Privacy Policy

Clothing Enhancer is operated by clothingenhancer, located at Wibrandtsvej 69 Birk, 2300 København S, Denmark. You can reach us at Birk2300s@gmail.com.

This Privacy Policy explains how we collect, use, store, and protect your personal data when you use our website and services.

• Account information: email address and authentication details (passwords are hashed and never stored in plain text).
• Photos and generated content: images you upload for enhancement or swapping, and the outputs our AI generates for you.
• Usage data: credits used, subscription state, feature usage, and standard server/access logs.
• Payment information: we do not store card details. Stripe provides us with non-sensitive identifiers such as customer ID, subscription status, and last 4 digits.
• Communications: messages you send us via the contact form or email.

• To provide and operate the service (process images, manage credits, authenticate users).
• To manage subscriptions, billing, and customer support.
• To send account, billing, and service-related emails.
• To send review-request or marketing emails only when you have consented or where otherwise permitted by law.
• To improve and secure the service through aggregated usage analytics.

We process your personal data based on: (1) the performance of our contract with you, (2) compliance with legal obligations, (3) our legitimate interests in operating and securing the service, and (4) your consent, where required (for example, for marketing cookies and emails).

We use necessary cookies to keep you signed in and maintain site functionality. With your consent, we also use Meta Pixel cookies for marketing and analytics. You can manage your choice anytime through the cookie banner or by clearing your browser cookies. See our Cookie Policy for details.

We rely on the following service providers to operate the service:

• Lovable Cloud — application hosting, database, authentication, and storage.
• Stripe — payment processing and subscription management.
• Resend — transactional email delivery.
• Google — authentication when you choose to sign in with Google.
• Meta — marketing analytics via Meta Pixel (only with your consent).

We retain your personal data for as long as your account is active and as needed to provide the service. If you request deletion, we remove your data as soon as reasonably possible, unless we are required to retain it by law.

Depending on your location, you may have the right to access, correct, delete, restrict, or port your personal data, and to object to certain processing. To exercise these rights, contact us via the contact page. We will respond to verified requests as quickly as we reasonably can.

We use HTTPS for all traffic, row-level security in our database, and server-side environment variables for secrets. No security measure is perfect, and we cannot guarantee absolute security.

Some of our subprocessors are based outside the European Economic Area. Where this occurs, we rely on appropriate safeguards, such as Standard Contractual Clauses, to protect your personal data.

We may update this Privacy Policy from time to time. The latest version will always be available on this page, and we encourage you to review it periodically.