Legal
Privacy Policy
Last updated August 21, 2026
1. Who's responsible for your data
Outfitto is operated by Individual Entrepreneur Anna Pavliuk, Ukraine (registered name: ФОП Павлюк Анна Вікторівна) — the data controller for the personal data described here. Contact us about privacy at hello@outfitto.app.
2. What we collect
- Account data: your email address, used for sign-in.
- Content you upload: garment and product photos you submit for generation, and the results Outfitto produces from them.
- Usage data: credit balance and history, which tool/mode you used, generation timestamps.
- Payment data: handled directly by Creem, our payment processor — we never see or store your card details.
- Analytics: aggregate, cookieless page-view analytics via Vercel Analytics. It doesn't use tracking cookies or build an individual profile of you, which is why this site doesn't show a cookie-consent banner.
3. Why we collect it
To run the Service: authenticate you, generate your photos, track your credit balance, process payments, and provide support. We don't sell your data, and we don't use your uploaded photos to train AI models.
4. Who we share it with
Running Outfitto means some data is processed by:
- Supabase — accounts, database, and file storage. Our project is hosted in the EU (Frankfurt).
- fal.ai — receives your uploaded photo to run the AI generation and returns the result. This is the one step where your image leaves EU-hosted storage to reach an AI inference provider.
- Creem — payment processing and billing, as merchant of record.
- Vercel — hosting and the cookieless analytics described above.
We don't share your data with anyone else, and never for advertising.
5. How long we keep it
Uploaded and generated images are kept for as long as your account is active, so you can access your generation history. Delete your account from the Account tab in the studio - it removes your profile, uploads, and generation history immediately - except where we're required to keep transaction records for accounting or legal reasons. You can also download a copy of your data first from the same tab.
6. Your rights
You can export or delete your data yourself anytime from the Account tab in the studio. For anything else - access, correction, or a question about what we hold - email hello@outfitto.app. If you're in the EU/EEA or UK, this includes the rights granted under GDPR/UK GDPR.
7. Children
Outfitto isn't directed at anyone under 16, and we don't knowingly collect their data.
8. Security
Data is encrypted in transit (HTTPS) and access to our database and storage is restricted by row-level security tied to your account. No system is perfectly secure, but we don't store anything we don't need to run the Service.
9. Changes
We'll update the date at the top of this page when this policy changes. Material changes will be communicated by email where practical.