Privacy Policy

1. Who We Are

Scaleon Digital Ltd ("MIRRR", "we", "us") is the data controller for personal data processed through the MIRRR platform. We are a company registered in England and Wales under Company No. 17201919. Our registered office is Dept 6763, 196 High Road, Wood Green, London, N22 8HH, United Kingdom.

2. Data We Collect

Account data: Email address, name, and hashed password when you create an account.

Photos: Images you upload of yourself and garments. Photos are stored securely in Vercel Blob Storage (US-East region).

Generated images: AI-generated try-on results are stored and associated with your account.

Payment data: Processed securely. We do not store credit card numbers. We receive transaction IDs and amounts for credit tracking.

Usage data: Generation history, credit balance, session timestamps. No tracking cookies for advertising.

3. How We Use Your Data

We use your data solely to: provide the virtual try-on service; process credit purchases; maintain your account and generation history; communicate service updates; and comply with legal obligations. We do not sell your data. We do not use your photos for AI model training without explicit opt-in consent.

4. Third-Party Services

We share data with the following processors, strictly for service delivery:

• • Replicate (Google Nano Banana) — processes your photos and garment images to generate try-on results. Images are sent via encrypted API calls and not retained by Replicate after processing.
• • Vercel — hosts the platform and stores images via Blob Storage.
• • Neon — managed PostgreSQL database for account and transaction data.

5. Data Retention

Your photos and generated images are retained for as long as your account is active. Account data is retained for 30 days after account deletion to allow for recovery. Payment records are retained for 7 years as required by applicable accounting and financial regulations.

6. Your Rights (GDPR)

If you are in the EEA, you have the right to: access your personal data; rectify inaccurate data; erase your data ("right to be forgotten"); restrict processing; data portability; and object to processing. To exercise these rights, email privacy@mirrr.space.

7. Cookies

We use only essential cookies required for authentication and session management. We do not use advertising or analytics tracking cookies.

8. Security

All data is transmitted over TLS. Passwords are hashed with bcrypt. Photos are stored in encrypted blob storage. Database connections use SSL. We conduct regular security reviews.

9. Children

MIRRR is not intended for use by anyone under the age of 16. We do not knowingly collect data from children.

10. Contact

For privacy inquiries: privacy@mirrr.space

Postal: Scaleon Digital Ltd, Dept 6763, 196 High Road, Wood Green, London, N22 8HH, United Kingdom.