Privacy Policy
In effect from: 28 September 2026 · Version 1.6
1. Who we are
The operator of LISTAI (listai.style, the LISTAI iPhone app and the browser extension) is SERHII TYTARENKO, a sole trader (entrepreneur individuel) registered in France, SIREN 102 719 770, address: 129 Allée Mériel, 83700 Saint-Raphaël, France; trading as LIS Solutions. Data enquiries: contact@listai.style.
For your account data we are the controller. For data that a stylist enters about their clients, the stylist is the controller and we process it on the stylist’s behalf (section 4 and section 15 of the Terms of Use).
2. What data we process and why
- Account: your email address — for sign-in with a one-time code (there are no passwords) and service messages; the date and version of the Terms and Policy you accepted; the date and version of your permission to transfer a photo for try-on (section 6).
- Profile: name, professional name, country, language, currency, units of measurement, profile photo.
- Stylist workspace: saved products (data and images from shop pages, notes), looks, guides, client cards.
- Wardrobe: photographs of your garments, processed images and the details you confirm (name, category, colours, brand). The original photograph is kept.
- Favourites and shop photos: saved items; for items photographed in a shop — your photos of the item, its tag and from the fitting room, the shop link, details you enter or confirm (name, brand, price, size, article number, category, colour) and the barcode read from the tag.
- Measurements and figure: the measurements you enter (height, girths, lengths), with their history of changes, and the figure you choose to see them on.
- Try-on photos and results: your photographs saved for try-on and the resulting images.
- Messages and feedback: direct messages with a stylist, comments and replies in guides, likes, ratings and reviews, read markers.
- Purchases and Credits: the ledger of LISTAI Credits operations and details of App Store purchases (section 11).
- Device: your device’s notification token (if you allowed notifications) and the device type (iPhone, iPad).
- Usage: guide opens and clicks through to products in a guide — so that the stylist sees what interested you; technical logs and error reports (section 14).
3. Legal bases for processing
We process data on the bases provided by the GDPR (Article 6):
- Performance of a contract — account, profile, workspace, wardrobe, favourites, measurements, messaging, purchases: the service cannot be provided without them.
- Consent — the transfer of your photo for try-on to an external AI service (section 6), a stylist’s access to your measurements and try-on photos (section 5), notifications on your device. Consent can be withdrawn at any time.
- Legitimate interest — technical logs, error reports, security, guide-open statistics for the stylist.
- Legal obligation — accounting records of purchases and responses to lawful requests.
4. Client data entered by a stylist
If a stylist adds information or photographs of their clients to LISTAI, they are used only to provide the service to that stylist: they are not included in analytics or error reports, not passed to third parties for their own purposes and not used by us to train models. The stylist is responsible for having a lawful basis to upload them and for their relationship with their clients.
6. Virtual try-on
- Permission: before a photograph of you is transferred to the try-on service for the first time, we ask your permission separately. Without it, the photo is not transferred and no Credits are spent. We keep the date and version of that permission; if the provider or the purpose of the transfer changes materially, we will ask again.
- What is sent: when a try-on is started by you — or by a stylist to whom you have opened your try-on photos — your photo (as a file) and images of the selected garments (as links valid for 15 minutes) are sent to Pruna to create an image. Neither your name, your address, your account identifier nor the guide’s title is sent.
- What stays with us: your try-on photos and your results are stored privately and are available only to you. A stylist sees your photos only if you opened them; the result of a try-on started by a stylist is kept by the stylist, and if the stylist sends it to you, your copy becomes yours.
- What we do not know: how long Pruna keeps the files it receives and whether it uses them to train its models — its documentation does not say, and we have not verified it; we cannot delete an uploaded file on Pruna’s side. What is known: Pruna works under a data processing agreement that prohibits transferring data outside the EU and EEA without our written consent and requires deletion of the data when the service ends.
- Nothing is published: the result is not published automatically. «Share» is your own action through the device’s system menu.
7. Recognition, texts and image processing
- Garment recognition (OpenAI): when you add a garment to your wardrobe, its photo is sent to OpenAI to suggest a category, colour, name and visible brand. When you photograph an item in a shop, the item photo and the tag photo are sent to OpenAI right after they are taken — to suggest a brand, name, article number, size, price and barcode. These are only suggestions: you check them before saving.
- Texts (OpenAI): when a product is captured with the extension — the text data of the product page (name, brand, description, composition, category, colour, the page’s structured data) for normalisation; for translation — the product and guide texts a stylist translates.
- Images (fal.ai, PhotoRoom): background removal, smoothing a garment and «invisible mannequin» — only when such processing is started for a specific image: when you add a garment to your wardrobe (if these settings are on), with the «Prepare» button in favourites, or by a stylist in the library. The selected image is sent — which may be your fitting-room photo if you chose it — together with the garment’s name and category. The result is stored with us; the original image is kept.
