VESTE · INFORMATION
Privacy policy
Draft for review · 13 October 2026
1. Scope and controller
This policy describes data processing on Veste’s informational website. Photo processing in the app is described separately below. Controller: [full name or legal company name pending]. Address: [pending]. Privacy contact: [email pending].
2. Data processed by this website
This is an informational website. It has no forms, website accounts, payments, newsletters, advertising or visitor analytics added by Veste. Images and styles are served from the same hosting service; no third-party videos or fonts are embedded.
When you visit, the hosting provider may process technical information needed to deliver and secure the site, such as your IP address, date, requested resource, browser and error logs. The site is served through Sites; platform access, where applicable, is governed by the provider’s terms and privacy information. Contracted providers, recipients, log retention periods and safeguards for international transfers still need to be documented.
3. Purposes and legal bases
Site delivery and security rely on the legitimate interest in providing a functioning website and preventing abuse, limited to necessary technical data. If you contact us through channels made available, we will use your message and reply address to handle your enquiry: pre-contractual steps or performance of a service where applicable, or a legitimate interest in answering other enquiries. Legal obligations will be addressed under the appropriate legal basis. A support enquiry will not be used to send advertising without any required permission.
4. Retention and recipients
Communications will be retained while handling the enquiry and, where necessary, restricted for applicable statutory liability periods. No invented retention period is given for hosting logs: the provider’s actual period still needs to be documented. Hosting and email providers may have access, as may authorities where legally required. Selling data or building advertising profiles is not planned.
5. Your rights
You may request access, rectification, erasure, restriction, objection and portability where applicable, and withdraw consent without affecting the lawfulness of earlier processing. The controller’s contact details will be provided here. Additional identification will only be requested where necessary. You may complain to the competent data protection authority; in Spain, the Spanish Data Protection Agency.
6. Photos and data in the app
The reviewed version of Veste stores your wardrobe, looks and plans on your iPhone. Background removal runs on the device. When online analysis is enabled, the selected photo is sent to Veste’s server hosted on Supabase and to the OpenAI API to identify clothes and colours. Your entire wardrobe is not sent. The reviewed server does not implement photo storage and asks the provider not to save the response as a conversation object; this does not exclude the provider’s technical or security retention.
Photos and Privacy in the app explains this process and lets you disable future online analysis, using more limited local recognition instead. Disabling it does not undo a completed transfer. You can delete saved clothes and looks in the app. External shopping searches use descriptions and are subject to the privacy practices of the websites you open.
Still required before finalising the app policy: confirm effective retention settings, provider contracts and transfers, and the legal basis for each processing activity. The reviewed code enables remote analysis by default; this must not be described as prior express consent already obtained. Publishing this policy does not replace information or permission that may be required in the app flow.
7. Changes
We will update this information when features or providers change. Changes requiring new permission will be communicated before the relevant processing begins.