política de Privacidade
Last Updated: 16 August 2026
Estivlo respects your privacy and is committed to being transparent about how we collect, use, store and protect information when you use our website and services. Estivlo is a Casmir Group Brand providing AI-powered personal styling, Fashion Plans and related digital fashion services.
This Privacy Policy explains what information we collect, why we collect it, how we use and share it, how long we may retain it, and the choices and rights available to you. This Privacy Policy applies to visitors, guest users, registered users and customers of Estivlo worldwide, subject to the privacy laws that apply to you based on your location. By using Estivlo, you acknowledge this Privacy Policy.
1. About Estivlo
Estivlo is an AI-powered personal styling platform designed to help users explore personal style, receive fashion recommendations and create personalized Fashion Plans. Depending on how you use Estivlo, the platform may process information relating to your style preferences, lifestyle, occasions, destinations, budget, clothing preferences, conversations and other context that you choose to provide. Estivlo does not require you to upload or catalogue your wardrobe in order to use its core styling services. You may voluntarily describe clothing you already own when asking for styling assistance.
2. Information We Collect
We collect information in several ways:
-
Information you provide directly;
-
Information generated through your use of Estivlo;
-
Information collected automatically through the website and associated technologies;
-
Information received from service providers when necessary to operate the Service.
The information collected depends on how you interact with Estivlo.
3. Information You Provide
Depending on the features you use, we may collect:
a. Account information
This may include:
-
Name;
-
Email address;
-
Account identifier;
-
Login and authentication information;
-
Account preferences.
b. Style information
You may choose to provide:
-
Preferred fits and silhouettes;
-
Colour preferences;
-
Fashion preferences;
-
Style or aesthetic preferences;
-
Lifestyle information;
-
Clothing preferences;
-
Brand preferences;
-
Budget preferences;
-
Occasion information;
-
Travel or destination information;
-
Information about clothing or accessories you own or are considering.
c. Conversation information
When you use Estivlo's AI styling experience, we may process:
-
Questions;
-
Prompts;
-
Conversations;
-
Responses;
-
Styling requests;
-
Context provided during a conversation;
-
Information used to create Fashion Plans.
d. Transaction information
When you purchase Estivlo credits, we may maintain information such as:
-
Credit pack purchased;
-
Number of credits;
-
Purchase amount;
-
Currency;
-
Payment method;
-
Payment status;
-
Transaction or payment reference;
-
Purchase date;
-
Account identifier;
-
Credit issuance and usage information.
We generally do not need to receive or store complete payment-card details when payment is processed directly by a third-party payment provider.
4. Information We Collect Automatically
When you visit or use Estivlo, certain technical information may be collected automatically by Estivlo, Wix and other technologies used on the website. Depending on the configuration of the website and applicable technologies, this may include:
-
IP address;
-
Approximate location derived from IP address;
-
Browser type;
-
Device type;
-
Operating system;
-
Language and regional settings;
-
Screen or device information;
-
Pages visited;
-
Referring pages;
-
Date and time of visits;
-
General usage information;
-
Technical and security information;
-
Cookie and similar technology information.
Not every category is necessarily collected from every visitor.
5. Guest Users
Estivlo may allow visitors to use certain styling features without creating an account. Guest access may be subject to usage limits. To provide and protect guest access, we may process technical information such as IP address, approximate location, device information and usage information. Guest conversations may not be retained as permanent account history after the relevant browsing session ends. If you want your conversations and Fashion Plans to remain accessible, you may need to create a registered account.
6. Registered Users
When you create a Estivlo account, information may be associated with your account so that we can provide account-based features. Depending on your use of Estivlo, this may include:
-
Account information;
-
Style Profile information;
-
Conversations;
-
Fashion Plans;
-
Saved styling information;
-
Credit balances;
-
Purchase records;
-
Gifted-credit records;
-
Account activity.
This information enables Estivlo to provide a more personalized experience and allow you to return to previous conversations and Fashion Plans.
7. Style Profiles and Personalization
Estivlo may use information you voluntarily provide about your preferences to personalize your experience. For example, you may tell Estivlo about preferred fits, colours, aesthetics, lifestyle, occasions, destinations or budget. This information may be associated with your account and used to provide more relevant styling recommendations. Estivlo does not require you to provide every category of information listed above. You remain in control of how much personal information you choose to include in your styling conversations.
