stylor

1. Introduction

This Privacy Policy explains how Stylor Co. ("Stylor," "we," "us" or "our") collects, uses, shares and protects personal data when you use the Stylor mobile application and associated services. We process personal data in accordance with the EU General Data Protection Regulation ("GDPR"), the Ukrainian Law on the Protection of Personal Data, and other applicable laws. By using the Service, you acknowledge that you have read and understood this policy.

2. Data Controller and Contact Information

The controller responsible for your personal data is Stylor Co. For any questions or to exercise your rights, you can reach us at hello@stylor.co. We do not currently appoint a mandatory data protection officer, but this may change if required by law.

3. Categories of Data We Collect

We collect the following types of information:

Category	Description
Account data	Name, email address, username, password (hashed), date of birth or age, and language preferences.
Profile and content data	Photos or images you upload, comments and messages, fashion preferences, and any other information you choose to share.
Device and usage data	Device type, operating system, IP address, browser type, unique device identifiers, app version, and log data relating to your interactions with the Service.
Approximate location	We may infer your general geographic region from your IP address to customise content, but do not track your precise location without your consent.
Payment data	If you purchase premium features, we collect transaction details through our payment processors but do not store full payment card numbers.
Marketing preferences	Information about your consent or objection to receiving marketing communications.

We do not intentionally collect sensitive personal data (such as health or biometric data). If you choose to provide such data in a fashion context, we will treat it as confidential and process it only with your explicit consent or where permitted by law.

4. Sources of Data

We collect personal data directly from you when you register, submit content or communicate with us. We may also collect usage data automatically through cookies and similar technologies. We may receive limited information from third‑party authentication providers (e.g., if you log in using a social media account) and from analytics providers. We do not purchase personal data from data brokers.

5. Purposes and Legal Bases for Processing

Under the GDPR, we must identify a lawful basis for each use of personal data. Under the Ukrainian Data Protection Law, processing must have a lawful purpose and consent is generally required. Our purposes and legal bases include:

• Performance of a contract. We process account, profile and usage data to provide and operate the Service, personalise your experience and deliver requested features. Without this information, we cannot perform the contract.
• Legitimate interests. We process data to improve the Service, perform analytics, prevent fraud, enforce our Terms, and ensure network and information security. We balance these interests against your fundamental rights and freedoms.
• Consent. We send direct marketing communications and process user‑generated photos and sensitive data only if you have given explicit consent. Under Ukrainian law, consent must be obtained prior to processing and may be withdrawn at any time.
• Legal obligations. We may process and disclose data as required by applicable laws, tax regulations or court orders.
• Vital interests. In very limited circumstances, we may process data to protect an individual's vital interests (e.g., to prevent serious harm).

6. How We Use Your Information

We use your personal data to:

• Create and maintain your account;
• Provide styling recommendations and personalise content;
• Facilitate social interactions and display your User Content to other users;
• Process transactions and manage subscriptions;
• Communicate with you about updates, security alerts and administrative messages;
• Send marketing messages if you have consented to receive them (you can opt out at any time);
• Conduct analytics and research to improve our products;
• Prevent fraudulent or abusive activity and ensure compliance with our Terms; and
• Comply with legal obligations.

7. Sharing and Disclosure of Data

We share personal data only as described below:

• Service providers. We use third‑party providers for hosting, data storage, analytics, customer support and payment processing. These providers process data on our behalf under confidentiality agreements.
• Other users. When you post User Content or participate in social features, other users may see the information you share. Please consider carefully what you choose to post.
• Business transfers. In connection with a merger, acquisition or sale of assets, we may transfer data to the acquiring entity subject to applicable laws.
• Legal requirements. We may disclose data if required by law or to protect the rights, property or safety of Stylor, our users or others. In Ukraine, personal data may be processed without consent in specific cases such as fulfilling legal obligations or protecting vital interests.
• With your consent. We may share data with third parties for marketing or other purposes when you have given specific consent.

We do not sell personal data. In compliance with the Digital Services Act, we do not use sensitive personal data or data of minors for targeted advertising and we do not present dark patterns.

8. International Data Transfers

Your information may be processed and stored in countries outside your country of residence, including outside the European Economic Area ("EEA"). When we transfer personal data to countries that do not provide an adequate level of protection, we use Standard Contractual Clauses or rely on other approved safeguards as required by GDPR. For transfers from Ukraine, we ensure that recipients commit to data protection obligations that reflect the principles of Ukrainian law.

9. Retention of Data

We retain personal data for as long as your account is active or as needed to provide services, comply with legal obligations, resolve disputes and enforce our agreements. When we no longer need personal data, we will delete or anonymise it.

10. Your Rights

Under the GDPR, you have the following rights:

• Access. You may request confirmation whether we process your personal data and obtain a copy of such data and related information, including the purposes of processing, categories of data, recipients, storage periods, and your rights.
• Rectification. You may request the correction of inaccurate or incomplete personal data.
• Erasure. You may request deletion of your personal data in certain circumstances (for example, when processing is based on consent and you withdraw it).
• Restriction. You may request restriction of processing under specified conditions.
• Portability. You may request to receive personal data you provided to us in a structured, commonly used and machine‑readable format and to transmit it to another controller.
• Objection. You may object to processing based on legitimate interests or direct marketing.
• Withdraw consent. Where we rely on consent, you may withdraw it at any time without affecting the lawfulness of processing before withdrawal.
• Lodge a complaint. You may lodge a complaint with a supervisory authority if you believe we have infringed data protection laws.

Under Ukrainian law, a personal data subject may withdraw consent, be informed about the controller, the composition of their data and purpose of collection, and the persons to whom data may be transferred. You may also submit complaints to the Ukrainian Parliament Commissioner for Human Rights (Ombudsman) or to a court.

To exercise any of these rights, please contact us at hello@stylor.co. We may ask you to verify your identity before responding to your request.

11. Security Measures

Stylor implements technical and organisational measures to protect personal data. We use pseudonymisation and encryption where appropriate, ensure the ongoing confidentiality, integrity and availability of processing systems, and maintain the ability to restore data in a timely manner in the event of an incident. We regularly assess the effectiveness of our security measures and train our staff to handle personal data securely.

12. Cookies and Similar Technologies

We use cookies and similar technologies to recognise you, remember your preferences and analyse how you use the Service. Some cookies are essential for the operation of the Service; others (such as analytics or marketing cookies) are optional. Where required by law, we request your consent before using non‑essential cookies. You can manage cookie preferences in the app settings or through your browser.

13. Children's Privacy

We do not knowingly collect personal data from children under 13. If we learn that we have inadvertently collected data from a child under 13, we will delete it promptly. Parents or guardians who believe we have collected data from their child may contact us at hello@stylor.co.

14. Changes to This Privacy Policy

We may update this policy to reflect changes in our practices, technologies or legal requirements. We will notify you of material changes by posting the updated policy in the app or via email. Your continued use of the Service after the updated policy becomes effective means that you accept the revised policy.

15. Contact

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at hello@stylor.co.