Privacy Policy
Last updated: October 2026
1. Controller
The controller of your personal data is Manuel Fernández (Spanish tax ID 49201182L), Curros Enríquez 43, A Coruña (Spain), owner of Agalaz (agalaz.com). For any privacy question, write to infoagalaz@gmail.com.
2. Data we process
Account: email, name and sign-in method (Google, Apple or email code).
Photos: images you upload to try on clothes, generate outfits or videos. They are sent to the AI provider to create the result. We do not keep those photos on our servers; results are stored only on your device ("My fitting room").
Stylist profile photo: if you upload one, it is kept in private storage until you delete it or your account.
Payments: handled by Stripe and NOWPayments. We never see your card details; we only keep your plan, subscription status and credits.
Site usage: pages visited, device and approximate country. If you accept cookies, also advertising data and anonymous session recordings.
3. Purposes and legal basis
Providing the service (virtual try-on, outfits, videos, your account and credits): performance of a contract.
Billing and invoicing: legal obligation.
Cookieless statistics to improve the site and prevent abuse: legitimate interest.
Advertising and conversion measurement (Google Ads, Meta, Microsoft Ads), session recordings (Microsoft Clarity) and affiliate links (Skimlinks): only with your consent, which you can withdraw at any time.
We do not sell your data or use your photos to train AI models.
4. Who we share it with
Processors acting on our behalf: Supabase (database, EU), Vercel (hosting), Google Gemini, OpenAI, Replicate and Runway (AI processing), Stripe and NOWPayments (payments), Resend (email), DataFast and Vercel Analytics (statistics).
Only with your consent: Google Ads, Meta, Microsoft (Clarity and Bing Ads) and Skimlinks.
Some are based in the United States. Transfers rely on the EU-US Data Privacy Framework or the European Commission’s standard contractual clauses.
5. How long we keep it
Photos used to generate results: only while they are processed.
Account and profile photo: while your account is active.
Billing records: for the period required by tax and commercial law.
6. Cookies
Advertising and session-recording cookies are only enabled if you press "Accept" in the notice. If you reject them, the site works the same. You can change your choice with the button below.
7. Your rights
You can request access, rectification, erasure, objection, restriction or portability of your data, and withdraw your consent, by writing to infoagalaz@gmail.com. We reply within one month.
You may also lodge a complaint with your data protection authority (in Spain, the AEPD — aepd.es).