8. Conversations and Fashion Plans
When you interact with Estivlo, your prompts and other information may be processed to generate AI-powered responses. For registered users, conversations and Fashion Plans may be stored in your account history.
This may include:
-
Styling questions;
-
AI-generated responses;
-
Fashion Plans;
-
Outfit recommendations;
-
Styling preferences;
-
Information about clothing you mention;
-
Occasion information;
-
Travel information;
-
Budget information;
-
Other contextual information you provide.
The purpose of retaining this information is to provide features such as conversation history, saved Fashion Plans and personalization.
9. How We Use Your Information
We may use information for the following purposes.
a. Providing Estivlo
We use information to:
-
Provide AI-powered styling assistance;
-
Generate fashion recommendations;
-
Create Fashion Plans;
-
Maintain Style Profiles;
-
Save and display conversations;
-
Provide account functionality;
-
Manage styling sessions and credits;
-
Provide customer support.
b. Personalization
We may use information about your preferences and previous interactions to make future Estivlo experiences more relevant to you.
c. Payments and purchases
We use relevant information to:
-
Record purchases;
-
Manage credit packs;
-
Confirm payment status;
-
Issue credits;
-
Maintain transaction records;
-
Resolve payment-related issues.
d. Security and fraud prevention
We may use technical and account information to:
-
Detect misuse;
-
Prevent fraudulent activity;
-
Enforce usage limits;
-
Protect accounts;
-
Investigate security incidents;
-
Maintain the integrity of the Service.
e. Product improvement
We may use appropriate information to understand how the Service is used, identify technical problems, improve functionality and develop new features. Where required by applicable law, we will obtain consent before using information for purposes requiring consent.
f. Legal obligations
We may process information where reasonably necessary to comply with applicable laws, regulations, legal processes or lawful requests.
10. Legal Bases for Processing
For users in jurisdictions such as the European Economic Area and the United Kingdom, we process personal information on one or more lawful bases recognized by applicable data protection law. Depending on the circumstances, these may include:
a. Performance of a contract
We may process information necessary to provide the Estivlo services you request, including account functionality, styling services, Fashion Plans and purchases.
b. Legitimate interests
We may process information where necessary for legitimate interests such as:
-
Maintaining platform security;
-
Preventing fraud and abuse;
-
Improving and maintaining the Service;
-
Protecting our systems and users;
-
Understanding general service performance.
Where we rely on legitimate interests, we consider the impact on your rights and interests.
c. Consent
We may rely on your consent where required, including for certain non-essential cookies, marketing communications or other processing where consent is legally required. You may withdraw consent where applicable. Withdrawal of consent does not affect processing that occurred before withdrawal.
d. Legal obligations
We may process information where required to comply with applicable law.
11. AI Processing
Estivlo uses artificial intelligence and related technologies to provide personalized fashion recommendations, conversations and Fashion Plans. Information you provide may be processed by AI systems and technology providers that support the Service. This may include prompts, preferences and other contextual information necessary to generate a response. AI-generated content may occasionally contain errors, omissions or unexpected recommendations. Estivlo therefore does not guarantee that every AI-generated recommendation will be accurate, complete, current or suitable for your individual circumstances. You should use your own judgement when relying on AI-generated styling information.
12. AI Transparency and Automated Processing
Estivlo uses AI to generate styling recommendations and related content. You should understand that when you interact with Estivlo's AI styling experience, you are interacting with an AI-powered system rather than a human personal stylist. The AI may analyze information you provide, including your styling preferences and conversation context, to generate personalized fashion recommendations. These automated processes are intended solely to provide fashion and styling assistance. Estivlo does not use AI-generated styling recommendations to make decisions about your employment, credit, insurance, healthcare, legal status or other decisions producing legal or similarly significant effects. Where applicable law provides rights relating to automated decision-making, those rights remain available to you. The European Union's AI Act includes transparency obligations for certain interactive AI systems, including informing people when they directly interact with AI; these obligations began applying on 2 August 2026. (Digital Strategy)
13. Information We Do Not Intentionally Seek
Estivlo is a fashion and personal styling service and is not intended to collect sensitive information unless a specific feature expressly requires it and appropriate safeguards are in place. Please do not provide information that is unnecessary for your styling request, including:
-
Government identification numbers;
-
Passwords;
-
Payment-card numbers;
-
Bank account credentials;
-
Health or medical information;
-
Genetic information;
-
Biometric information;
-
Precise financial information;
-
Information concerning religious beliefs;
-
Information concerning sexual orientation;
-
Information concerning racial or ethnic origin;
-
Other sensitive personal information.
