Privacy Policy

Klooset is an AI personal shopper that fashion retailers embed on their product pages. It is operated by Grégoire PETIT (EI), a sole trader registered in France, who acts as the data controller for the purposes of this policy. This policy explains how we handle personal data across two surfaces: the Klooset website at klooset.app, and the Klooset widget that runs on our retailers' online stores.

For questions about this policy or your data, or to exercise your rights, contact us at [email protected].

Postal address: 21 rue Vaudrey, 69003 Lyon, France.

Website visitors

With your consent, we use Google Analytics to measure how visitors use klooset.app: pages viewed, approximate location, device and browser. No analytics cookie is set until you accept via our cookie banner. If you fill in the demo-request form, we collect the first and last name, work email, company and, if you choose to give it, the phone number you provide.

Shoppers using the widget

To generate a try-on, colour profile or size recommendation, the widget processes the photos you choose to upload (a selfie and, for try-on, a full-body photo) and any measurements or preferences you enter. These photos are never stored on our servers. They are sent directly to the AI providers, used only to produce your result, then discarded on our side. Your result and profile are saved only in your own browser for 30 days, on your device.

Messages to the assistant

When you ask the shopping assistant a question, your messages, the product you are looking at and, if you have one, your saved colour and size profile are sent to Anthropic to write the reply. The conversation itself is not kept on our servers: your browser sends it again with each message. We do keep the questions you type for 30 days, so we can check the quality and safety of the answers, after which they are deleted automatically. We keep them with the products the assistant showed you and technical measures of the reply, and with the random store identifier described below, never with a name, an email or an account. The assistant's replies are not kept. Please do not share personal details such as your name, address or health information in the conversation.

Anonymous measurement on retailer stores

To show retailers how the widget performs, it sends usage events (for example: widget opened, result shown, add to bag clicked) tagged with a random identifier kept in the store's local storage. This identifier is not linked to your name, email or any account, and it differs on every store. When a retailer adds our snippet to its order confirmation page, the order reference, amount, currency and, where provided, the products ordered are sent with the same identifier, so the retailer can measure the revenue attributed to the widget. No name, email or address is collected.

Retailer accounts

For retailers using the Klooset console, we store the account email, first name, a securely hashed password, and usage and performance metrics. If a retailer signs in with Google, we receive the Google account identifier, email and first name. If a retailer connects a Shopify store, we store an access token, encrypted at rest. We never store shopper photos.

Analytics is processed on the basis of your consent, which you can withdraw at any time.

Demo requests and sales contact are processed to respond to you and manage our commercial relationship.

The widget processes your photos at your explicit request, only to generate the output you asked for. When the widget runs on a retailer's store, that retailer is the controller of your photos and Klooset acts as their processor.

Messages to the assistant are processed at your request, only to answer you. As with photos, the retailer running the widget is the controller and Klooset acts as its processor.

Anonymous measurement on retailer stores is carried out on behalf of the retailer, as its processor, so it can measure how the widget performs.

Retailer accounts are processed to provide the service under our contract with the retailer.

Photos are the most sensitive data the widget handles, so we designed the product to hold onto them for as short a time as possible:

• They are never written to a Klooset database or long-term storage.
• They are sent to the AI model only to generate your result, then dropped.
• Klooset does not use them to train models.
• We do not run facial recognition and do not use them to identify you.

On klooset.app we set analytics cookies only after you accept them. We use Google Consent Mode, so before your choice no analytics or advertising cookie is written. You can change your decision at any time by clearing your browser storage for this site, which brings the consent banner back.

The widget uses your browser's storage to remember your result and profile for 30 days on your device. This is essential to the feature you requested and stays on your device; you can clear it at any time.

The widget also keeps a random identifier in the store's local storage for the anonymous measurement described above. It is not needed for the feature you requested; where consent is required, it is collected by the retailer through its own consent banner.

On our product demo (demo.klooset.app) we also use Microsoft Clarity for session replay and heatmaps, so we can see how the demo is used. It runs only after you accept it on that page.

We do not sell your personal data. We rely on the service providers below, who process data only on our instructions:

Our website, API and database run in the European Union (our database is hosted in the eu-west-1 region). Some providers process data outside the EU: in particular, the try-on image is generated by OpenAI's model through fal.ai, and the colour analysis and the assistant's answers by Anthropic, all in the United States. Where that happens, transfers are covered by appropriate safeguards such as the European Commission's Standard Contractual Clauses.

Shopper photos are not retained: they are deleted right after processing. Questions typed to the shopping assistant are kept for 30 days, then deleted automatically. Demo-request details are kept for as long as needed to handle our conversation with you. Analytics data follows Google Analytics' retention settings. The widget profile in your browser expires automatically after 30 days.

Under the GDPR you can:

• Access the personal data we hold about you
• Have inaccurate data corrected
• Have your data erased
• Restrict or object to how we process it
• Receive your data in a portable format
• Withdraw consent at any time, without affecting prior processing
• Lodge a complaint with a supervisory authority (in France, the CNIL)

To exercise any of these, email [email protected]. If the widget was running on a retailer's store, we may direct your request to that retailer, who is the controller of your photos.

Klooset is not directed at children under 16 and we do not knowingly collect their personal data.

We may update this policy as the product evolves. When we make material changes, we will update the date at the top of this page.