Privacy Policy

Hueleon ("we", "our", or "the Service") is an AI-powered personal styling platform that helps you organise your wardrobe, receive outfit recommendations, and virtually try on clothes, including clothes from independent boutiques that list on Hueleon. We are committed to protecting your privacy and handling your personal data responsibly. For the personal data described in this policy, Hueleon decides why and how it is processed (in the language of India's Digital Personal Data Protection Act, 2023, we are the "data fiduciary").

We collect the following categories of data:

• Account information: Your name, email address, and profile picture provided via Google Sign-In.
• Profile photo: A photo of you that you voluntarily upload. This is used solely to generate AI try-on results and analyse your body shape and skin tone for personalised styling.
• Wardrobe items: Images and metadata of clothing items you upload to your digital closet.
• Style preferences: Style DNA settings, occasion preferences, and any feedback you provide to our AI stylist.
• Usage data: Pages visited, features used, and interaction patterns — collected anonymously to improve the service.
• Approximate location: A city-level location derived from your IP address by our infrastructure provider (Cloudflare). We use it to understand where the service is used and to factor local weather into outfit suggestions. We never collect precise GPS location and never ask your device for location access.
• Chat history: Conversations with our AI stylist, retained to personalise future recommendations.
• Boutique-related data: if you use a boutique's store, run a try-on there, or are a boutique owner or team member, we also handle the data described in section 6.

Your profile photo is used exclusively for the following purposes:

• Generating virtual try-on images that show how garments look on your body.
• AI analysis of skin tone, body shape, and fit — to personalise styling recommendations.

Your photo is never sold, used for advertising, or made publicly visible. It is stored securely in encrypted cloud storage (Cloudflare R2) and is accessible only to you, apart from the limited processing and sharing described in sections 5 and 6 (for example, sending it to our AI provider to generate a try-on, and sharing a boutique try-on result with the boutique only if you choose to).

All data is stored on Cloudflare's global infrastructure (D1 database and R2 object storage). Images are stored in private, access-controlled buckets. Database records are encrypted at rest. We retain your account data for as long as your account is active. You may delete your account and all associated data at any time by contacting us. Other retention periods:

• Boutique try-on photos and results: deleted automatically within 24 hours (or immediately when you choose Delete now, or the boutique presses Finish). A record that a try-on took place (date, garment, and whether it was in-store or from a customer's phone) is kept for the boutique's counts; it contains no photo.
• Boutique store content: kept while the boutique is active. If a boutique is deactivated, its store goes offline at once and its data and images are permanently deleted 6 months later unless it is reactivated.
• Boutique access requests: kept while we review the request and for as long as needed for our records of who we approved or declined. You can ask us to delete yours.
• Anonymous store analytics: kept while the boutique exists, and deleted with it.
• Server and security logs: kept only for as long as needed to run, secure and fix the Service.

To power our features, we share limited data with the following services:

• AI image-generation provider: Your profile photo (or a boutique customer's try-on photo) and a clothing image are sent to a specialised third-party AI provider to generate virtual try-on results. That provider processes the images and does not retain them beyond the duration of the request, per their data processing agreement. The same type of provider creates the AI product photos a boutique asks for from its own garment photos.
• AI language model providers: Wardrobe metadata and style preferences (not your photo) are sent to third-party AI providers to generate outfit suggestions and styling advice. Boutique garment photos are also sent to AI providers so they can be tagged (colour, style, fabric).
• Google Sign-In: Used for authentication. We receive only your name, email, and Google profile picture.
• Email delivery provider: Used to send you messages such as support replies and notices about your boutique request. Only the message and your email address are sent.
• Open-Meteo: To tailor outfit suggestions to your local weather, we request a forecast using your approximate coordinates rounded to roughly an 11 km area. No name, email, account identifier, or any other personal data is sent with these requests.
• Cloud infrastructure (Cloudflare): Hosts the Service and processes traffic on our behalf.

These providers may process data in countries outside India. We use providers that commit to protecting data, and we share only what each feature needs. We do not sell your personal data.

Independent boutiques can list their collections on Hueleon. This section explains what happens to data when you shop at, or run, a boutique store.

6.1 If you are a shopper using a boutique's store

• Browsing: you can browse a boutique's public store without an account. We count visits and piece views anonymously (see 6.5).
• Appointment requests: if you ask a boutique for an appointment, the name, phone and/or email, preferred day and note you enter are sent to that boutique (and emailed to its owner) so they can contact you. They are visible to the boutique's team and deleted automatically after 90 days, or sooner if the boutique deletes them or you delete your Hueleon account (for requests made with your account email).
• Try-on from your own phone: you must sign in. We use your own Hueleon profile photo and the garment image to create a try-on, which counts towards your monthly limit. We ask for your consent to process your photo before your first try-on.
• Deleted within 24 hours: your photo copy and the result are deleted automatically within 24 hours. You can delete a result immediately with Delete now.
• Sharing with the boutique is your choice: a result is not shared with the boutique unless you tick the option to share it after seeing it. It is off by default and you can switch it off again until it expires. Shared results are visible to the boutique's owner, managers and staff, who may use them only to help you.
• Downloads are watermarked with the boutique's name.
• What the boutique does not receive: your account, email, phone number, Style DNA, wardrobe or chat history.

6.2 If you are photographed in a boutique (in-store try-on)

• Boutique staff can run a try-on for a walk-in customer using a photo taken or uploaded with that customer's agreement. No Hueleon account is needed.
• The boutique must explain what will happen and obtain your free, informed agreement before the photo is used. You may say no. If you are under 18, a parent or guardian must agree.
• The photo and result are used only for that try-on, are visible to the boutique's team for that purpose, and are deleted automatically within 24 hours or as soon as staff press Finish. The boutique is not allowed to copy, keep or share them (see our Terms).
• In this situation the boutique decides to run the try-on and is responsible for obtaining your consent; Hueleon processes the photo on the boutique's behalf to produce the result and deletes it as described here.

6.3 If you request a store, or are a boutique owner, manager or staff member

• Access request: your name, boutique name, email, phone (optional), city, Instagram or website, what you stock, and any note. We use it only to review your request, contact you, and set up and manage your store. We email our team when a request arrives and email you when it is approved.
• Store details you add: boutique name, store link, description, address, opening hours, logo, cover image and garment photos, names, categories, prices and descriptions. Your public store page and the boutique directory show these (but not your private phone number or email) to anyone.
• Team members: if you are added as a manager or staff member, the owner sees your email address, and we record your role and which try-ons you ran in-store.
• Private pieces are visible only to signed-in people whose email address the boutique has added to its private list. We store those email addresses for the boutique until it removes them.
• Subscription: trial and subscription dates and status are stored. We do not currently collect payment card details.

6.4 AI processing of boutique content

To list garments we send the garment photo to AI providers to tag it. If a boutique opts in, we also send it to an AI image provider to generate extra product angles; these are shown on the store only after the owner approves them. Boutique garment photos can contain people (for example a model); owners must have the right to use them (see our Terms).

6.5 Anonymous store analytics

• When someone opens a boutique's store, or opens a piece in quick view, we add one anonymous event (boutique, piece, time).
• We do not store your IP address, name, account, or any identifier with these events. To avoid counting one visit repeatedly, your browser keeps a small flag in session storage that is cleared when you close the tab.
• The boutique sees only totals and trends (visits, piece views and try-ons by day, and top pieces). It cannot tell who visited.

6.6 Who is responsible for what

Hueleon is responsible for the personal data described in this policy. A boutique is independently responsible for how it treats information it receives from you directly (for example, if you give it your phone number or place an order with it), for obtaining consent before photographing a customer in store, and for its own sales, pricing and delivery. Please read a boutique's own privacy practices if you share personal details with it. Our Terms set the rules boutiques must follow when handling customers' photos.

You have the right to:

• Access all personal data we hold about you.
• Delete your profile photo, wardrobe items, boutique try-on results, or entire account at any time.
• Correct any inaccurate personal information.
• Withdraw consent for photo processing at any time (this will disable try-on and AI styling features). Withdrawing does not affect processing done before you withdrew.
• Stop sharing a boutique try-on result by switching off sharing before it expires, or delete it with Delete now.
• Data portability — request an export of your data.
• Grievance redressal and nomination — raise a complaint with us, and nominate someone to exercise your rights if you die or become unable to.

To exercise any of these rights, contact us at support@hueleon.com. We may need to verify your identity first. We respond within a reasonable time and in any case within the period the law requires. If you are not satisfied with our response, you may complain to the Data Protection Board of India once it is operational.

We use browser local storage to maintain your session and remember your preferences (such as consent decisions and UI state), and session storage for a short-lived flag that stops a boutique visit being counted more than once. We do not use tracking cookies or third-party advertising cookies.

Hueleon is not directed at children under 15, and we do not knowingly create accounts for them. Boutique owners, managers and staff must be at least 18. Because photos of children are sensitive, boutiques must not photograph anyone under 18 for an in-store try-on without the verifiable consent of a parent or legal guardian, and we do not knowingly use such photos without it. If you believe a child's data has been provided to us without proper consent, please contact us and we will delete it promptly.

We use access controls, private storage, encryption, short retention of customer try-on photos, and role-based access for boutique teams. No system is completely secure. If a personal data breach affects you, we will notify you and the relevant authority as required by law.

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or a prominent notice on the platform. Where the law requires fresh consent, we will ask for it. Your continued use of Hueleon after changes constitutes acceptance of the updated policy.

For any privacy-related queries, complaints or to exercise your rights, contact us at support@hueleon.com. We acknowledge complaints within 48 hours and aim to resolve them within 30 days. For the name and details of our Grievance Officer, write to the same address.