Privacy Policy

Images You Analyze in the Chrome Extension

Retention Period: Immediately deleted (except a face-blurred copy of a search that finds nothing — see below); an image sent to eBay's image search is covered under Third-Party Services

Images you analyze in the Chrome extension are processed in server memory and deleted right after analysis. We do NOT save them to disk, database, or any storage system, except a face-blurred copy of a search that finds nothing, described in the next section. Processing typically takes 2-3 seconds. When our catalog has no similar items for the area you selected, our server also sends that image to eBay's image search (see Third-Party Services).

Extension Searches That Find Nothing

Retention Period: Up to 30 days, then automatically deleted

When the first search on an image in the Chrome extension detects no items, we may keep a copy of that image to measure and fix detection errors. Before the copy is saved, the faces our server detects are blurred automatically (best-effort — it may miss a face at an unusual angle); if blurring fails or the result is uncertain, the copy is not saved. The original is still processed in memory and deleted right after analysis. We store the blurred image together with the version of our detector that processed it and its top guess with a confidence score kept to one decimal place — not the page it came from or any other details of the request — in a private Google Cloud Storage bucket in the United States. We store no identifier with the copy, and we do not link copies to our server logs (kept for 30 days, including the IP address of every request). We collect these copies only during a limited period of at most 21 days or until we have 600 images, whichever comes first, and each copy — including any copy in our review tools — is deleted within 30 days, sooner once we finish reviewing it. The copies are reviewed by an AI model (Anthropic's Claude, see Third-Party Services), not opened by people. They are not linked to your identity or any account, are used only to check detection accuracy (not to train our models), are not sold, and are not used for advertising. If you are in the EEA or the UK, we rely on our legitimate interest in finding and fixing detection errors (GDPR Article 6(1)(f)); we store no identifier with the copies and do not link them to our server logs, and you can contact us with any question or objection.

Images You Analyze in the Outfit Lens App for ChatGPT

Retention Period: Up to 3 days, then automatically deleted

When you analyze a photo through our app inside ChatGPT, we store a copy of that photo on our servers for up to 3 days. ChatGPT gives us only a temporary link to your photo that expires within hours; our own copy is what lets you return to the conversation within those 3 days and select a different region of the same photo without uploading it again. The search results for that photo — the products we matched, without the photo itself — are kept for 7 days. Cropped images of the items we detect are held only in server memory for up to 2 hours, and the app may keep those results, including the crops, in your browser for 2 hours. The photo copy is transmitted over an encrypted connection, is not linked to advertising, is not sold, and is not used to train models. Because it is tied to a search rather than to your identity or an account, we cannot retrieve a specific image to delete on request.

Favorites You Save in the Outfit Lens App for ChatGPT

Retention Period: Until 90 days after you last save or remove a favorite, then automatically deleted

When you tap ♡ on a product in our app inside ChatGPT, we save it to your favorites list on our servers so you can find it again in later conversations. For each saved product we keep its product ID, a copy of its listing from our catalog (name, brand, price and currency, product image link, store name, and a link to the store, which may be an affiliate link) and the time you saved it. A list keeps your 200 most recent favorites. The product details are copied from our own search results, not from anything you send us.

To keep your list apart from other people's without an account, we use the anonymous user identifier that ChatGPT gives to apps. We do not store that identifier: we keep only a one-way keyed hash of it (HMAC-SHA256), and the identifier is not written to our logs. Your favorites are not linked to your search terms, the photos you analyze, your conversations, your location or your language, or to the search a favorite came from. The returning-user record and per-conversation counts described below are hashed with the same server key but a different input, so the stored hashes differ and cannot be matched from the stored data alone, and we do not process them to link one to the other.

You can remove a favorite at any time by tapping ♡ again; it is deleted from our servers immediately. Viewing your list does not extend the 90-day period, and if you remove every favorite, an empty list remains until the same 90 days pass. We do not share your favorites with third parties. They are stored in a MongoDB Atlas database on Amazon Web Services in Seoul, South Korea, and handled by our servers on Google Cloud in the United States.

Clearing Your History in the App

In our app inside ChatGPT, open Settings (the gear button on the home screen) and choose Clear history. This immediately deletes, from our servers, your returning-user record and your favorites list, and it removes the copy of your search results kept on that device. Other data we keep is tied to a search rather than to you, so it cannot be found and deleted per person; it is deleted automatically instead: photo copies within 3 days, search results within 7 days, feedback you give in the app within 90 days, and server logs after 30 days (database backups can hold deleted data for up to 7 more days). A search that was still running when you cleared your history may create a new returning-user record when it finishes. We cannot tell whether ChatGPT gives our app the same anonymous identifier on your other devices, so clearing your history on one device may not clear records created on another.

