Privacy Policy

1. Data we collect

• Account data: your email address and login credentials.
• Uploaded images: the photos of outfits or rooms you submit for analysis.
• Analysis history: critiques, scores, and generated images tied to your account.
• Usage and technical data: credit balance and transactions, and basic technical logs (such as IP address and browser type) needed to run and secure the service.

2. Why we process it

We process your data to provide the service (run analyses, show your history, manage your credits), to handle payments and support, to keep the service secure, and to comply with legal obligations such as bookkeeping. The legal bases are performance of contract, legal obligation, and our legitimate interest in operating a secure service.

3. Third-party processors

We use a small number of processors to run the service:

• Supabase — database, authentication, and image storage, hosted in the EU (Frankfurt, Germany).
• OpenAI — your uploaded images are sent to OpenAI's API to produce the analysis and the generated image. Per our API agreement, OpenAI does not use this data to train its models.
• Cloudflare — hosting and content delivery for the website.

4. No model training

We do not use your images or analysis results to train AI models, and we do not sell your personal data to anyone.

5. Retention

Your images and analysis history are kept while your account exists, so you can revisit past results. If you delete an analysis or your account, the associated data is deleted from our systems. Technical logs are kept briefly for security purposes, and records required by Swedish bookkeeping law are kept for the statutory period.

6. Your rights

Under the GDPR you have the right to:

• Access a copy of the personal data we hold about you.
• Have incorrect data corrected and, in many cases, have your data deleted.
• Receive your data in a portable format.
• Object to or restrict certain processing.
• Lodge a complaint with the Swedish Authority for Privacy Protection (IMY).

7. Contact

To exercise your rights or ask anything about your data, email jenny@nystrandtechsolutions.se. We respond to data requests within one month.