practices.

12. Marketing Communications

If you have opted in to receive marketing newsletters or promotional emails, we may send you updates and information. You can unsubscribe at any time by clicking on the “unsubscribe” link in any marketing email or by contacting contact@styleadvice.ai.

13. Complaints

If you have a complaint about our data protection practices, you have the right to lodge a complaint with your local supervisory authority. As we are based in Estonia, our lead authority is the Estonian Data Protection Inspectorate. For more information, you can visit https://www.aki.ee/en.

14. Updates to This Policy

We may update this Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. Any changes will be posted on this page with an updated “Last Updated” date. By continuing to use the Website after such changes are posted, you agree to the revised Policy.

15. Contact Us

If you have questions or concerns regarding this Policy or our privacy practices, please contact us at:

Email: contact@styleadvice.ai

By using styleadvice.ai, you acknowledge that you have read and understood this Policy and that you are at least 18 years old.