Legal

Privacy Policy

Last updated: 16 October 2026

Who we are

Klooset is an AI personal shopper that fashion retailers embed on their product pages. It is operated by Grégoire PETIT (EI), a sole trader registered in France, who acts as the data controller for the purposes of this policy. This policy explains how we handle personal data across two surfaces: the Klooset website at klooset.app, and the Klooset widget that runs on our retailers' online stores.

For questions about this policy or your data, or to exercise your rights, contact us at hello@klooset.app.

Postal address: 21 rue Vaudrey, 69003 Lyon, France.

The data we collect

Website visitors

With your consent, we use Google Analytics to measure how visitors use klooset.app (pages viewed, approximate location, device and browser) and Microsoft Clarity to record anonymised sessions and heatmaps (clicks, scrolls, mouse movements). Text typed into form fields is masked in these recordings. No analytics cookie is set and nothing is recorded until you accept via our cookie banner. If you fill in the demo-request form, we collect the first and last name, work email, company and, if you choose to give it, the phone number you provide.

Shoppers using the widget

To generate a try-on, colour profile or size recommendation, the widget processes the photos you choose to upload (a selfie and, for try-on, a full-body photo) and any measurements or preferences you enter. These photos are never stored on our servers. They are sent directly to the AI providers, used only to produce your result, then discarded on our side. Your result and profile are saved only in your own browser for 30 days, on your device.

Messages to the assistant

When you ask the shopping assistant a question, your messages, the product you are looking at and, if you have one, your saved colour and size profile are sent to Anthropic to write the reply. The conversation itself is not kept on our servers: your browser sends it again with each message. We do keep the questions you type for 30 days, so we can check the quality and safety of the answers, after which they are deleted automatically. We keep them with the products the assistant showed you and technical measures of the reply, and with the random store identifier described below, never with a name, an email or an account. The assistant's replies are not kept. Please do not share personal details such as your name, address or health information in the conversation.

Anonymous measurement on retailer stores

To show retailers how the widget performs, it sends usage events (for example: widget opened, result shown, add to bag clicked) tagged with a random identifier kept in the store's local storage. This identifier is not linked to your name, email or any account, and it differs on every store. When a retailer adds our snippet to its order confirmation page, the order reference, amount, currency and, where provided, the products ordered are sent with the same identifier, so the retailer can measure the revenue attributed to the widget. No name, email or address is collected.

The free product photo tool

If you use our free product photo tool, we collect the email address you enter, the link you submit, the result you choose and, only if you tick the box, your agreement to receive news from us. We never ask for a photo of a person: the tool works from a public product image, and the models are AI-generated. To protect the tool from bots, Cloudflare Turnstile checks your browser when you submit the form. If you download one of our ebooks, we collect the email address you enter and, only if you tick the box, your agreement to receive news from us.

Retailer accounts

For retailers using the Klooset console, we store the account email, first name, a securely hashed password, and usage and performance metrics. If a retailer signs in with Google, we receive the Google account identifier, email and first name. If a retailer connects a Shopify store, we store an access token, encrypted at rest. We never store shopper photos.

How we use it, and our legal basis

Analytics is processed on the basis of your consent, which you can withdraw at any time.

Demo requests and sales contact are processed to respond to you and manage our commercial relationship.

The widget processes your photos at your explicit request, only to generate the output you asked for. When the widget runs on a retailer's store, that retailer is the controller of your photos and Klooset acts as their processor.

Messages to the assistant are processed at your request, only to answer you. As with photos, the retailer running the widget is the controller and Klooset acts as its processor.

Anonymous measurement on retailer stores is carried out on behalf of the retailer, as its processor, so it can measure how the widget performs.

The free product photo tool processes your email and link at your request, to send you the images. Only with your consent, we may also send you occasional news about Klooset; every message lets you unsubscribe.

Retailer accounts are processed to provide the service under our contract with the retailer.

