Version: 03.11.2025
At StyleSwap, your privacy is our top priority. We collect and process images of models and outfits solely to provide our AI-powered virtual try-on service. All uploaded images are handled with strict confidentiality. To ensure maximum security, every image is encrypted both during transmission and while stored on our servers. We do not share, publish or use your images for any purpose beyond the intended service. Your trust and data privacy matter to us.
We transfer them via SSL/TLS encryption and use them only to generate AI-fitted clothing photos and then offer you the result for download.
At StyleSwap, we store clothing images, model images, and virtual try-on results uploaded by users who are logged into the web platform. These images are securely associated with each user’s account and will remain stored until the user chooses to delete them. Free accounts are limited to storing up to 10 images, while Standard and Pro accounts have no storage limit. Please be aware that only users who log in through the web version of StyleSwap are able to save their images. While all stored content is accessible only from the user’s personal dashboard, the image URLs themselves are not protected by additional authentication, meaning that anyone with the direct link may be able to view the image. We are committed to safeguarding your privacy and continuously enhancing our data security measures to provide a safe and reliable experience.
Apart from that, we keep usage statistics (without images) and if you contact us e.g. by email, we also receive personal data from you, which we use to reply to you. If we have a customer/supplier relationship, we also use your data for bookkeeping and similar purposes.
If you want to know more, you will find the long version below.
The protection of your personal data is very important to us. We process your data exclusively on the basis of legal regulations (GDPR, the Austrian Data Protection Act, the Austrian Telecommunications Act 2003). Below we will inform you about how we process your personal data and the rights and entitlements you have under data protection regulations.
We are always at your disposal for any complaints, questions or suggestions about data protection.
On the one hand, we process data that you disclose to us yourself, and on the other, data that we receive through your use of our website.
If this privacy policy is presented by the data controller in a language other than German, the translation was prepared by an independent specialist translator certified to ISO 17100:2015 and proofread by at least one other specialist translator. If, in the case of dispute, a court insists on a German-language contract text, then only the original German-language contract text shall be valid; under no circumstances shall a retranslation of the translated version be used.
If you contact us (e.g. by e-mail or telephone), your data is processed to carry out pre-contractual measures or to fulfill the contract for processing or dealing with your inquiry.
Your data is processed to fulfill a contractual relationship or has a legal basis in the context of a business relationship (or for processing that relationship). Your data is processed to deal with business transactions formally and to process the sale of services.
The transmission of the relevant data in each individual case has a legal basis or fulfills a contractual relationship. In addition, transmission is carried out to the following categories of recipients: Banks, legal representatives, accountants, auditors and tax advisers, courts, competent administrative authorities, contract and business partners, insurance companies.
Your data is processed on the basis of your consent or of a legitimate interest in initiating a business transaction concerning our own offer of delivery or service. The legitimate interest results from our interest in sending you messages, informing you about news from our company, offers and events and promoting our own range of services.
Transmission of the relevant data in each individual case is based on your consent.
No personal data is required for the use of our website. However, our web server still collects the data that your Internet browser communicates to us (including the IP address of the requesting computer, together with the date, time, the request, which file is requested (name and URL), the amount of data transferred to you, a message as to whether the request was successful, identification data of the browser and operating system used, and the website from which the access was made (should the access take place via a link).
The legal basis for processing is based on our legitimate interest in ensuring system security, managing the website technically and optimizing the service quality.
These data will be forwarded to the authorities should a hacking attack occur. No other transmission to third parties takes place. The server logs are stored for a maximum of 3 months.
We use cookies to make your visit to our website attractive and to allow the use of certain features. Cookies are small text files that the website saves on your computer in order to recognize it (permanent cookies). These may contain information about your use of the website. The information contained in the cookies is used to store the individual selections made by you (e.g. the items you place in a shopping cart) so that they can be retrieved if you leave the page and return to it later. We also use cookies to create non-personalized statistics. Cookies are automatically accepted by most web browsers. You can prevent this by changing the settings in your browser. You can remove cookies stored on your computer at any time by deleting the temporary internet files. Data processing is based on your consent.
We use the providers listed below to process data about your use of our website in order to adapt it to your interests in the best possible way.
