Privacy Policy

1. Data Protection at a Glance

The following notes provide a simple overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to personally identify you.

2. Data Controller

The controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.

3. Data Collection on This Website

Cookies

This website uses cookies. Cookies are small text files that are stored on your device and saved by your browser. We use the following types of cookies:

• Necessary Cookies: Required for basic website functions (authentication via Supabase).

Important: We currently do not use any analytics or marketing cookies. Only necessary cookies for authentication (Supabase) are used.

Server Log Files

The page provider automatically collects and stores information in server log files: browser type and version, operating system, referrer URL, hostname, time of server request, and IP address. This data is automatically deleted after 7 days.

4. Registration and Authentication

Registration is required to use our services. We use Supabase (a service by Supabase Inc.) for authentication and data storage. Data is stored in the EU (Frankfurt, Germany). The following data is collected during registration:

• Email address and account credentials
• User profile data (display name, bio, social links)
• User Reference Photos: Photos of yourself used as a base for try-ons
• Clothing Reference Images: Images of garments provided for try-on (processed transiently)
• Generated Try-ons: AI-generated results of your virtual try-ons
• Log data (timestamps, consent versions, API usage)

Legal basis: Art. 6(1)(b) GDPR (contract performance)

5. AI Processing

Our Virtual Try-On feature uses Google Gemini AI for image processing. Uploaded images are sent to Google for processing. Google processes the data according to their privacy policy: https://policies.google.com/privacy

Legal basis: Art. 6(1)(a) GDPR (consent) and (b) GDPR (contract performance)

6. Your Rights

You have the following rights under GDPR:

• Right to Information: You can request information about your stored data.
• Right to Rectification: You can request the correction of incorrect data.
• Right to Erasure: You can request the deletion of your data.
• Right to Restriction: You can request restriction of processing.
• Right to Data Portability: You can receive your data in a structured format.
• Right to Object: You can object to the processing of your data.
• Right to Complain: You can file a complaint with a supervisory authority.

To exercise these rights, please contact us at info@myserv.is

7. Data Security

We use SSL/TLS encryption for data transmission and modern security measures to protect your data from unauthorized access, loss or misuse.

8. Data Transfer to Third Countries

Supabase: All data is stored in the EU (Frankfurt, Germany).

Vercel (Hosting): Our application is hosted on Vercel (Vercel Inc.). Vercel may process network data and logs in accordance with their privacy policy to ensure service reliability.

Google Gemini AI: Images are sent to Google for transient AI processing. Google processes the data according to our enterprise-grade configuration where data is not used for model training.

9. Data Storage and Deletion

As an experimental testing service, we reserve the right to delete data at any time without prior notice.

Public Showcase

If you choose to publish an image to the "Public Showcase", it will be visible to all visitors of the website. You can "Unpublish" any of your showcase images at any time with a single click, which immediately removes them from public view.

10. User Responsibility

Important: Users are solely responsible for:

• The legality of uploaded images
• Obtaining necessary consent from people in images
• Compliance with copyrights and personality rights
• Backing up their own data

11. Limitation of Liability

We are not liable for:

• Errors or service outages
• Any data loss
• Actions of third-party providers (Google, Supabase)
• Misuse of the service by other users
• Consequential damages from use

Liability for intent, gross negligence, and personal injury remains unaffected.

12. Changes to This Privacy Policy

We reserve the right to update this privacy policy as necessary to comply with current legal requirements or to implement changes to our services.

13. Contact

If you have questions about data protection, please contact us: