Legal
Privacy Policy.
Last updated 2026-05-11.
1. What we collect
Your email (from Google sign-in or magic link), the reference photos you upload (a face shot, a body shot), the retailer URLs you paste, the renders we generate from them, and basic usage data — page views, feature clicks, render counts. We don't collect anything else you didn't give us directly.
2. Why we collect it
To run the service. Your email is your account identity. Your photos are the reference for the renders you ask us to make. Usage data is for diagnostics and quota enforcement, not for ad targeting.
3. Who sees your data
You. Nobody else, except: • the AI image-generation provider we use to render you (data passes through their API and is processed in-flight to produce your image); • Stripe, if you subscribe (they handle billing; we never see card numbers); • our payments processor, our hosting provider, and our error-monitoring service, on a strict need-to-know basis. We list our subprocessors at [email protected].
4. We don't train AI on your photos
No model is trained on your photos or your renders. Not ours, not anyone else's. This is a structural choice, not a policy promise — the API contracts with our render provider forbid it.
5. Public gallery
Free-tier renders are added to a public gallery by default. You opt out at the reveal moment, before anyone else sees the image. Pro renders are private by default; you opt in to share. Public renders are indexed by search engines.
6. Retention
Free-tier renders auto-delete 30 days after creation. Pro renders persist while your subscription is active. Reference photos persist while your account is active; delete your account to remove them. Server logs roll over after 30 days.
7. Your rights
You can export or delete any individual render, your entire render history, your reference photos, or your full account at any time from your account settings. If you're in the EU/UK/CA, you have the right to access, correct, delete, and port your personal data. Email [email protected] for anything settings can't do (30-day SLA).
8. Cookies and tracking
We use a session cookie to keep you signed in and a CSRF cookie to protect form submissions. We don't use third-party advertising trackers. Outbound retailer links use affiliate networks; clicking one passes a referral code to the retailer but not your identity.
9. Children
Styl10 is 18+. We don't knowingly collect data from minors. If you believe a child has created an account, email us — we'll delete it.
10. Changes
If we materially change this policy, we'll update the date at the top and notify you by email before the changes take effect.
11. Contact
Privacy questions, data requests, or removal asks: [email protected].
Pre-launch placeholder; counsel review pending (TODOs P1 #3).