Legal

Privacy policy

Last updated: 17 October 2026

Clotheit helps you find where to buy the clothes you see in a photo. To do that we need a few pieces of information. This page explains which ones, why, who else sees them and what you can do about it.

1. Who is responsible for your data

Owner	Play Digital Training & Consulting Services SL
Tax ID	B16691883
Address	Calle del Castillo de Fuensaldaña 4, Ofic 126, Las Rozas Madrid, 28230
Email	hola@clotheit.com
Website	clotheit.com

2. What we collect

• Account: your name, email address and password. The password is stored encrypted (scrypt hash); we can never read it. If you sign in with Google or Apple, we receive only your name, your email (with Apple it can be a private relay address) and an account identifier; we never see your Google or Apple password.
• Photos you upload: each photo is sent to our AI provider to identify the garments. We do not keep the full photo. A small thumbnail is saved in your search history so you can reopen past searches, and you can delete it at any time.
• Search history: the garments detected and the products shown for each search, so you can see them again. How many searches are kept depends on your plan.
• Usage: how many searches you have used in your plan and how many pieces you have left in your packs.
• Technical data: your IP address, used to know which country you are in (so we can show you stores from there) and to stop abuse, such as limiting searches per hour or fake invitation accounts. We never store your full IP address: at most a scrambled fingerprint of it. We also keep error logs that help us fix problems.
• Usage statistics: we count visits and actions (for example, uploading a photo, finishing a search or clicking a store) and where visits come from (for example, TikTok or Google), to know what works. These counts are anonymous: they do not include your IP address, your account or any identifier, and we do not store anything in your browser to make them, so they use no cookies.
• Preferences in your browser: language and country, stored in your own browser (see the cookie policy).
• Payments: payments are processed by Stripe (card, Apple Pay, Google Pay and, in Spain, Bizum). We only keep your plan, whether it renews and a Stripe customer reference; we never see or store your card number or banking details.
• Support messages: if you write to us from the help page, your name, email and message, to answer you.
• Emails: we send you emails needed for your account (welcome, payment confirmations, replies to your questions). We may also send you the occasional offer about Clotheit, such as the welcome offer; every one of those has a link to unsubscribe.

We do not use your photos to identify people. The AI is instructed to look only at clothes and accessories. Please only upload photos you are allowed to use.

3. Why we use it and on what legal basis

Purpose	Legal basis (GDPR)
Creating your account, analysing your photos, showing results and keeping your history	Performance of the contract you accept when you sign up (art. 6.1.b)
Managing your plan and, when available, payments	Performance of the contract (art. 6.1.b) and legal obligations such as tax records (art. 6.1.c)
Security, preventing abuse and fixing errors	Our legitimate interest in keeping the service safe and working (art. 6.1.f)
Affiliate links to stores (see the affiliate disclosure)	Our legitimate interest in funding the service (art. 6.1.f). We do not share your name or email with stores or affiliate networks.
Answering your emails and support messages	Your request and our legitimate interest (art. 6.1.f)
Emails with offers about Clotheit	Our legitimate interest in offering you our own similar services (art. 21.2 LSSI). You can unsubscribe at any time from the link in each email.

We do not sell your data and we do not use it for advertising profiles.

4. Who else processes your data

We use trusted providers who process data only on our instructions:

• OpenAI (United States): analyses the photos to identify the garments. Under its API terms, data sent through the API is not used to train its models by default.
• Product search providers (Serper / SerpApi): they receive only the text of the search (for example "brown leather biker jacket"), never your photo, name or email.
• Hosting provider: the servers where Clotheit runs and where your account data is stored.
• Stripe (Ireland/United States): payments and subscriptions.
• Google and Apple: only if you choose to sign in with them.
• Resend (United States): sends our emails (it receives your email address and the content of the email).
• Stores and affiliate networks (currently Skimlinks): only when you click a product link and leave Clotheit. From then on, the store's own privacy policy applies.
• Google Fonts: the typeface of the website is loaded from Google's servers, which receive your IP address.

Some of these providers are located outside the European Economic Area. In those cases the transfer is covered by the EU-U.S. Data Privacy Framework or by the European Commission's Standard Contractual Clauses.

5. How long we keep it

• Account data: while your account is open. If you ask us to delete it, we delete it within 30 days.
• Search history: until you delete it, within the limit of your plan (older searches are removed automatically).
• Error logs: for a limited time, only as long as needed to fix problems.
• Support messages: up to 2 years after the last reply, in case you write to us again about the same issue.
• Your answers to "Looks like it?" (yes/no, the reasons you pick and any comment you write): up to 2 years, to improve the results. They are not linked to your name or email, so please do not write personal data in the comment.
• Billing records, when payments exist: for the period required by tax law.

6. Your rights

You can ask us to access, correct or delete your data, to restrict or object to its use, and to receive it in a portable format. Write to hola@clotheit.com from the email address of your account. We will answer within one month.

If you think we have not handled your data properly, you can complain to the Spanish Data Protection Agency (aepd.es) or to the authority of your country.

7. Age

You must be at least 14 years old to create an account. If you are younger, you need permission from your parent or guardian.

8. Security

Connections to Clotheit are encrypted (HTTPS), passwords are stored as hashes and session cookies cannot be read by other websites. No system is 100% secure, but we work to protect your data and will inform you if a serious incident affects it.

9. Changes

If we change this policy in an important way, we will tell you on the website or by email before the change applies.