— Privacy
Privacy Policy
Last updated · June 2026
Margaux is an AI personal stylist. To dress you well we necessarily handle some personal data — your email, the clothes you photograph, the style answers you give us. This policy explains, plainly, what we collect, why, the legal basis for it, who processes it on our behalf, and the rights you have over it. We're a small operation and a beta; we've tried to keep this honest rather than exhaustive.
Who we are
The data controller is Marko-Petro Hankevych, a sole proprietor (enskild näringsidkare) established in Sweden, operating Margaux. You can reach us about any privacy matter at [email protected] .
What we collect & why
We only collect what the service needs to function:
- Account email & authenticationSo you can sign in and so we can send sign-in codes and receipts. We support Sign in with Apple and one-time emailed codes.
- Uploaded clothing photos (your wardrobe)So Margaux can see your actual pieces and build outfits from them.
- Style-quiz answersYour palette, fit, occasions, brands, and budget — so suggestions are tailored to you.
- Generated & saved outfitsSo your looks persist and improve over time.
- Product interactionsWhich items you view or save, so recommendations get sharper.
- Usage & analytics eventsAggregate signals about how the app is used, so we can fix and improve it.
We do not sell your data, and we don't use your wardrobe photos to train third-party models beyond what's needed to generate your own results.
Legal bases for processing
Under the GDPR, we rely on the following bases:
- Performance of a contractRunning the styling service you signed up for — accounts, outfit generation, saved looks.
- ConsentUploading your clothing photos. You choose what to add, and you can delete any piece — or your whole account — at any time.
- Legitimate interest or consentProduct analytics that help us understand and improve the app.
Who processes your data (subprocessors)
We use a short list of trusted providers to run Margaux. Each processes data only on our instructions, for the purpose shown:
| Provider | Purpose | Region |
|---|---|---|
| fal.ai | Image generation & garment vision | United States |
| Serper | Product search | United States |
| Resend | Transactional email (sign-in codes, receipts) | United States |
| Neon | Database hosting (your account & wardrobe) | EU — Frankfurt |
| Vercel AI Gateway | LLM inference (styling suggestions) | United States |
| PostHog | Product analytics | EU — Frankfurt |
| Apple | Sign in with Apple & App Store distribution | United States / global |
International transfers
Your account and wardrobe data are hosted in the EU (Frankfurt). Some of the providers above — notably fal.ai, Serper, Resend, Vercel AI Gateway, and Apple — are based in the United States, so certain data (for example, a photo sent for outfit generation, or an email for a sign-in code) may be processed outside the European Economic Area. Where that happens, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses to protect your data in transit and at rest.
How long we keep it
We keep your data for as long as your account exists. When you delete your account — from the in-app Delete Account control on web or iOS — the erasure is immediate and irreversible: deleting your account removes your profile, wardrobe, outfits, chat history, and sign-in records. There is no recovery window.
Your rights
Because we process the data of people in the EU, you have the following rights under the GDPR:
- AccessAsk for a copy of the personal data we hold about you.
- RectificationCorrect anything that's wrong — most of it you can edit directly in-app.
- Erasure (Art. 17)Delete your account and all associated data via the in-app Delete Account control.
- PortabilityReceive your data in a portable, machine-readable form.
- RestrictionAsk us to pause certain processing.
- ObjectionObject to processing based on legitimate interests, including analytics.
- Withdraw consentWhere we rely on consent (e.g. photo uploads), withdraw it at any time by deleting the data or your account.
To exercise access, portability, restriction, or objection, email us at [email protected]and we'll respond promptly. For erasure, the fastest route is the in-app Delete Account button, which does it instantly.
If you believe we've mishandled your data, you have the right to complain to the Swedish data protection authority, the Integritetsskyddsmyndigheten (IMY).
Children
Margaux is not directed at children under 16, and we don't knowingly collect their data. If you believe a child has provided us personal data, contact us and we'll delete it.
Contact
Questions, requests, or concerns about your privacy? Write to [email protected] . For the terms that govern use of the service, see our Terms of Service.