Privacy Policy

1. Introduction

OutfitChange renders AI outfit previews from a photo you upload. That photo is personal, so this policy explains exactly what we collect, how it is used to render your previews, where it is stored, and how to delete it. It covers the website, the fitting-room workflow and credit purchases.

By accessing or using our services, you acknowledge that you have read and understood this Privacy Policy.

2. Information We Collect

We collect information directly provided by you, automatically recorded through your usage, and received from authorized third parties:

1. Account Information — When you sign up or log in, we collect your name, email address, avatar, and authentication identifiers (such as OAuth providers via Google, GitHub, or email verification).
2. Photos, Garment References & Previews — We collect the full-length photo you upload, the garment reference images you add, the generated preview images, and the look, pose, scene and size hint you select. We also store consent records (age confirmation, ownership confirmation, hashed IP address and timestamp) and, if you use the size calculator, the measurements and recommended size you enter.
3. Billing and Transaction Data — When purchasing credits or subscription plans, our third-party payment processors collect necessary billing information. We do not store full payment card numbers on our servers.
4. Device and Usage Telemetry — We automatically collect technical information including your IP address, browser type, operating system version, access timestamps, and interactions with our tools to optimize service performance and security.
5. Cookies and Local Storage — We use essential cookies and browser local storage to maintain your authentication state, interface preferences, and active drafts.

3. How We Use Your Information

We process your data for the following legitimate purposes:

• Service Delivery — To process your photo and garment references through our AI pipeline and deliver your previews.
• Safety & Consent — To verify adult confirmation, review reports of non-consensual or prohibited content, and keep an audit trail of consent events.
• No model training — We do not use customer photos or previews to train our own models or to fine-tune third-party models.
• Account & Credit Management — To track credit balances, record transaction history, and manage your account lifecycle.
• Safety, Compliance & Content Moderation — To detect and prevent abusive, fraudulent, or harmful activities, enforce our acceptable use policies, operate automated and manual content moderation workflows, investigate user-submitted violation reports, and preserve evidence to comply with mandatory reporting obligations (including CSAM reporting to NCMEC and relevant law enforcement).
• Customer Support & Communications — To respond to your technical inquiries, notify you of system updates, and deliver essential account notifications.
• Quality Optimization — To analyze aggregated usage trends and improve model latency, rendering performance, and user experience.

4. AI Processing & Third-Party Providers

To provide state-of-the-art AI generation capabilities, we interface with specialized AI infrastructure and cloud compute providers.

• Your prompt texts and reference assets are securely transmitted to authorized processing nodes solely for the purpose of executing your generation requests.
• We do not sell your personal data or user-submitted creative assets to third parties.
• Private creations and uploaded assets are strictly protected under access controls and are not made public unless you explicitly choose public visibility.

5. Data Storage and Retention

• We retain your personal data and account details for as long as your account remains active or as needed to provide our services and meet legal obligations.
• Generated media and uploaded reference files are stored securely on cloud storage. We recommend downloading your generated creations promptly to your local device for long-term preservation.

6. Data Security

We implement rigorous technical and organizational security measures, including HTTPS/TLS encryption in transit, strict access token management, and regular infrastructure reviews. While no method of electronic transmission or storage is 100% secure, we continuously evaluate and enhance our security safeguards to protect your data against unauthorized access, alteration, or disclosure.

7. Your Privacy Rights

Depending on your jurisdiction (including rights under GDPR, CCPA, and applicable privacy regulations), you have the right to:

• Access & Portability — Request a copy of the personal data we hold about you.
• Correction — Request updates or corrections to inaccurate information.
• Deletion — Request the deletion of your account and associated personal data.
• Withdraw Consent — Revoke consent for optional data processing activities at any time.

You can exercise these rights directly through your account settings or by reaching out to our support team.

8. Updates to This Privacy Policy

We may periodically revise this Privacy Policy to reflect changes in our services, technological advancements, or legal requirements. When updates occur, we will revise the "Last Updated" date at the top of this document. Continued use of our platform after changes take effect constitutes acceptance of the updated policy.

9. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data handling practices, please contact us via the support channels provided on our platform.