Privacy Policy

1. Who We Are

Scaleon Digital Ltd ("MIRRR", "we", "us") is the data controller for personal data processed through the MIRRR platform. We are a company registered in England and Wales under Company No. 17201919. Our registered office is Dept 6763, 196 High Road, Wood Green, London, N22 8HH, United Kingdom.

2. Data We Collect

• • Account data: your name, email address and a hashed password, collected when you create an account, to run your account and sign you in.
• • Your IP address and the country it indicates, collected when you sign up, to refuse sign-ups from the countries listed in our Terms of Service.
• • Photos: images you upload of yourself and of garments, collected when you upload them, to generate your try-ons; stored in our hosting provider's encrypted storage in the United States.
• • Generated images: your try-on results, collected when a generation completes, to show them in your account.
• • Payment data: transaction ID, amount, currency and status (never your full card number), collected when you buy credits, to add credits, issue invoices and handle refunds.
• • Usage data: generation history, credit balance and session timestamps, collected while you use the service, to run the service and your balance.
• • Stylist bookings: session type, date and time, occasion, preferred stores, budget and notes, collected when you book a stylist session, to arrange the session.
• • Stylist applications: name, email, phone, city, country, experience, specialties, rate, bio, portfolio and Instagram links, availability and any CV you attach, collected when you apply to become a stylist, to review your application and, if approved, onboard you.
• • Messages to us: the name, email address and message you send through the contact form, collected when you contact us, to answer and handle your request.

We do not store card numbers, and we use no tracking cookies for advertising.

3. How We Use Your Data

We use your data solely to: provide the virtual try-on service; process credit purchases; maintain your account and generation history; communicate service updates; and comply with legal obligations. We do not sell your data. We do not use your photos to train AI models.

4. Third-Party Services

We share data with the following categories of processors, strictly for service delivery:

• • AI image-generation provider — processes your photos and garment images to generate try-on results. Images are sent via encrypted API calls and not retained by the provider after processing.
• • Cloud hosting and storage provider — hosts the platform and stores your photos and generated images.
• • Managed database provider — stores account, booking and transaction data.
• • Payment processor — processes card payments; we receive only the transaction ID, amount and status.
• • Team messaging service — delivers internal notifications to our team, including your account email when you buy credits or book a stylist session, and the content of messages you send through the contact form, so that we can respond.

Some of these providers process data outside the UK and the EEA, including in the United States.

5. Data Retention

Your photos, models and generated images stay in your account until you delete them or close your account. Deleting a photo, or closing your account from your Profile page, removes it (and, for an account, everything linked to it: photos, models, results, credits, purchases and bookings) from our database straight away; this cannot be undone. Copies of the image files you uploaded or generated can remain in our file storage after that; if you want those erased as well, ask us through our contact form. Records of card payments are also kept by our card payment processor.

6. Your Rights (GDPR)

If you are in the UK or the EEA, you have the right to: access your personal data; rectify inaccurate data; erase your data ("right to be forgotten"); restrict processing; data portability; and object to processing. To exercise these rights, write to us through our contact form.

7. Cookies

We use only necessary cookies and browser storage: to keep you signed in, protect forms, remember your currency and remember your answer to the cookie notice. We do not use advertising or analytics tracking cookies. Each one is listed in our Cookie Policy.

8. Security

All data is transmitted over TLS. Passwords are hashed with bcrypt. Photos are stored in encrypted blob storage. Database connections use SSL.

9. Children

MIRRR is not intended for use by anyone under the age of 16. We do not knowingly collect data from children.

10. Contact

For privacy inquiries, use our contact form or write to Scaleon Digital Ltd, Dept 6763, 196 High Road, Wood Green, London, N22 8HH, United Kingdom.