Privacy Policy
Last updated: 2026-07-06
DRESSO is operated by Dresso, Germany ("we", "us", "DRESSO"). This policy explains what personal data we collect, why we collect it, and your rights over it.
What we collect
- Email address - used for your account, sending your style report, and subscription communications.
- Style Assessment answers - your responses to the 12-step assessment (skin tone, hair, eyes, goals, context, etc.). These drive your color analysis.
- Color analysis attributes - the output of the AI analysis: undertone, value, chroma, contrast level, hair description, eye description, skin description. Stored as structured data, not as an image.
- Subscription and payment records - plan chosen, billing period, payment status. Full card details are handled by Paddle and never touch our servers.
Garment Check
When you use the Garment Check feature, we store the garment attributes extracted from your photo - specifically the garment type (e.g. "dress shirt"), dominant colors (as hex codes and names), a fabric estimate if visible, and the check verdict (buy / depends). Your photo is never stored - only these extracted attributes are saved, and only when the analysis confidence is high enough to be useful. This data forms your wardrobe in the app and is used to personalise outfit recommendations. You can request deletion of all your wardrobe data at any time by emailing hello@dressoai.com.
Your selfie photo
Your photo is processed once, in memory, for color attribute extraction only. It is deleted immediately after analysis completes - it is never written to disk, never stored in our database, and never sent to any third party other than Google Gemini for the single analysis call described below.
We do not perform facial recognition, identity verification, or biometric identification. The analysis extracts color attributes only (skin tone range, undertone, contrast level). No face template or biometric record is created.
Why we process your data (lawful basis)
We process your data to perform the contract with you - delivering the Style Assessment, generating your color analysis report, and managing your subscription. Without this data we cannot provide the service.
Who we share data with
We use a small number of trusted processors:
- Google (Gemini API) - receives your selfie photo for the single image analysis call. Google processes it under their API data processing terms. Your photo is not used to train Google models under our API agreement.
- Paddle - handles all payment processing as Merchant of Record. Paddle stores your billing details under their own privacy policy and PCI DSS compliance.
- Resend - sends transactional emails (your report link, subscription receipts, renewal reminders).
- Vercel - hosts the application. Your data transits their infrastructure.
- Neon - our database provider, where your email, assessment answers, and color attributes are stored.
We do not sell your data. We do not share it with advertisers.
EU / GDPR rights
If you are based in the European Economic Area, you have rights under GDPR:
- Access - request a copy of the data we hold about you.
- Deletion - request that we delete your data. We will action this within 30 days. Deleting your data closes your account.
- Correction - request we correct inaccurate data.
- Portability - receive your data in a structured, machine-readable format.
- Objection - object to processing where we rely on legitimate interest (we currently do not use legitimate interest as a basis).
To exercise any of these rights, email hello@dressoai.com. We will respond within 30 days.
You also have the right to lodge a complaint with your national data protection authority. In Germany, that is your competent state data protection authority (Landesdatenschutzbehörde).
Age requirement
DRESSO is intended for users aged 16 and over. We do not knowingly collect data from children under 16. If you believe a minor has used the service, contact us and we will delete their data.
Data retention
We retain your email, assessment answers, and color attributes for as long as your account is active, plus a short period afterward for legal and accounting purposes (typically 3 years). Subscription and payment records are retained for 10 years as required by German tax law.
Changes to this policy
We will notify you by email of any material changes to this policy before they take effect.
Contact
Questions about your data: hello@dressoai.com