Usage Counts in the Outfit Lens App for ChatGPT

Retention Period: Returning-user record: deleted automatically 14 days after we first saw it. Per-conversation counts: 24 hours after the conversation's last activity

To count how many people use the app again, we keep a returning-user record: for each anonymous identifier ChatGPT gives to apps, a one-way keyed hash of it (HMAC-SHA256), short one-way tags derived from the identifiers of the conversations it appeared in (at most 100) and the time we first saw it. It is deleted automatically 14 days after we first saw it, even if you keep using the app; a new record is created the next time you use the app. You can also delete it at any time with Clear history (see above). This record holds no searches, photos, results or favorites.

Separately, to count how often search results are shown and clicked in a conversation, we keep per-conversation counts: a one-way keyed hash of ChatGPT's identifier for that conversation — not for you — with the IDs and times of up to 50 recent searches in it and which of their results were shown or clicked. Through those search IDs it is linked to the search results we keep for 7 days. It is deleted automatically 24 hours after the conversation's last activity.

We do not keep either identifier itself, and we do not process these records, your favorites or our logs to link them to one another, except for the counting described in the next two sentences. To count how many new conversations come from people who have used the app before, our server writes two log entries for each search — one with the number of conversations the anonymous identifier has appeared in and the number of days since we first saw it, and one saying where the search falls in its conversation — and we match these two entries by search ID. We also match search IDs in our logs to leave our own test searches out of these counts. Neither entry contains your identifier or the conversation's identifier, and the result we keep is only the totals. Our server logs (kept 30 days) record when each search ran, so these records could be matched to a search by time; we therefore treat them as linked to your searches. We use them only to count usage.

Images You Voluntarily Submit to Improve Detection

Retention Period: Up to 90 days, then automatically deleted

You can voluntarily share a failure image to help us improve detection through two channels:

• Uninstall feedback page: When uninstalling, you can optionally attach an image our extension failed to recognize and check the consent box. On this page, detected faces are automatically blurred in your browser before upload (best-effort — it may not catch every face at extreme angles); if the blur step cannot run, the image is not attached or uploaded, so the original unblurred image never leaves your device.
• In-extension feedback: When detection fails or returns low-confidence results, a dialog inside the extension lets you submit the clothing crop image with your explicit consent. Detected faces are blurred on your device before upload, using the same on-device blur as the uninstall page (best-effort — it may not catch every face at extreme angles). If the blur step cannot run, the image is not uploaded at all, so the original unblurred image never leaves your device.

In both cases, these images are transmitted over an encrypted connection, used only to improve our fashion-detection models, are not linked to your identity or any account, are not sold, and are not used for advertising. They are automatically deleted after 90 days. Because they are not linked to you, we cannot retrieve a specific image to delete on request.

Feedback You Give in the Outfit Lens App for ChatGPT

Retention Period: Up to 90 days, then automatically deleted

If you use the feedback buttons on a search result in our app inside ChatGPT, we keep the reason you chose, which part of the screen it was about, the ID of that search, the app version and the time, so we can find and fix the problem. It contains no photo and no identifier for you, and it is deleted automatically after 90 days.

API waitlist

Retention Period: Until we decide whether to launch the API, and no longer than 12 months. You can ask us to delete it at any time by emailing contact@outfitlens.com.

If you join the waitlist for our visual search API, we keep your email address and anything you choose to tell us (for example your company or what you would use the API for). We use it only to contact you about the API beta. It is stored in our Google account (Google Forms or Gmail).

Search History (Local)

Retention Period: Until you uninstall the extension

Your last 100 searches are stored locally in YOUR browser only (not on our servers). This data is automatically deleted when you:

• Uninstall the extension
• Clear your browser data
• Perform your 101st search (oldest is deleted automatically)

Product Catalog

Retention Period: Permanent

We maintain a database of fashion products (names, prices, images, shopping links). This contains NO personal information about you - it is just a catalog of available products.

Server Logs

Retention Period: 30 days

Our servers keep logs to run the service, investigate errors and produce usage statistics. These logs:

• Contain your IP address, browser user agent and the address you requested, which for text searches includes your search words
• For the Chrome extension, also contain the random install ID used for analytics, event names, a session ID and the region we derive so that products from stores that ship to your country are listed first (other products are not hidden)
• Do NOT contain the images you analyze
• Are kept in Google Cloud and automatically deleted after 30 days. Your IP address and install ID are written on separate lines, but they can be matched by time within those 30 days, so we treat them as linked