Your photos

Photos are the most sensitive data the widget handles, so we designed the product to hold onto them for as short a time as possible:

  • They are never written to a Klooset database or long-term storage.
  • They are sent to the AI model only to generate your result, then dropped.
  • Klooset does not use them to train models.
  • We do not run facial recognition and do not use them to identify you.

Cookies and similar technologies

On klooset.app we set analytics cookies only after you accept them. We use Google Consent Mode, so before your choice no analytics or advertising cookie is written, and Microsoft Clarity is not loaded at all. You can change your decision at any time by clearing your browser storage for this site, which brings the consent banner back. The demo video is hosted by YouTube (Google) and is only loaded when you click to play it, through the youtube-nocookie.com domain; until then no request is sent to YouTube.

The widget uses your browser's storage to remember your result and profile for 30 days on your device. This is essential to the feature you requested and stays on your device; you can clear it at any time.

The widget also keeps a random identifier in the store's local storage for the anonymous measurement described above. It is not needed for the feature you requested; where consent is required, it is collected by the retailer through its own consent banner.

Our product demo (demo.klooset.app) has its own consent banner: Microsoft Clarity runs there only after you accept it on that page.

Who we share data with

We do not sell your personal data. We rely on the service providers below, who process data only on our instructions:

ProviderPurposeLocation
Google (Analytics 4)Website audience measurement (only after consent)EU / US
Microsoft ClaritySession replay and heatmaps on klooset.app and the product demo (only after consent)EU / US
fal.aiRuns the virtual try-on and the free product photo tool, and handles the images during generationUS
OpenAIAI model that generates the try-on image, accessed through fal.aiUS
Anthropic (Claude)Colour profile and body shape from the selfie, answers from the shopping assistant, size-guide and catalogue import for retailersUS
FormspreeDelivers the demo-request contact formUS
ResendSends account emails to retailers (email verification, password reset) and the results of the free product photo tool and ebook downloadsUS
Google (Sign-In)Lets retailers sign in to the console with a Google accountUS
ShopifyConnects a retailer's own Shopify store, only for retailers who install the appCanada / US
CloudflareWebsite hosting, CDN and security, bot protection of the free tool (Turnstile), storage of generated product images (R2, EU)EU / global edge
RailwayHosts the Klooset APIEU / US
SupabaseDatabase for retailer accounts and usage metrics (no photos)EU (eu-west-1)

Where your data is processed

Our website, API and database run in the European Union (our database is hosted in the eu-west-1 region). Some providers process data outside the EU: in particular, the try-on image is generated by OpenAI's model through fal.ai, and the colour analysis and the assistant's answers by Anthropic, all in the United States. Where that happens, transfers are covered by appropriate safeguards such as the European Commission's Standard Contractual Clauses.

How long we keep it

Shopper photos are not retained: they are deleted right after processing. Questions typed to the shopping assistant are kept for 30 days, then deleted automatically. Demo-request details are kept for as long as needed to handle our conversation with you. Requests to the free product photo tool (email, link, chosen result) and ebook downloads (email, ebook, consent choice) are kept for 12 months, then deleted automatically; the generated images stay online so the links in your email keep working, and we delete them on request. Analytics data follows the retention settings of Google Analytics and Microsoft Clarity. The widget profile in your browser expires automatically after 30 days.

Your rights

Under the GDPR you can:

  • Access the personal data we hold about you
  • Have inaccurate data corrected
  • Have your data erased
  • Restrict or object to how we process it
  • Receive your data in a portable format
  • Withdraw consent at any time, without affecting prior processing
  • Lodge a complaint with a supervisory authority (in France, the CNIL)

To exercise any of these, email hello@klooset.app. If the widget was running on a retailer's store, we may direct your request to that retailer, who is the controller of your photos.

Children

Klooset is not directed at children under 16 and we do not knowingly collect their personal data.

Changes to this policy

We may update this policy as the product evolves. When we make material changes, we will update the date at the top of this page.