Effective 2026-08-01 · Version privacy-v1.0 · Last updated 2026-08-01

Privacy Policy

Who we are

Silora provides automated clothing-fit and styling information based on photos and information you submit.

**Privacy contact:** [email protected]

**Support:** [email protected]

**Mailing address:** To be confirmed before public launch

We are accountable for personal information under our control and will investigate privacy complaints.

Information we collect

### Account information

  • Email address

  • Name (if provided)

  • Authentication identifiers and account ID

  • Signup and login metadata

### Body-profile information

  • Quiz answers and proportion-related inputs

  • Height and style preferences, when collected

  • Fit goals you provide

This is styling and proportion information — not medical information unless you choose to submit health-related details we do not request.

### Uploaded content

  • Outfit and jeans photos you upload

  • Analysis requests and optional free-text prompts

  • Image metadata retained by our systems (we aim to minimize sensitive metadata; confirm EXIF handling in the service inventory)

### Generated information

  • Garment observations, scores, and recommendations

  • Signature Jean Formula and related outputs (when entitled)

  • Analysis history records

### Membership and billing

  • Plan, subscription status, renewal dates

  • Stripe customer and subscription identifiers

  • Payment outcomes and invoice references

Full payment card numbers are processed by Stripe and are not stored by Silora.

### Technical information

  • IP address and request logs

  • Device and browser information

  • Essential session/authentication cookies

  • Security and error events

  • In-app analytics events (no third-party advertising pixels confirmed at MVP)

### Communications

  • Support emails, feedback, and cancellation-related messages you send us

How we use information

We use personal information to:

  • Create and secure your account

  • Perform analyses you request

  • Save and display your history

  • Manage memberships and process billing

  • Send account and transaction-related emails

  • Detect fraud, abuse, and security incidents

  • Troubleshoot and improve reliability

  • Respond to support requests

  • Meet legal obligations

We do not use vague “any business purpose” collection. Optional marketing emails, if offered, require separate consent.

Photos and AI processing

**This is important:** When you upload a photo, Silora stores it in your account storage and sends it (and related text) to automated processing systems, including third-party AI providers such as Anthropic, to generate your analysis.

  • Photos are used to produce your results and may remain in your analysis history until you delete them or your account.

  • Silora does **not** use your photos to train its own models in the MVP.

  • Third-party AI providers process data according to their agreements and settings — confirm retention and training settings before launch.

  • We do not perform biometric identification for recognizing you across contexts; we analyze clothing and proportions in the submitted image.

  • Human review may occur for support, abuse investigation, or quality assurance on a limited basis.

Disclosure to service providers

We disclose limited information to providers that help us operate Silora, including:

  • **Supabase** — authentication, database, and file storage

  • **Stripe** — subscription billing and Customer Portal

  • **Anthropic** — AI/vision processing for analyses

  • **Hosting and email** — application delivery and transactional messages

These providers access information only as needed to perform services for us. Data may be processed in Canada, the United States, or other countries where providers operate.

We do **not** sell your personal information. We do not share information for third-party targeted advertising in the MVP.

Cookies and similar technologies

  • **Strictly necessary:** session and authentication cookies required to log in and stay signed in.

  • **Checkout:** Stripe may set cookies during hosted checkout.

  • **Analytics:** No third-party analytics cookies are confirmed at MVP launch.

Retention

We retain information only as long as needed for the purposes above:

  • **Account and profile:** until deletion, plus a limited legal/security period

  • **Uploaded photos:** until you delete the analysis or account

  • **Generated analyses:** until you delete them or your account

  • **Billing records:** as required for tax and accounting

  • **Security logs:** short operational window (approximately 90 days)

  • **Legal acceptance records:** for compliance while your account exists

  • **Backups:** rotated per provider schedules

See `docs/legal-service-inventory.md` for the internal source of truth.

Security

We use reasonable administrative, technical, and organizational safeguards such as encrypted connections, access controls, and provider security features. No method of transmission or storage is perfectly secure.

Your rights

Depending on applicable law, you may request access, correction, deletion, or information about how we handle your data. Contact [email protected].

You may withdraw optional marketing consent at any time if offered.

Account and analysis deletion

You can delete your account from **Account settings → Delete account** in the product. Deletion permanently removes your profile, body-profile data, uploaded photos, and saved analyses, and cancels any active subscription so you are not charged again.

Some billing records may remain with Stripe for tax and accounting purposes. Backup copies may persist until normal rotation, as described in the Retention section above. Deletion is intended to be irreversible.

If you cannot access your account, contact [email protected].

Data breaches

If we become aware of a breach involving personal information, we will investigate and provide notices required by applicable law.

Children

Silora is intended for adults **18+**. We do not knowingly collect personal information from children. If we learn an account belongs to someone under 18, we may delete it.

Policy changes

We may update this policy. The “Last updated” date will change when we do. Material changes may require renewed acknowledgement before certain features continue.

Complaints

Contact us first at [email protected]. You may also have the right to contact a privacy regulator, such as the Office of the Privacy Commissioner of Canada or the Office of the Information and Privacy Commissioner of Alberta, depending on applicable law. Confirm exact regulator language with counsel.