If you voluntarily provide sensitive information in a conversation, it may be processed as part of that conversation. You should therefore avoid including such information unless it is genuinely necessary.
14. How We Share Information
Estivlo does not sell personal information as a product. We may share or provide access to information where reasonably necessary to operate, secure and improve the Service. This may include the following categories of providers.
a. Website and infrastructure providers
Estivlo operates using Wix and related infrastructure. Wix may process information in connection with website hosting, databases, account functionality, security and other services necessary to operate the platform.
b. AI technology providers
We may use third-party AI providers to process information required to generate Estivlo's AI-powered responses.
c. Payment providers
Payments may be processed through providers such as:
-
PayPal;
-
Wise;
-
Other payment providers introduced in the future.
Payment providers may process your information according to their own privacy policies and terms.
d. Analytics and technology providers
Where used, analytics, security, performance and other technology providers may process technical or usage information necessary to provide their services.
e. Legal and professional providers
We may disclose information to professional advisers, service providers, authorities or other parties where reasonably necessary to:
-
Comply with law;
-
Respond to lawful requests;
-
Protect users;
-
Protect Estivlo;
-
Investigate fraud or security incidents;
-
Enforce our Terms & Conditions;
-
Resolve disputes.
15. Third-Party Services
Estivlo relies on third-party services to operate certain parts of the platform. These may include Wix, AI technology providers, payment providers, analytics providers, security services and other technology providers. Third-party providers may process information according to their own privacy policies and terms. We encourage you to review the privacy policies of relevant third-party services. The providers used by Estivlo may change as the platform develops.
16. International Data Transfers
Estivlo is designed for an international audience and may use service providers located in countries other than your country of residence. As a result, personal information may be transferred to, stored in or processed in countries that have different data protection laws. Where applicable law requires safeguards for international transfers, we will seek to use appropriate mechanisms and protections. For users in the European Economic Area and United Kingdom, this may include applicable adequacy decisions, contractual safeguards or other legally recognized transfer mechanisms.
17. Cookies and Similar Technologies
Estivlo and its service providers may use cookies, pixels, local storage and similar technologies. These technologies may be used for:
a. Essential functionality
To:
-
Maintain sessions;
-
Support login;
-
Provide security;
-
Remember necessary settings;
-
Operate core website functionality.
b. Analytics and performance
Where enabled, these technologies may help us understand:
-
Website traffic;
-
Page usage;
-
Performance;
-
General visitor behaviour.
c. Marketing and advertising
If marketing or advertising technologies are introduced, they may use cookies or similar technologies to support relevant advertising or measure marketing performance. Non-essential technologies will be used in accordance with applicable consent requirements. Where required, Estivlo will provide an appropriate cookie-consent mechanism. You may also manage cookies through your browser settings. Disabling certain cookies may affect some functionality. For users in jurisdictions with applicable cookie-consent requirements, we will seek to obtain consent before placing or using non-essential cookies.
18. California Privacy Rights
If you are a California resident, you may have additional rights under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA). Depending on the circumstances and applicable thresholds, these rights may include:
-
The right to know what personal information we collect and how it is used;
-
The right to request access to personal information;
-
The right to request deletion;
-
The right to request correction of inaccurate information;
-
The right to opt out of the sale or sharing of personal information where applicable;
-
The right to limit certain uses and disclosures of sensitive personal information;
-
The right to non-discrimination for exercising applicable privacy rights.
California's privacy framework also provides specific requirements regarding notices at collection and consumer requests. (California Attorney General)
Sale and sharing
Estivlo does not sell personal information for monetary consideration. If Estivlo introduces advertising, analytics or other technologies that constitute "sharing" or another regulated disclosure under applicable California law, we will provide the disclosures and opt-out mechanisms required by law.
