fashionistas.ai
Privacy

Privacy Policy

Effective October 12, 2026; last updated October 30, 2026 (America/New_York). This is the published privacy policy for fashionistas.ai. We do not sell your personal data.

What we store about you

  • Account data — your email address, a salted password hash (we do not keep a readable copy of your password), and the record that keeps you signed in.
  • Your closet and listing drafts — the text you enter: item name, brand, category, condition, prices, wear notes, and the listing drafts (title, description, size, tags, and which AI or seller wrote the copy). Listing drafts are text; the site does not upload your listing photos to our servers.
  • Usage counters — how much of the monthly fair-use allowance you have used (listings, AI photo rewrites, stylist messages) and how many try-on renders you have run today, so those limits can be enforced.
  • Try-on records — the finished render image (see below), plus a cost/operation log of each render: which model ran it, how long it took, and whether it succeeded.
  • Marketplace connections, if you make one — an eBay or Etsy OAuth connection is stored so the connector can act for you. If you paste your own eBay developer keys instead of using ours, those keys are carried in a short HttpOnly cookie (10 minutes, scoped to the eBay connect path) that is base64url-encoded rather than encrypted; anyone who can read that cookie can recover the keys, so prefer the ordinary connect flow.
  • Contact form — the name, email and message you submit on /contact. They are forwarded unchanged to the team through FormSubmit, a mail relay; the relay's own recipient address is not published anywhere on this site.

What happens to a photo you try on

Virtual try-on is a third-party render, not something computed inside your browser. When you press "try it on", your photo of the person and the photo of the garment are sent to a virtual-try-on rendering service — the FASHN VTON model, run on a Hugging Face Space, on our own Modal endpoint, or through the Replicate or FASHN APIs, depending on which is available — and the image it returns is the result you see. Before that, the site checks the photo actually contains a person: first on your own device, and, if that check could not run, with a detector on our server. The finished render is stored in Cloudflare R2 and served from a link containing a long random id: anyone who has that exact link can open the image without signing in, so do not try on a photo you would not want reachable that way. We have not set an automatic deletion schedule for stored renders — ask through the contact form and we will delete yours. A photo you submit for item identification is sent to a vision model for that one request — Cloudflare Workers AI, or Groq when that is the configured fallback — and is not stored by us.

AI text features

Listing copy and stylist answers can be generated by a text model. When you use one of those features, the text you submitted is sent to the AI provider the site is configured with — this deployment includes Cloudflare Workers AI, and an OpenAI-compatible provider (such as Groq) can also be configured. If no model is configured, drafts are written locally from your own text and nothing is sent to an AI provider.

The Fashionistas Crosslister browser extension

The extension is optional and desktop-only: Chrome extensions do not run on phones, and Post everywhere works on any phone without it. It acts only after you press List everywhere on your fashionistas.ai dashboard. It opens the Poshmark, eBay, Depop, Mercari, Grailed, Vestiaire Collective, Vinted, Etsy, Facebook Marketplace, Shopify and WooCommerce sell pages in your own browser, fills each form with the listing you built here, attaches your listing photos, and presses that shop's own List, Save or Publish button. Shopify and WooCommerce use the store domain you connected; if it is missing, that shop stops instead of guessing a store. It never signs in for you: if a shop is signed out or shows a CAPTCHA, it stops that shop and leaves the tab open for you. It does not ask for, read or store a marketplace password, and it does not read cookie values, session tokens or your browsing history.

The extension sends nothing to fashionistas.ai servers. It reports each shop's progress to the fashionistas.ai tab you already have open; if you are signed in, that page saves the result and the live listing link to your own listing record. We do not sell that data, do not use it for advertising, and do not send it to any other company. All of the extension's code ships inside its Chrome Web Store package; it does not download or run remote code.

Advertising

Google AdSense is loaded on the pages you browse: the home feed, item pages, the about, pricing and guide pages, the blog posts and the price-guide pages. Ad units are deliberately not placed on the screens where you work with your closet — sell, your listings, the seller assistant, virtual try-on or See it in a space — so advertising cookies are not set while you are using your account.

  • Google is a third-party vendor on this site and uses cookies to serve and measure ads.
  • Cookies, including the DART cookie, may be set on these pages by Google and its advertising partners, including based on your prior visits to this site and to other sites, so that ads can be served and measured.
  • Google and its partners use these cookies to serve ads based on your visits to this site and to other sites.
  • You can opt out of personalized advertising through Google Ads Settings.
  • You can opt out of other third-party vendors' use of cookies for personalized advertising at www.aboutads.info/choices.
  • Google's and its partners' use of cookies for advertising is also described, with opt-out instructions, at https://www.doubleclick.com/dev_resources.

Other third parties that see your data

  • Cloudflare — hosts the site, the database (D1), file storage (R2) and the Workers AI binding. Application data lives with Cloudflare.
  • The rendering services above — receive the two images for a try-on render and nothing else.
  • FormSubmit — receives contact form submissions to deliver them to us.
  • Google and jsDelivr — the marketing pages load fonts from Google; the try-on page loads its on-device pose check from jsDelivr and its model weights from Google's storage; the "See in my space" 3D viewer loads from Google's CDN. Those hosts see your IP address when they serve those files.

Cookies

We set a session cookie that keeps you signed in, and — only if you connect eBay or Etsy — the connection cookies described above. Your theme choice is stored in your browser, not on our servers. Advertising cookies come from Google AdSense, as described in the advertising section. We do not run our own cross-site tracking.

What we do not do

  • We do not sell or rent your personal information to data brokers.
  • There is nothing to buy on the site, so we hold no payment card details. See the terms.
  • Publishing to marketplaces without a seller API happens in your own signed-in browser. The optional Fashionistas One-Click Crosslister extension automates Poshmark, eBay, Depop, Mercari, Grailed, Vestiaire Collective, Vinted, Etsy, Facebook Marketplace, Shopify and WooCommerce; other shops use the copy-and-open flow on your board. The extension never receives your marketplace passwords, cookies or session tokens; it reports the result to your dashboard, which saves it with your listing. eBay and Etsy also have server-side connectors, but no real listing has ever been posted through them — the eBay connector talks to eBay's sandbox environment and the Etsy connector creates a draft.
  • Kidizen shut down, so it is not one of these shops.

Retention

We have not set automatic deletion schedules. Delete your account yourself at /account/delete/ (signed in), or ask through the contact form and we will delete your account, your closet and listing drafts, and your stored try-on renders.

Children

The service is for people who resell clothing and can enter a binding contract. It is not directed at children, and we do not knowingly collect their data.

Your choices

Use the contact form to request a copy of your data or to have your account and stored data deleted. The team's location and contact route are on /about/ and /contact/.

Changes

This page carries the date it took effect. When what we collect changes, we will publish an updated page with a new date.

This page describes what the product actually does today, in plain language. It is not legal advice.