How long these providers keep the data they receive and whether they use it for training is governed by their own terms; beyond what is stated in section 13, we have not verified this and promise nothing.
8. Browser extension
The extension does not collect data in the background or in bulk: it extracts data from a specific product page only after your explicit action and sends the data you selected to your LISTAI account. It does not track your browsing history or read cookies, passwords or the contents of other tabs. Your session token is stored locally in the browser and sent only to LISTAI servers.
9. Screenshots and uploaded material
Screenshots and other material you upload are created by your explicit action. We store them on your behalf in your workspace and show them only to people you share with. You are responsible for the rights in such material (section 6 of the Terms of Use).
10. Messages and notifications
Direct messages between you and a stylist, and comments and replies in guides, are seen only by the participants of the conversation. Their text is not passed to third parties and is not translated automatically. «Read» and «typing…» markers are seen by the other side of the conversation.
If you allowed notifications, Apple (the APNs service) receives your device token and the notification text. A new-guide notification contains the guide’s title and the stylist’s name; a reply notification contains the guide’s title; message text is not included in notifications.
Reports. If you report a message, comment or review, LISTAI receives that text and a limited part of the conversation around it — up to ten items before and after it, from the same conversation only — together with who wrote what. We use this only to review the report, protect users and enforce the Terms of Use (our legitimate interest). Reports are reviewed by LISTAI; the stylist does not see them. The copy is kept for as long as needed to handle the report and any related claim, even if the original is deleted later. Before a report is sent, the app tells you plainly what will be included.
Blocking and filtering. You can block a person: after that neither of you can write to the other, and you receive no notifications from them. Messages, comments and reviews are checked on our server against a local list of words that are not allowed before they are saved; the text is not passed to anyone for this check. A refused text is not stored — we record only that a refusal happened.
11. Purchases and Credits
In-app purchases are processed by Apple; we do not receive your card details. To grant Credits exactly once, we verify the transaction signed by Apple and store: the transaction identifiers, the product, the number of Credits granted, the price and currency, the date, the environment (production or test) and the link to your account. The ledger of Credits spent and granted is kept for as long as the account exists.
12. Where data is stored
Database and authentication — Supabase (Ireland region, EU). Files (photographs and images) — Cloudflare R2; the storage location of files is not fixed to the EU. The application is hosted by Vercel. Some providers (section 13) process data outside the EEA; in such cases the transfer relies on mechanisms provided by the GDPR (standard contractual clauses and/or the EU–U.S. Data Privacy Framework).
13. Sub-processors and other recipients
- Supabase — database, authentication, real-time updates (EU, Ireland).
- Cloudflare (R2) — file storage.
- Vercel — hosting of the web application and server.
- ZeptoMail (Zoho) — delivery of sign-in code emails.
- Sentry — error reports; photographs, images and product content are excluded from events.
- OpenAI — garment and tag recognition, normalisation and translation of texts (section 7).
- fal.ai (Features & Labels, Inc.) — image processing (section 7). The company is based in the USA; individual models available through fal.ai run with their own developers.
- PhotoRoom — background removal, if this provider is selected instead of fal.ai; only one provider works at a time.
- Pruna — virtual try-on (section 6).
- Apple — in-app purchases and delivery of notifications to your device (sections 10 and 11).
In addition, the web workspace loads an in-browser background-removal library from the jsDelivr and IMG.LY content delivery networks — the images themselves do not leave your device, but these networks see your IP address. Videos in guides are embedded from YouTube or Vimeo, and the app loads YouTube video thumbnails: these services see your IP address when you open such a guide.
15. Retention and deletion
Data is kept for as long as your account exists. Individual photos, try-on results, garments and messages can be deleted at any time.
You can delete your account yourself: in the app — Profile → Delete account; on the website — in your profile. Deletion erases your profile, wardrobe, favourites, measurements, try-on photos and results, messages, the Credits ledger and the related files in our storage; stylists’ client cards are unlinked from the deleted account. App Store purchase records are kept for accounting without a link to the account. Copies already sent to providers (sections 6 and 7) are deleted under their own rules — we cannot delete them ourselves.
Technical logs and error reports are kept for the period set by our hosting and error-reporting providers. Sign-in code emails are not stored after delivery.
16. Your rights
Under the GDPR you may request access to your data, its rectification, erasure, restriction of processing and portability, object to processing and withdraw consent. Contact contact@listai.style. You also have the right to lodge a complaint with a supervisory authority — in France, the CNIL.
17. Age
The service is not intended for people under 16.
18. Changes
We may update this policy. We will announce material changes on the website and in the app and ask you to confirm the new version the next time you open LISTAI. The date and version of the current text are shown at the top.