Privacy Policy

This policy explains what personal data FashClick collects, why, who we share it with, how long we keep it, and the rights you have. It covers our website fashclick.io, the FashClick app, mobile apps, API and Shopify app (the “Services”), and the emails we send. The current version is always at fashclick.io/privacy-policy.

1. Who we are

FashClick is a product of VrittIQ Ltd, a company registered in England and Wales (company number 16961971), with its registered office at 71-75 Shelton Street, Covent Garden, London WC2H 9JQ, United Kingdom. VrittIQ Ltd is the controller of the personal data described here (“we”, “us”), except where section 5 says otherwise.

For anything about your data, email hello@fashclick.io.

2. What we collect

2.1 What you give us

• Account details: your name, email address, sign-in details, company name and, if you buy, your billing details.
• Payments: handled by our payment providers (section 8). We see what you bought, the amount and any discount. We never see or store full card numbers.
• Photos and product details: the garment, product and model photos you upload, and the details you add to them.
• Messages: what you send us by email, through the contact form or in support conversations.

2.2 What we collect when you use the Services

• Usage: the features you use, the credits you spend, and when you generate images or videos.
• How you found us: the page or campaign that brought you to sign up (for example the “utm” tags in a link).
• Technical data: IP address, browser and device type, and error logs.
• Cookies and analytics: see section 12.

2.3 What we collect from public sources

• Business contact details of people at fashion brands, as published on the brand's own website or business listings. See section 7.

3. How we use it, and our legal basis

Under UK data protection law we must have a legal basis for each use of your data. Ours are:

• To provide the Services (your account, generating images and videos, support, billing): because it's necessary for our contract with you.
• To keep records such as invoices and payments: because the law requires it.
• To keep the Services secure and prevent fraud and abuse: our legitimate interests.
• To understand and improve the Services (which features are used, which campaigns bring customers): our legitimate interests.
• To email account holders about FashClick features and offers: our legitimate interests. See section 6.
• To contact businesses about FashClick: our legitimate interests. See section 7.
• Anything else we ask your permission for: your consent, which you can withdraw at any time.

4. Your photos and AI processing

• The photos you upload are sent to our AI providers (section 8) only to produce the images and videos you ask for.
• We do not use your photos or results to train AI models.
• Try-on results are removed from your account 30 days after they are made.
• Products and catalog shoots stay in your account until you delete them or close your account.
• Only upload photos of people when you have the right to do so, for example your own photos or photos of models who have agreed to their use.

5. Shoppers using a FashClick try-on button

Some online stores use our Shopify app to let shoppers try clothes on. If you use the try-on button in a store, the store is responsible for your data and we process it for them. Your photo is used only to create your try-on, and the result is removed after 30 days. For anything else, see the store's own privacy policy, or contact us and we'll help.

6. Emails we send to account holders

• Service emails: sign-up, receipts, low credits, and important changes. You'll get these while you have an account.
• Tips and offers: occasional emails about getting more from FashClick, new features and discounts. Every one has an unsubscribe link, and one click stops them.

7. Contacting businesses

We email fashion brands that we think FashClick can help, to offer them a free sample and tell them about the product.

• What we use: the brand's name and website, and a business email address with the name and role of a person at the brand, but only where the brand publishes them on its own website or in business listings. We record where we found them, notes about the brand's products, and the emails we exchange.
• What we don't do: we don't use personal email accounts (such as Gmail or Hotmail addresses), buy lists, or email anyone who has opted out. We send at most three emails to a brand.
• Our legal basis: legitimate interests. Introducing a relevant product to a business, by email to its published business address, is a reasonable expectation in business, and we make it easy to say no.
• Opting out: every email has a one-click opt-out link. You can also reply “stop” or email hello@fashclick.io. We then keep only your address (or your brand's domain, if you ask) on a do-not-contact list, so we never email you again.
• How long we keep it: if no business relationship follows, we delete a brand's details 12 months after our last contact. The do-not-contact list is kept for as long as we send emails, because that's how we make sure we never contact you again.

8. Who we share it with

We don't sell personal data. We share it only with the providers that run parts of the Services for us, under contracts that require them to protect it:

• Microsoft Azure (UK South region): hosting, databases and file storage.
• Google Firebase: sign-in.
• Google (Gemini API) and fal.ai: AI image and video generation.
• Stripe: all payments and subscriptions.
• SMTP2GO: account and service emails.
• Google Workspace: our email.
• Google Analytics: website statistics.
• Shopify: if you use our Shopify app.

We may also share data when the law requires it, to protect our rights or the safety of others, or with a buyer if FashClick or VrittIQ is sold, who must then follow this policy.

9. Data outside the UK

Our main systems run in the UK. Some of the providers above, and some of our team, are in other countries, including the United States and India. Where data leaves the UK we rely on UK adequacy regulations or on the UK's International Data Transfer Agreement or Addendum to the EU standard contractual clauses.

10. How long we keep it

• Your account: while it is open. When you ask us to delete it, we wait 30 days in case you change your mind, then delete your personal data, apart from what we must keep by law.
• Try-on results: 30 days (sections 4 and 5).
• Payment and invoice records: 6 years, as UK tax law requires.
• Technical logs: up to 30 days.
• Business contacts: as described in section 7.

You can close your account and delete your data at any time on our delete account page, or from the app.

11. Security

Data is encrypted in transit and at rest, and access is limited to the people who need it. No system is perfectly secure, but we'll tell you and the regulator promptly if a breach puts your data at risk.

12. Cookies and analytics

• Essential storage: keeps you signed in and remembers choices such as your cookie preference.
• Google Analytics, only if you click Accept on our cookie banner: counts visits and shows us which pages and campaigns work. It sets cookies (named _ga) and sees your IP address and browser details. Until you accept, it isn't loaded at all.

You can change your answer at any time with Cookie settings at the bottom of every page. If you switch analytics off, we remove its cookies. You can also clear or block cookies in your browser settings.

13. Your rights

You have the right to:

• get a copy of the personal data we hold about you
• have it corrected or deleted
• object to how we use it, including to marketing at any time
• ask us to limit how we use it
• receive it in a format you can take elsewhere
• withdraw consent, where we rely on it

Email hello@fashclick.io and we'll reply within one month. If you're unhappy with how we handle your data, you can complain to the Information Commissioner's Office at ico.org.uk, though we'd welcome the chance to put it right first.

14. Children

FashClick is a service for businesses and adults. It isn't meant for anyone under 18, and we don't knowingly collect data from children. If we find we have, we delete it.

15. Changes to this policy

When we change this policy we update the date at the top. If a change matters for how we use your data, we'll tell account holders by email or in the app.

16. Contact us

• Email: hello@fashclick.io
• Post: VrittIQ Ltd, 71-75 Shelton Street, Covent Garden, London WC2H 9JQ, United Kingdom
• Or use our contact page.