Legal information

Privacy policy

Last updated: 11 October 2026.

OptiDress processes personal data in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation, “GDPR”) and French Law No. 78-17 of 6 January 1978 on information technology, data files and civil liberties (“Informatique et Libertés”).

Publisher: OPTIDRESS, société par actions simplifiée, 60 rue François 1^er, 75008 Paris, France.
Personal data contact: arthur@optidress.fr

Preamble: two distinct roles

OptiDress acts in two different situations, which are not governed by the same legal framework.

When you visit the optidress.fr website, request a demo or enter into a business relationship with OptiDress, OptiDress is the controller. Part 1 applies.

When you use the virtual fitting room on the website of a brand that is an OptiDress customer, the brand is the controller and OptiDress acts as a processor, on that brand's instructions and under an agreement compliant with Article 28 of the GDPR. Part 2 applies, and the privacy policy of the brand concerned also applies.

Part 3 sets out the provisions common to both situations.

Part 1 — The optidress.fr website and business relationship

OptiDress is the controller.

Data collected

• Contact details provided voluntarily when requesting a demo or getting in touch: name, email address, company.
• Browsing data: pages viewed, traffic source.
• Data relating to the contractual relationship with customer brands: contact persons' details, billing and subscription data.

Purposes and legal bases

Retention periods

• Prospecting data: three years from the last contact.
• Data relating to the performance of the contract: the duration of the contractual relationship, then archiving in accordance with statutory limitation periods.
• Audience measurement data: 25 months from collection, after which they are automatically deleted.

Part 2 — Virtual try-on service on customer stores

The brand operating the store is the controller. OptiDress is the processor.

What the brand decides and what OptiDress carries out

The brand decides to deploy the virtual fitting room on its store and determines its purposes. OptiDress provides the service and processes data only on the brand's instructions, for the sole purposes described below. OptiDress does not use these data on its own behalf, for prospecting, or to pass them on to third parties.

Data processed

The body data entered voluntarily by the visitor: height, weight, sex, measurements and body shape data needed to generate the avatar and the size recommendation.

No photograph is requested, uploaded or processed. The service relies exclusively on declarative data entered by the visitor. No image of the real person is collected, and body data are not used to uniquely identify a person.

OptiDress does not collect the name, email address, phone number or postal address of the brand's customers.

Purposes

• Generating an avatar matching the data declared by the visitor.
• Producing a visualization of a garment worn by this avatar.
• Producing a size recommendation based on the visitor's data and the garment's characteristics.

Legal basis

The legal basis is determined by the brand acting as controller. Entering body data is voluntary for the visitor: the service cannot be used without it, and the visitor can browse and buy on the store without using it.

Retention period

The generated avatar is kept for 30 days from its last use on the store concerned, so that the visitor can reuse it without recreating it. At the end of this period, it is deleted.

The retention periods applicable to the other processing carried out by the brand on its store are governed by that brand's privacy policy.

Minors

The service is not intended for persons under fifteen without the authorization of the holder of parental authority. Any request to delete data concerning a minor can be sent to arthur@optidress.fr and will be handled without delay.

Exercising rights

The visitor exercises their rights with the brand operating the store, which is the controller. OptiDress assists the brand in handling these requests and deletes, rectifies or communicates the data concerned on its instructions.

A request sent directly to OptiDress is forwarded to the brand concerned.

Part 3 — Common provisions

Subprocessors

OptiDress uses the following providers, which act on instructions and under agreements compliant with Article 28 of the GDPR.

The reference version of this list, kept up to date, is published on the Subprocessors page, which forms an integral part of the data processing agreement concluded with customer brands.

This list is kept up to date. Customer brands are informed of any change in accordance with the terms of the data processing agreement between them and OptiDress.

Transfers outside the European Union

The following providers process data outside the European Union: Google Cloud (image generation, us-central1 region), Cal.com (appointment scheduling), Amplitude (website audience measurement) and Cloudflare (global network, without regionalization enabled), all in the United States. FASHN AI is established in the United Kingdom and processes data in the United Kingdom, the European Economic Area and the United States.

These transfers are governed by the standard contractual clauses adopted by the European Commission, supplemented where necessary by additional measures. Processing carried out in the United Kingdom is covered by the adequacy decision adopted by the European Commission for that country. Processing entrusted to Vercel and Amazon Web Services is located in France, and processing entrusted to Supabase in Sweden: it takes place within the European Union and involves no transfer.

Security

Data are encrypted in transit and at rest. Access to data is limited to the people who need it to perform their duties.

Cookies and trackers

The optidress.fr website places audience measurement trackers. Non-essential trackers are only placed after consent has been obtained, and this consent can be withdrawn at any time.

The virtual try-on service deployed on customer stores does not place any cookies. It uses the local storage of the visitor's browser: an optidress_avatar entry (and its variants optidress_avatar_lite and optidress_avatar_v2) that keeps the avatar so it can be reused without recreating it, and an optidress_sid session identifier in session storage, cleared when the tab is closed. The cookies present on the store are those of the brand's e-commerce platform: OptiDress only reads whether they are present to detect the technical environment, without placing or modifying them.

Your rights

You have the right of access, rectification, erasure, restriction, portability and objection regarding your data.

For data covered by Part 1, write to arthur@optidress.fr.

For data covered by Part 2, contact the brand operating the store on which you used the service.

You can lodge a complaint with the Commission nationale de l'informatique et des libertés (CNIL, the French data protection authority), 3 place de Fontenoy, 75007 Paris, www.cnil.fr.

Changes to this policy

OptiDress may amend this policy. The date of the last update appears at the top of the document. Customer brands are informed of substantial changes.