Personal Data Processing Policy

Document version: 2026-07-12

1. Data controller

Controller: LOOKA Staging, tax ID (INN) staging, company reg. no. (OGRN) staging, address: Technical staging environment.

2. What data is processed

• email, profile data and store details;
• product photos and generation results;
• measurements and measurement profiles you enter for pattern building;
• technical security logs, consents and operation history;
• for B2C — user-uploaded images where the corresponding rights are held.

3. Purposes and legal grounds

Account creation, service provision, security, support, contract performance and quality improvement. Marketing messages are sent only with separate consent.

4. Storage and protection

Files are hosted in private object storage. Access is granted via time-limited links. Passwords are hashed; sessions are stored as hashes. Staff access is role-limited and logged.

5. Storage location

Data is hosted on the controller's dedicated server; backups are kept in the same data center. Data is not transferred to third parties except where expressly required by law. The current hosting location address is provided on request to looka@fitalgo.org.

6. What happens to your photos

Uploaded photos are used only for your generations: outfit analysis, virtual try-on or pattern modeling. Photos are not transferred to third parties, not published without your consent and not used to train models. Source files and results can be deleted from your account at any time — both the file and its derivatives are removed.

Source photographs (your uploads) are automatically deleted from the server 30 days after upload — we do not keep them longer than needed for generations. Results (generated images and pattern files) are stored until you delete them yourself.

6.1. Photos of people (biometric data)

A photo of a person for virtual try-on qualifies as biometric personal data (Art. 11 of Russian Federal Law 152-FZ). Such processing is performed only with separate explicit consent: before your first try-on on your own photo you confirm it with a dedicated checkbox in the upload form — this consent is not covered by the general registration checkbox. Upload only your own photographs or photographs of persons who have given you consent. Photos of minors may be uploaded only by a parent or legal guardian.

7. Data of minors

The service is intended for users over 14 years old. Children's measurements and photos (e.g. for building a kids' pattern) are entered by a parent or legal guardian under their responsibility and with their consent; no separate account is created for a child.

8. Deletion

Users can delete individual files from the account or request account deletion. Active data is deleted within 72 hours; backups — according to the retention cycle set by internal regulations.

9. Contacts

For data processing questions: looka@fitalgo.org.