FASHN - Privacy Policy

Introduction

FASHN ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, share, and protect your personal information when you use our website, applications, API, and any related services (collectively, the "Services").

By accessing or using our Services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with our practices, please do not use our Services.

Information We Collect

Account Information: When you create an account, we collect your email address, name, and profile picture through our authentication provider. If you sign up via a social login (e.g., Google), we receive the profile information you have made available through that service.

Content You Provide: When you use our AI image services, we collect the images you upload, text prompts, generation parameters, and the resulting generated outputs. This content is stored to provide you with access to your creation history.

Payment Information: We store a customer identifier and transaction records (amounts, dates, subscription status). Payments are processed by our payment processors as described in the How We Share Your Information section below.

Usage Information: We collect information about how you interact with our Services, including pages visited, features used, prediction history, selected AI models, and timestamps.

Device and Technical Information: We automatically collect your IP address, browser type and version, operating system, and device identifiers when you access our Services.

Support Communications: If you contact us through our in-app support chat or via email, we collect the content of those conversations along with your name and email address.

Survey Responses: We may ask optional questions such as how you discovered FASHN. These responses are stored alongside your account information.

How We Use Your Information

We use the information we collect to:

• Provide and operate our Services, including processing your images using our proprietary technology and third-party AI services, and delivering the results to you
• Process payments and manage your subscriptions and credits
• Send you service-related communications, including transaction confirmations and product updates
• Analyze usage patterns to improve and develop our Services
• Detect fraud, abuse, and enforce our Terms of Use
• Provide customer support
• Measure the effectiveness of our advertising through conversion tracking

How We Share Your Information

We share your information with the following categories of third-party service providers. For a detailed mapping of specific providers, you may contact us at [email protected].

• Authentication providers (Auth0): receive your email, name, and profile information to manage your account and enable secure sign-in.
• Payment processors (Stripe; Apple, Google, and other applicable app-store providers): receive payment details necessary to process transactions. Payment processors act as independent data controllers for payment data. We do not store your credit card number or full payment details.
• Analytics services (Google Analytics): receive usage data and anonymised identifiers to help us understand how our Services are used.
• Advertising platforms (Google Ads): receive hashed email addresses and purchase event data to measure the effectiveness of our advertising campaigns.
• Third-party AI providers: for certain capabilities, your images and prompts may be processed by third-party AI services. We require these providers to handle your data in a manner compatible with this Privacy Policy, and they do not use API inputs for model training by default.
• Cloud hosting and storage providers: host and store your images and account data on our behalf.
• Cloud database providers: store your account data, predictions, and transaction records.
• Temporary caching services: temporarily cache image data for performance, with automatic expiry.
• Error monitoring services: receive user identifiers and technical error context to help us diagnose and fix issues.
• Customer support tools: receive your email, name, and subscription status to provide support services.
• Email service providers: receive your email address, first name, and subscription status to send you service-related emails.
• Subscription management providers: process and manage in-app purchase subscriptions on mobile platforms.
• Internal communication tools: may receive technical error context for internal incident response.

We may also share your information:

• To comply with applicable laws, legal processes, or government requests
• To protect the rights, property, or safety of FASHN, our users, or the public
• In connection with a merger, acquisition, or sale of assets, in which case you will be notified of any change in ownership or use of your personal information

Cookies and Tracking Technologies

Essential Cookies: Required for authentication, session management, and core functionality. These cannot be disabled.

Analytics Cookies: We use analytics services to understand how our Services are used. On our marketing website, we provide a cookie consent banner that requires opt-in consent in GDPR and other privacy-regulated jurisdictions, and provides opt-out capability elsewhere.

Advertising Cookies: We use advertising conversion tracking to measure the effectiveness of our advertising campaigns. The same consent mechanisms apply as for analytics cookies on our marketing website.

Application Analytics: Our application uses analytics for service improvement and conversion measurement. Purchase and signup events may be shared with advertising platforms, and hashed personal data may be shared for conversion measurement purposes.

Data Retention

• Account data: Retained until you delete your account.
• Uploaded images and generated outputs: Retained until you delete them individually or your account is deleted.
• Prediction metadata (prompts, parameters, model selections): Retained until you delete the prediction or your account is deleted.
• Temporary processing data: Automatically deleted shortly after processing is complete.
• Payment records: Retained as required by applicable financial regulations.
• Analytics data: Retained per our analytics provider's retention settings.
• Error logs: Retained per our error monitoring provider's data retention policy.

Account Deletion: When you delete your account:

• We cancel your web subscriptions. Mobile subscriptions purchased through app stores must be cancelled directly through the relevant app store before account deletion.
• We delete your predictions and images from organisations you own. Content you created within an organisation you do not own may be retained by that organisation.
• We make commercially reasonable efforts to remove your data from third-party services.
• Certain payment records may be retained as required by financial regulations.

Data Security

We implement appropriate technical and organisational measures to protect your personal information, including:

• Encryption in transit using TLS/HTTPS for all communications
• Securely stored authentication credentials
• Access controls scoped to your organisation

In the event of a data breach affecting your personal information, we will notify affected users promptly in accordance with applicable law.

Your Rights

Access and Review: You can view your predictions, account information, and generation history within the application at any time.

Deletion: You can delete individual predictions and images from your gallery. You can also delete your entire account from your account settings. See the Account Deletion section above for details on what is removed.

Marketing Opt-Out: You can unsubscribe from marketing emails using the unsubscribe link included in each email.

Cookie Preferences: On our marketing website, you can manage your cookie preferences through the cookie settings accessible from the website footer.

Data Access: To request a copy of your personal data, contact us at [email protected].

Region-Specific Rights:

• EEA, UK, and Swiss Users (GDPR): You have the right to withdraw consent at any time, request restriction of processing, object to processing based on legitimate interests, and lodge a complaint with your local data protection supervisory authority.
• California Users (CCPA/CPRA): You have the right to know what personal information we collect and how it is used, the right to request deletion, the right to opt out of the sale of personal information, and the right to opt out of the sharing of personal information for cross-context behavioural advertising. See the How We Share Your Information and Cookies and Tracking Technologies sections above for details.

Organisations

If you use our Services through an organisation, all predictions and generated content within that organisation are visible to all organisation members. Organisation owners manage billing, membership, and access. If an organisation owner deletes their account, the organisation and all associated data are also deleted.

International Data Transfers

Your data is processed on infrastructure located in the United States and the European Union. Our third-party service providers may transfer and process data in other jurisdictions. Where such transfers occur, we ensure appropriate safeguards are in place in accordance with applicable data protection laws.

Children's Privacy

Our Services are not directed at children under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal information from a child under 16, we will take steps to delete that information promptly. If you believe a child under 16 has provided us with personal information, please contact us at [email protected].

Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated effective date. For material changes, we will notify you via email or a prominent notice within our Services. Your continued use of our Services after any changes constitutes your acceptance of the updated Privacy Policy.

Contact Us

If you have questions or concerns about this Privacy Policy, wish to exercise your rights, or need to report a data protection issue, contact us at [email protected].