Privacy Policy

1. Who is responsible for the data

Swappy is a service operated from Portugal. When you contact Swappy directly, create a store account or manage a subscription, Swappy is responsible for the processing needed to provide and protect those services.

When you use the “Try it on me” button on a store's website, that store is responsible for its relationship with you and for offering the feature. Swappy processes your photo on the store's behalf, only to generate the simulation you asked for, and does not hand it to the store.

2. The photo you send

To see a piece on your body, you send a photo of yourself. That photo is used for one thing only: checking that it works for that piece and generating the image with the piece applied.

Swappy does not store the photo or the generated image. Both exist only for the duration of the request, in the memory of the systems processing it, and the generated image is shown directly in your browser. If you close the window, the image is gone and cannot be recovered by us or by the store.

The store does not receive your photo or the generated image, and Swappy does not use them for any other purpose, including model training, advertising or service improvement.

Only send photos of yourself or of people who have given you permission, and avoid including other people or unnecessary information in the frame. A photo may be refused when the piece cannot be applied, for example when the required part of the body is not visible.

3. Other data we process

Depending on how you use the service, we may process:

• information about the products of the store where the button appears, such as the name, page address and product image, to decide whether the piece can be tried on and to generate the simulation;
• aggregated counters per store, such as the number of simulations generated and the associated cost, with no link to any person;
• irreversibly derived identifiers, used only to limit repeated requests and protect the service against abuse, without storing the IP address or email in readable form;
• the name, store, contact details and message sent through the Swappy website form;
• store account data such as name, email, company, website, language and preferences;
• authentication identifiers and information needed to maintain the session and protect the store's access;
• chosen plan, subscription and billing status, payment service identifiers and a record of the accepted contractual versions, without storing full card details;
• technical data needed for security and operation, such as IP address, browser, date and time of the request, handled transiently by the systems serving the request.

4. Why we use the data

We use the data only to:

• check the photo and generate the simulation you asked for;
• decide on which of the store's products the button may appear;
• count each store's simulations to apply the contracted plan;
• respond to contacts sent directly to Swappy;
• create and manage the store's account, authentication, trial, subscription and access;
• record acceptance of contractual documents and comply with legal obligations;
• operate, protect and troubleshoot the service.

5. Legal basis for processing

Your photo is processed because you ask for it: by sending it and confirming that you want to see how the piece looks, you consent to its use for that simulation only. You can stop at any time by closing the window; since nothing is stored, there is nothing to delete afterwards.

Processing of store data is necessary to create or perform the contractual relationship with the store, comply with legal obligations and pursue the legitimate interests of protecting the service, preventing abuse, keeping contractual records and resolving problems.

Data marked as required during account creation and subscription is essential for that journey. Without it, Swappy may be unable to create the account, start the trial or provide the service.

6. Use of artificial intelligence

To check the photo and generate the simulation, the photo and the product image are processed by artificial intelligence services.

We apply settings and restrictions intended to prevent the photos and instructions from being used for training, publication or unnecessary retention by the services involved.

The generated image is only a visual simulation. It shows how the piece may look in terms of appearance, colour and shape; it does not measure your body, does not guarantee size or fit and does not produce decisions with legal or similar effects about you.

7. Who we share data with

Data is shared only when necessary to provide and protect the service, namely with:

• artificial intelligence processing providers, which receive the photo and the product image only for the duration of the request;
• hosting and database providers;
• authentication and payment services used by the store;
• email sending and receiving services.

8. International transfers

Some providers may process data outside the European Economic Area. Where applicable, appropriate legal and contractual mechanisms are used to protect that data.

9. How long we keep data

The photo you send and the generated image are not stored by Swappy. They exist only during the request and are discarded once the image is delivered to your browser or the request fails.

Information about the store's products and the aggregated counters are kept while the store's installation is active, so the button does not have to be decided again on every visit.

The irreversible identifiers used to limit requests are kept for the counting period and then removed by a daily routine.

Contacts sent directly to Swappy are kept until the request is resolved and for a further 30 days.

Account, subscription and contractual acceptance data is kept while the account or service relationship is active. After closure, it is retained only for the period needed to comply with legal obligations, resolve contractual matters and exercise or defend rights, and is then deleted or anonymised where applicable.

Provider backups and technical records may follow their respective operational retention periods.

10. Cookies and similar technologies

The Swappy Fashion button and window on a store's website do not use cookies, localStorage, fingerprinting or persistent identifiers in your browser. The photo is sent directly from your browser to Swappy and nothing is recorded on the device.

Swappy does not use advertising cookies, third-party analytics tools or session recording.

Strictly necessary cookies or technical mechanisms may be used for authentication, session maintenance and protecting the website and forms against abuse and automated requests.

11. Your rights

Under applicable law, you may request:

• access to your data;
• correction of inaccurate data;
• deletion of the data;
• restriction of or objection to processing;
• data portability, where applicable;
• withdrawal of consent, where applicable.

You also have the right to lodge a complaint with your local data protection authority. In Portugal: CNPD

12. Security

We apply technical and organisational measures intended to limit data collection, access and retention to what is necessary. No system is entirely free of risk.

13. Changes to this policy

This policy may be updated when the service, providers or legal requirements change. The date of the latest version is always shown at the top of the page.

14. Contact

For privacy, access or deletion requests, use Swappy's contact form. We may request enough information to locate the data, confirm the requester's identity and protect the privacy of other people and stores.