The Fashion Loupe — Privacy Policy

1.1 Information You Provide Directly

• Account information: name, email address, password (stored encrypted/hashed, never in plain text), and, where applicable, company/organization and job title/role.
• Communications: any information you provide when you contact us for support or feedback.
• Payment information: if you subscribe to a paid plan, payment card details will be collected and processed directly by our payment processor (e.g., Stripe) and are not stored on our own servers.

1.2 Information Collected Automatically

• Usage data: pages visited, features used, time spent, referring URLs, and general interaction data with the Service.
• Device and technical data: IP address, browser type, operating system, and device identifiers.
• Cookies and similar technologies: see Section 5 below.

1.3 Information We Do Not Intentionally Collect

We do not knowingly collect sensitive personal data (e.g., health, religion, political opinions) and ask that you do not submit such information to us.

We use the information we collect to:

• create and manage your account and authenticate your access to the Service;
• provide, operate, maintain, and improve the Service;
• communicate with you, including sending account-related notices, security alerts, and (with your consent, where required) product updates;
• process payments and manage subscriptions.
• monitor and analyze usage trends to improve product design and content;
• detect, investigate, and prevent fraudulent, unauthorized, or illegal activity, including violations of our Terms of Use (e.g., data scraping); and
• comply with legal obligations.

If you are located in the European Economic Area, our legal basis for processing your personal data depends on the context:

• Performance of a contract — to create your account and provide the Service you signed up for;
• Legitimate interests — to secure and improve the Service, prevent abuse, and understand usage patterns, provided these interests are not overridden by your rights;
• Consent — for optional communications (e.g., marketing emails) and non-essential cookies, which you may withdraw at any time; and
• Legal obligation — where processing is required to comply with the law.

We do not sell your personal data. We may share information with:

• Service providers / processors who perform services on our behalf, currently including:
• Supabase (database hosting, authentication, and infrastructure);
• Lovable (application hosting/development platform);
• Stripe (payment processing);
• other providers as the Service evolves (this list will be kept up to date here);
• Legal and safety purposes — where required to comply with a legal obligation, protect our rights, or investigate fraud or security issues;
• Business transfers — in connection with a merger, acquisition, financing, or sale of assets, subject to standard confidentiality arrangements; and
• With your consent — for any other purpose disclosed to you at the time of collection.

We use cookies and similar technologies to operate essential features of the Service (e.g., keeping you logged in) and, where applicable, to understand usage patterns. You can control cookies through your browser settings; disabling essential cookies may affect your ability to use the Service. A cookie banner/consent mechanism will be required to your acceptance before as required under EU ePrivacy rules.

We retain personal data for as long as your account is active or as needed to provide the Service, comply with our legal obligations, resolve disputes, and enforce our agreements. You may request deletion of your account and associated personal data at any time, subject to Section 8 below.

We implement reasonable technical and organizational measures designed to protect your information, including encrypted password storage, access controls, and secure infrastructure providers (Supabase). However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

Depending on your location, you may have the right to:

• access the personal data we hold about you;
• correct inaccurate or incomplete data;
• delete your personal data ("right to be forgotten");
• restrict or object to certain processing;
• data portability — receive your data in a structured, machine-readable format; and
• withdraw consent at any time, where processing is based on consent.

To exercise any of these rights, contact us at thefashionloupe@gmail.com. We will respond within the timeframe required by applicable law (e.g., one month under GDPR).

If you are in the EEA and believe we have not addressed your concern, you have the right to lodge a complaint with your local data protection authority.

Our database infrastructure (Supabase) is currently hosted in the EU (Paris, France — eu-west-3 region). Where we use service providers based outside the EEA, or if this hosting region changes, we will rely on appropriate safeguards (such as Standard Contractual Clauses) for any resulting international data transfer.

The Service is not directed to, and we do not knowingly collect personal data from, individuals under the age of 18. If we become aware that we have collected personal data from a person under 18 without verified parental consent, we will take steps to delete that information.

The Service may contain links to third-party websites. We are not responsible for the privacy practices or content of those third parties. We encourage you to review the privacy policies of any third-party sites you visit.

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last Updated" date above, and, where required by law, we will provide additional notice. Your continued use of the Service after changes take effect constitutes acceptance of the updated Privacy Policy.

If you have questions about this Privacy Policy or our data practices, contact us at:

thefashionloupe@gmail.com - Lucca Bortolato de Menezes, operating as The Fashion Loupe at Corso Genova, 25, Milano, Italia.