Exercising California rights
You may submit a privacy request using the contact details provided in this Privacy Policy. We may take reasonable steps to verify your identity before completing certain requests. We will not discriminate against you for exercising privacy rights available to you under applicable law.
19. Other U.S. State Privacy Rights
Privacy laws in several U.S. states provide residents with additional rights regarding personal information. Depending on the state in which you reside and whether the applicable law applies to Estivlo, these rights may include:
-
Access;
-
Correction;
-
Deletion;
-
Data portability;
-
Opting out of certain targeted advertising;
-
Opting out of certain profiling;
-
Opting out of the sale of personal information;
-
Appealing certain privacy-request decisions.
We will honour applicable rights in accordance with the law that applies to you.
Global Privacy Control
Certain U.S. privacy laws recognize browser-based universal opt-out signals such as Global Privacy Control (GPC). Where required by applicable law, Estivlo will process recognized universal opt-out signals in accordance with the requirements applicable to the relevant user and processing activity. Colorado, for example, recognizes GPC as a valid universal opt-out mechanism for applicable sale and targeted-advertising opt-outs. (Colorado Attorney General)
20. European Economic Area Privacy Rights
If you are located in the European Economic Area, you may have rights under applicable data protection law, including the GDPR. Depending on the circumstances, these may include:
Right of access
You may request information about personal information we process about you and obtain a copy where applicable.
Right to rectification
You may request correction of inaccurate or incomplete personal information.
Right to erasure
You may request deletion of personal information where applicable.
Right to restriction
You may request restriction of certain processing in circumstances provided by law.
Right to data portability
You may have the right to receive certain information in a structured, commonly used and machine-readable format and transmit it to another organization where the legal requirements are met.
Right to object
You may have the right to object to certain processing, including processing based on legitimate interests.
Right to withdraw consent
Where processing is based on consent, you may withdraw your consent at any time.
Right to complain
You have the right to lodge a complaint with the data protection authority in your country of residence, place of work or place where you believe a violation occurred.
The exact availability of these rights depends on the circumstances and applicable law. (European Commission)
21. United Kingdom Privacy Rights
If you are located in the United Kingdom, you may have rights under the UK GDPR and other applicable UK data protection legislation. Depending on the circumstances, these may include rights to:
-
Access your personal information;
-
Correct inaccurate information;
-
Request deletion;
-
Restrict processing;
-
Object to certain processing;
-
Request data portability;
-
Withdraw consent where applicable;
-
Complain to the Information Commissioner's Office or another applicable supervisory authority.
UK privacy rules also require privacy information to be provided when personal information is collected and to be clear, accessible and understandable. (ICO)
22. India Privacy Rights
If you are located in India, your personal information may be subject to applicable Indian data protection and privacy laws, including the Digital Personal Data Protection Act, 2023, to the extent applicable. Depending on the applicable law and circumstances, you may have rights relating to access, correction, deletion, consent and grievance redressal. We will process personal information in accordance with applicable Indian legal requirements.
23. Other International Privacy Rights
Privacy laws in countries and regions outside India, Europe, the United Kingdom and the United States may provide additional rights. Where mandatory local privacy laws apply to our processing of your personal information, Estivlo will seek to comply with those requirements. Depending on your jurisdiction, these rights may include access, correction, deletion, objection, restriction, portability, withdrawal of consent and complaint rights. Nothing in this Privacy Policy is intended to remove or restrict a right that cannot lawfully be excluded under the law applicable to you.
24. Data Retention
We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including to:
-
Provide the Service;
-
Maintain your account;
-
Maintain your conversations and Fashion Plans;
-
Process purchases;
-
Maintain credit and transaction records;
-
Prevent fraud and abuse;
-
Resolve disputes;
-
Comply with legal obligations;
-
Enforce our agreements.
Different types of information may have different retention periods. For example, account and Style Profile information may be retained while your account remains active. Purchase and transaction records may be retained for longer where required for accounting, tax, legal or fraud-prevention purposes. When information is no longer reasonably required, we may delete, anonymize or otherwise dispose of it in accordance with applicable law.
