Privacy Policy
Last updated: January 2026
At GADA ("we", "our", or "us"), we are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website.
Information We Collect
We collect information that you provide directly to us when using our service:
- Account Information: Name, email address, and profile photo from Google OAuth sign-in
- Shopping Preferences: Style preferences, liked products, and onboarding selections you provide
- Chat History: Conversations with our AI shopping assistant
- Photos: Webcam captures or uploaded photos used for virtual try-on (stored temporarily in cloud storage)
- Payment Information: Transaction records for credit purchases (payment processing handled by Polar; we do not store card details)
Automatically Collected Information
When you access our website, we may automatically collect:
- Browser type and version
- Operating system
- Pages visited and time spent
- Referring website addresses
- IP address (for security and analytics purposes)
Cookies and Tracking Technologies
We use cookies and similar technologies to:
- Remember your preferences (theme, language settings)
- Analyze site traffic and usage patterns
- Improve our services
Third-Party Services
We use the following third-party services:
- Supabase: For user authentication (Google OAuth) and database storage
- Cloudflare: For hosting, content delivery, and backend processing
- Google Analytics & Microsoft Clarity: For analyzing site usage and improving our service
- Google AdSense: For displaying relevant advertisements
- Polar: For payment processing (credit purchases)
- Kling AI & Decart AI: For virtual try-on image generation and live fitting
- OpenAI: For AI-powered chat, product search, and review analysis
You can opt out of personalized advertising by visiting Google's Ads Settings.
How We Use Your Information
We use the information we collect to:
- Provide, maintain, and improve our AI shopping assistant
- Personalize product recommendations based on your style preferences and liked products
- Process virtual try-on requests and store results temporarily
- Save and restore your chat history across sessions
- Process payments and manage credit balances
- Analyze usage patterns to enhance user experience
- Protect against unauthorized access and abuse
- Comply with legal obligations
Data Security
We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction.
Your Rights
You have the right to:
- Access the personal information we hold about you
- Request correction of inaccurate data
- Request deletion of your data (where applicable)
- Opt out of certain data collection practices
Region-Specific Rights
European Economic Area & United Kingdom (GDPR / UK GDPR)
If you are located in the EU or UK, you have additional rights under the General Data Protection Regulation (GDPR) and UK GDPR:
- Right of Access (Art. 15): Request a copy of all personal data we hold about you
- Right to Rectification (Art. 16): Correct inaccurate or incomplete personal data
- Right to Erasure (Art. 17): Request deletion of your personal data ("right to be forgotten")
- Right to Restrict Processing (Art. 18): Limit how we use your data
- Right to Data Portability (Art. 20): Receive your data in a structured, machine-readable format
- Right to Object (Art. 21): Object to processing based on legitimate interests, including profiling
- Right to Withdraw Consent: Withdraw consent at any time via the cookie consent banner
Legal Basis for Processing: We process your data based on: (a) your consent (for analytics and advertising cookies), (b) legitimate interests (for essential site functionality), and (c) contractual necessity (for providing our services).
Data Controller: GADA, contactable at support@gada.uk
Data Protection Authority: You have the right to lodge a complaint with your local data protection authority.
United States (CCPA / CPRA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):
- Right to Know: Request disclosure of the categories and specific pieces of personal information we have collected
- Right to Delete: Request deletion of personal information we hold about you
- Right to Opt-Out: Opt out of the "sale" or "sharing" of your personal information for cross-context behavioral advertising
- Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights
- Right to Correct: Request correction of inaccurate personal information
We do not sell personal information in the traditional sense. However, our use of advertising cookies may constitute a "sale" or "share" under CCPA. You can opt out via the "Do Not Sell My Personal Information" link in our cookie consent banner.
South Korea (개인정보보호법 / PIPA)
대한민국 거주자의 경우, 개인정보보호법(PIPA)에 따라 추가적인 권리가 보장됩니다:
- 열람권: 수집된 개인정보의 열람을 요청할 수 있습니다
- 정정·삭제권: 부정확한 정보의 정정 또는 삭제를 요청할 수 있습니다
- 처리정지권: 개인정보 처리의 정지를 요청할 수 있습니다
- 동의 철회권: 쿠키 동의 배너를 통해 언제든지 동의를 철회할 수 있습니다
개인정보 처리 목적: (1) 서비스 제공 및 유지, (2) 웹사이트 이용 분석, (3) 맞춤형 광고 제공
개인정보 보유 기간: 이용 목적 달성 시까지 보유하며, 관련 법령에서 정한 보존 기간이 있는 경우 해당 기간 동안 보관합니다.
개인정보 보호책임자: support@gada.uk
Japan (個人情報保護法 / APPI)
日本在住の方には、個人情報保護法(APPI)に基づく追加の権利があります:
- 開示請求権: 保有する個人データの開示を請求できます
- 訂正・削除請求権: 不正確な情報の訂正または削除を請求できます
- 利用停止請求権: 個人情報の利用停止を請求できます
- 第三者提供停止請求権: 第三者への個人情報の提供停止を請求できます
利用目的: (1) サービスの提供・維持、(2) ウェブサイト利用分析、(3) パーソナライズ広告の提供
個人情報の取扱いに関するお問い合わせ: support@gada.uk
International Data Transfers
Your data may be transferred to and processed in countries other than your own. We use Cloudflare as our infrastructure provider, which may process data in various locations globally. For EU/UK users, we rely on Standard Contractual Clauses (SCCs) or adequacy decisions for lawful transfer. For Korean users, we ensure transfers comply with PIPA requirements for cross-border data transfer.
Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected:
- Account data & preferences: Retained while your account is active
- Chat history: Retained while your account is active; deleted upon account deletion
- Try-On photos: Stored temporarily for processing; not retained long-term
- Analytics data: Retained for up to 26 months (Google Analytics default)
- Cookie consent records: Retained for the duration required by applicable law
- Payment records: Retained as required by tax and financial regulations
Children's Privacy
Our service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13.
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.
Contact Us
If you have questions about this Privacy Policy, please contact us at:
Email: support@gada.uk