Privacy Policy

LOOM Fashion ("LOOM", "we", "us"), established in Canada, operates the website loomfashion.io and the AI styling tools available on it. LOOM Fashion is the data controller responsible for the personal data described in this notice. For any privacy question, contact us at contact@loomfashion.io.

We only collect what we need to run the stylist:

• Account data — email address and authentication identifiers when you sign in.
• Style inputs — the information you type into the stylist (age, height, weight, style, event, budget). This is used to generate your outfit and is stored linked to your account.
• Photos (optional) — if you upload a photo for the virtual try-on, the image is sent to our AI model provider to generate the try-on image and is not used to train any model.
• Technical data — anonymous device fingerprint, language, approximate region and standard server logs (IP, user-agent, timestamps) used for security and rate limiting.

We do not knowingly collect data from children under 13 (or the minimum age in your country). If you believe a child has shared data with us, email contact@loomfashion.io and we will delete it.

• Generate the outfit and try-on image you asked for.
• Keep your account, saved outfits and preferences.
• Protect the Service from abuse (rate limiting, fraud, security).
• Improve product quality by looking at aggregated, non-identifying usage patterns.
• Reply to you when you contact us.

Legal bases: performance of the contract when you use the stylist or purchase a plan, our legitimate interest in a secure and useful product, your consent for anything optional (e.g. uploading a photo), and compliance with legal obligations. In Canada we rely on your implied or express consent under PIPEDA and applicable provincial privacy laws.

Uploading a photo is always optional. When you do:

• The photo is sent to our AI provider (currently Google Gemini via the Lovable AI Gateway) strictly to generate your try-on image.
• The generated image is returned to you and stored in your account so you can view it again.
• We do not sell your photo, do not use it for advertising and do not use it to train third-party models.
• You can delete your photos and generated try-ons at any time by contacting contact@loomfashion.io.

We share the minimum necessary data with trusted service providers (processors) that help us run LOOM:

• Hosting & database — Lovable Cloud (Supabase infrastructure) for account, storage and database.
• AI models — Lovable AI Gateway (routing to Google Gemini for image generation and OpenAI for voice) to process your inputs and return outfits, images and audio.
• Shopping results — public product search APIs to find real items matching your outfit.
• Payments & Merchant of Record — Paddle.com Market Limited acts as our reseller and Merchant of Record. When you make a purchase, Paddle receives the personal data needed to process the sale, manage subscriptions, handle payments, calculate and remit sales taxes, prevent fraud, issue invoices and process refunds. Paddle acts as an independent controller for that data — see the Paddle Privacy Notice.
• Professional advisers — accountants, auditors and lawyers, bound by confidentiality, when necessary for legal or regulatory purposes.
• Authorities — public authorities where disclosure is required by law, court order, or to protect our rights.

We never sell your personal data.

• Account data: as long as your account exists.
• Outfits and try-on images: until you delete them or close your account.
• Server logs: up to 30 days.

Depending on where you live (Canada PIPEDA / Quebec Law 25, EU/UK GDPR, California CCPA, and similar laws), you have the right to:

• Access a copy of your data and know how it is used.
• Correct inaccurate data.
• Delete your account and associated data.
• Object to or restrict certain processing, and port your data.
• Withdraw consent for optional processing at any time.
• File a complaint with your local data protection authority — in Canada, the Office of the Privacy Commissioner of Canada (priv.gc.ca) or your provincial regulator.

To exercise any of these rights, email contact@loomfashion.io. We reply within 30 days.

We use a small number of strictly necessary cookies and local storage entries to keep you signed in, remember your language and protect the Service from abuse. We do not use advertising or cross-site tracking cookies.

Our providers may process data outside your country (e.g. in the United States). When they do, we rely on standard contractual clauses and equivalent safeguards to protect your data.

We apply reasonable technical and organisational measures — encryption in transit, access controls, row-level security on the database — to protect your data. No system is 100% secure; if we ever become aware of a breach affecting you, we will notify you as required by law.

We may update this policy to reflect changes to the Service or the law. We will update the "Last updated" date above and, for material changes, notify you by email or in-app.

Questions, requests or complaints? Write to contact@loomfashion.io.