25. Account Deletion and Data Requests
You may request deletion of your Estivlo account and associated personal information, subject to information that we are legally permitted or required to retain. You may also request access to or correction of personal information associated with your account. When necessary, we may verify your identity before completing a request. Some information may need to be retained after account deletion where required for:
-
Legal compliance;
-
Tax or accounting purposes;
-
Fraud prevention;
-
Security;
-
Dispute resolution;
-
Enforcement of legal rights.
Deleting your account may also result in loss of access to saved conversations, Fashion Plans and unused credits, subject to applicable law and our Terms & Conditions.
26. Data Security
We use reasonable technical and organizational measures designed to protect personal information against unauthorized access, misuse, loss, alteration or disclosure. These measures may include:
-
Access controls;
-
Authentication mechanisms;
-
Secure hosting infrastructure;
-
Restricted administrative access;
-
Security monitoring;
-
Appropriate third-party security measures.
However, no internet service can guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials. If you believe your account or personal information has been compromised, please contact Estivlo promptly.
27. Children's Privacy
Estivlo is intended for users aged 18 and over. We do not knowingly seek to collect personal information from children under 18. If you believe that a child has provided personal information to Estivlo, please contact us so that we can review the situation and take appropriate action.
28. Marketing Communications
We may send communications necessary to operate your account and provide the Service, including:
-
Account notifications;
-
Transaction information;
-
Security alerts;
-
Important service updates;
-
Policy updates;
-
Customer-support communications.
Where we send optional marketing communications, we will provide an appropriate way to opt out where required by applicable law. Unsubscribing from marketing communications will not necessarily stop essential service communications.
29. Third-Party Websites
Estivlo may contain links to third-party websites, products or services. Those third parties may have their own privacy policies and terms. Estivlo is not responsible for the privacy practices of websites or services that we do not operate. We recommend reviewing the relevant privacy policies before providing personal information to third parties.
30. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to:
-
Estivlo's features;
-
Technology;
-
Data-processing practices;
-
Third-party providers;
-
Legal or regulatory requirements.
When we make material changes, we may provide notice through the website, your account or another appropriate method. The date at the top of this Privacy Policy will indicate when it was most recently updated. We encourage you to review this Privacy Policy periodically.
31. Contact Us
If you have questions about this Privacy Policy, your personal information or your privacy rights, please contact the Estivlo team using the contact details provided on the website.
Estivlo — A Casmir Group Brand
Email: [Estivlo support email — to be added]
Address: [Business address — to be added]
Your Privacy Matters
Estivlo is built around personal style, and personalisation requires trust.
We aim to collect information responsibly, use it for clearly explained purposes and provide transparency about how your information is handled.
Your style is personal. Your data should be treated that way too.
Two important things before we call this finished
There are two parts outside the Privacy Policy itself that I would not skip.
1. We need a just-in-time privacy notice
A Privacy Policy sitting in the footer isn't necessarily enough. European and UK guidance expects privacy information to be made available when personal data is collected, not only somewhere users can find later. (European Commission)
So on your Estivlo signup/profile flow, I'd add a small line such as:
By creating an account, you agree to our Terms & Conditions and acknowledge our Privacy Policy.
And near the Style Profile/chat input:
Your information is used to personalise your Estivlo experience. See our Privacy Policy.
That is much cleaner than dumping a huge privacy notice on the user.
2. Don't enable every analytics/advertising tool blindly
This is particularly important for an international site.
If you later add Meta Pixel, Google Analytics, advertising cookies, retargeting or similar technologies, the Privacy Policy and cookie-consent configuration need to reflect them. For UK users, non-essential cookies generally require consent; California and Colorado also have specific opt-out considerations for certain advertising/sharing activities. (ICO)
And because Estivlo is an AI product, the AI disclosure should also be visible in the product itself, not buried exclusively in the Privacy Policy. The EU's current AI Act transparency guidance specifically addresses informing people when they are directly interacting with AI, with the relevant transparency obligations applying from 2 August 2026. (Digital Strategy)
This is the version I would use as the master Privacy Policy for Estivlo, with the support email and address added when you're ready. Before public launch/payment acceptance, I would still have the final policy and the actual data flows reviewed by a privacy/technology lawyer, because a worldwide privacy policy cannot by itself determine which jurisdictions' laws apply or guarantee compliance.