Google Analytics, a web analytics service provided by Google Inc. ('Google'). Google Analytics uses so-called 'cookies', text files that are stored on your computer and that allow analysis of your use of the website. The information generated by the cookie about your use of the website is usually transmitted to a Google server in the USA and stored there. We use IP anonymization, so your IP address will first be truncated by Google within Member States of the European Union or in other states that are signatories to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be sent to a Google server in the US and truncated there. Google will use this information on our behalf to evaluate your use of this website, to compile reports on website activity for us, and to provide us with other services related to website activity and internet usage. The IP address provided by Google Analytics within the framework of Google Analytics will not be combined with any other Google data. You can prevent the storage of cookies by a corresponding setting in your browser software; please note, however, that in this case you may not be able to use all functions of the websites in full. You can also prevent the collection by Google of the data generated by the cookie and related to your use of the website (including your anonymized IP address) and processing of that data by Google by following the link below (http://tools.google.com/dlpage/gaoptout?hl=de) and downloading and installing the browser plugin provided.
Google Analytics uses the following cookies: _ga (storage period of two years), _gid (storage period of one day), _gat (storage period of one minute).
At any time and free of charge, you can exercise the following rights, as specified and subject to certain limitations and exceptions under Applicable Privacy Laws.
As to the limitations to the exercise of your rights, if you have not created an account or you are not authenticated prior to using the app, your personal data (such as images, videos and audio-recordings) will be deleted after one hour since their upload according to the data minimization and storage limitation principles.
Your privacy rights are namely:
Right of access. You have the right to obtain information about the processing of your personal data and to access it.
Right to rectification. You have the right to ask for the updating, rectification or integration of your personal data.
Right to erasure. You have the right to request the deletion of your personal data.
Right to restriction of processing. You have the right to request the restriction of the processing of your personal data.
Right to data portability. You have the right to obtain a portable electronic copy of your personal data.
Right to object. Where we rely on our legitimate interest to process your personal data, you have the right to object to such processing, wholly or partly, on grounds related to your particular situation. In particular, you are entitled to object to the processing of your personal data for direct marketing purposes, including profiling.
Right to withdraw your consent. Where we rely on your consent to process your personal data, you have the right to withdraw your consent, although the processing carried out before your withdrawal of consent will remain valid.
You also have the right to lodge a complaint before the competent national Data Protection Authority, in particular before the Data Protection Authority of the Member State of your habitual residence, place of work or place of the alleged infringement.
To exercise your rights or if you have any questions about privacy or data protection, contact us by sending an email to support@fitroom.app. Please include your request and account details, specifying the data you wish to delete or adjust if you are requesting data erasure. We may take reasonable steps to verify your identity before responding and will reply within 30 days to confirm the deletion or adjustment of your data.
You have the right to information about the stored data according to Art. 15 GDPR, to rectification of inaccurate data according to Art. 16 GDPR, to deletion of data according to Art. 17 GDPR, to restriction of data processing according to Art. 18 GDPR, to data portability according to Art. 20 GDPR and to objection to unreasonable data processing according to Art. 21 GDPR.
If processing takes place on the basis of a declaration of consent, you have the option to withdraw it at any time without affecting the lawfulness of the processing on the basis of that consent up to the time of withdrawal.
You have the right to lodge a complaint with the supervisory authorities - in Austria, the Data Protection Authority is responsible. Its address is:
We require the data that we ask you to provide to perform our services within the contractual relationship, to provide information that you have requested from us and to send our newsletters and other information. If you do not provide the data we collect, we will not be able to perform our services.
No automated decision-making, including profiling, is carried out. If we process your personal data for a purpose other than the one for which we collected this information, we will inform you of this fact and of that other purpose.
We may offer free trials in our sole discretion. Upon installation or expiration of a free trial offer (if applicable), you will be charged the applicable subscription fees (if any) for your use of the Service. Upon expiration of the initial term of your subscription, whether such subscription is weekly, monthly, quarterly, yearly, or otherwise, your subscription will automatically renew for recurring subscription periods of the same duration unless and until you affirmatively cancel your subscription. If you have purchased your subscription through an App, you can cancel your subscription or automatic renewals any time in your account settings with the App Marketplace according to the policies of each App Marketplace. If you have purchased your subscription through the Site, you can manage and cancel your subscription and any automatic renewals at any time by going to 'My Account' and following the instructions as stated therein.
You can cancel Your subscription at any time, and You will continue to have access to the Paid Services through the end of Your billing period. To the extent permitted by the applicable law, payments are non-refundable, and we do not provide refunds for any unused Paid Services.