Privacy
Privacy policy
Last updated 31 October 2026
Draft: this text will be reviewed before Drape opens to the public.
What we collect, why, who helps us, and how to see or delete it. In short: your photos and measurements are yours, used only to dress you, and gone when you delete them.
Who we are
Drape is run by [Your name or company name], [Postal address]. We decide how your data is used (the "data controller"). For anything about your data, write to [privacy contact email].
What we collect
- Your account: email address, and if you add them, a name and username. Sign-in is handled by Amazon Cognito; we never see your password.
- Your profile: date of birth (to check you are 18 or over), your country, and your style preferences.
- Your body data, only if you are 18 or over and agree to it: the photos you take for try-on and your body measurements (typed in, or estimated from your photos on our server).
- Your wardrobe: photos of clothes you add, links to products you add from stores (and the product's name, brand, photo and price that the store's page shows), your outfits and your try-on images.
- What you ask the stylist: the occasion, dress code and words you write, an inspiration photo if you add one, and the looks it finds for you in stores.
- Your plan: if you subscribe, Whop tells us your plan, its status and when it renews, and we count what you use each month. We never see your card or bank details.
- Where you are browsing from, at country level, to show prices in the right currency. We don't use analytics, advertising trackers or cookies for anything other than keeping you signed in.
Why we use it
We never sell your data, never show you ads based on it, and don't use your photos or measurements to train AI models.
- To run Drape for you: your account, your wardrobe, try-ons, outfit suggestions, finding pieces in stores, and your plan (the contract between us).
- Your body photos and measurements are used only with your explicit consent, which you can withdraw at any time by deleting them.
- To keep Drape safe and working: preventing abuse, enforcing the plans' limits, fixing problems (our legitimate interest).
Who helps us run it
A few companies process data for us, only to provide the service and under contract:
- Amazon Web Services (AWS): hosting, storage and sign-in. Your data is stored in the European Union.
- fal.ai: makes the try-on images, cuts out photos of clothes, and runs the AI models that describe your clothes, suggest outfits and plan looks (models by Google, reached through OpenRouter). For a try-on, your try-on photos and the chosen pieces are sent to fal.ai for that request; for a suggestion, a text description of your pieces and your request, and your inspiration photo if you add one.
- Web search, for shopping a look: the model searches the web through OpenRouter's search tool. Only words describing the pieces (for example "navy linen trousers, men, under 60 EUR") are searched, never your photos or account details.
- Whop: sells the subscriptions as the merchant of record. It handles payment, VAT and invoices under its own privacy policy, and tells us your plan.
Stores' pages
When you add a piece from a link, or when we look for pieces for you, our server reads the store's product page to get its name, photo and price. The store sees a visit from our server, not from you, and we don't send it anything about you.
Outside the European Union
Some of these providers are based outside the EU, for example in the United States, so data sent to them for processing can leave the EU. When it does, it is protected by the safeguards the GDPR requires, such as the European Commission's standard contractual clauses.
How long we keep it
- Everything stays until you delete it: photos, measurements, try-ons, your clothes and your looks can each be deleted in the app, at any time.
- An inspiration photo is used for that one request and not kept.
- Deleting your account deletes all your personal data: profile, body data, photos, try-ons, wardrobe, your clothes and your looks. Whop keeps the payment records the law requires of a seller.
- Photos are cleaned when you upload them: their location and camera details are removed.
- Backups: a copy of everything is made each night and kept for up to 5 weeks, so deleted data also leaves the backups within 5 weeks.
Your rights
You can see, correct, download and delete your data, withdraw your consent, and object to how we use it. Most of this is in Settings (download your data, withdraw consent, delete your account); for the rest, write to [privacy contact email]. We answer within one month.
If you think we got something wrong, you can complain to the CNIL (cnil.fr), the French data protection authority, or the one where you live.
Children
Body photos and measurements are only for people aged 18 or over.
Changes
If this policy changes in a way that matters, we will tell you in the app before it applies.