Privacy Policy

1. Who we are

Saya Technologies Ltd (“Saya”, “we”, “us”, or “our”) operates the Saya AI bridal styling platform, including the website at saya.ai and any embedded widgets deployed by our boutique partners. This Privacy Policy explains how we collect, use, share, and protect personal information when you interact with our services.

For questions, contact us at privacy@saya.ai.

2. Information we collect

We may collect the following categories of personal data:

• Account & contact data — name, email address, and any information you voluntarily provide when signing up or contacting us.
• Usage data — pages visited, features used, session duration, device type, browser, IP address, and referral URL, collected automatically via cookies and similar technologies.
• Styling preferences — dress preferences, body measurements, budget range, and venue details you share with the Saya AI stylist during a session.
• Photos — images you voluntarily upload for the virtual try-on feature. These are processed solely to generate the try-on visualisation and are not stored longer than necessary for that purpose.
• Boutique partner data — if you represent a boutique, we collect business name, contact details, and integration configuration.

We do not collect payment card details directly. Any transactions are handled by third-party payment processors subject to their own privacy policies.

3. How we use your information

We use your personal data to:

• Deliver, operate, and improve the Saya platform and AI styling experience.
• Generate virtual try-on images and personalised dress recommendations.
• Send transactional communications (appointment confirmations, password resets).
• Send marketing communications where you have opted in — you may opt out at any time.
• Comply with legal obligations and enforce our Terms of Service.
• Detect and prevent fraud, abuse, or security incidents.

4. Legal bases for processing (GDPR)

Where the General Data Protection Regulation (EU/UK GDPR) applies, we process your data under one or more of the following legal bases:

• Contract — processing necessary to provide the services you have requested.
• Legitimate interests — improving our platform, preventing fraud, and direct marketing to existing customers (subject to your right to object).
• Consent — where you have given explicit consent, such as for optional marketing emails or cookie analytics. You may withdraw consent at any time.
• Legal obligation — where we are required to process data by applicable law.

5. Cookies and tracking technologies

We use essential cookies to operate our service, and optional analytics and preference cookies. You can manage cookie preferences through our cookie banner or your browser settings. Disabling non-essential cookies will not prevent you from using core features.

6. How we share your information

We do not sell your personal data. We may share data with:

• Service providers — cloud hosting, AI model providers (e.g. Google Gemini API), analytics, and email delivery services, each bound by data processing agreements.
• Boutique partners — if you book an appointment through Saya, relevant styling preferences may be shared with the boutique you have chosen.
• Legal authorities — where required by law, court order, or to protect the rights and safety of Saya or others.
• Business transfers — in the event of a merger, acquisition, or sale of assets, your data may be transferred subject to equivalent protections.

7. Data retention

We retain personal data only as long as necessary for the purposes described in this policy, or as required by law. Uploaded photos for virtual try-on are deleted within 30 days. You may request deletion of your account and associated data at any time.

8. Your rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Request erasure of your personal data (“right to be forgotten”).
• Restrict or object to certain processing.
• Receive your data in a portable format.
• Withdraw consent at any time where processing is consent-based.
• Lodge a complaint with your local data protection authority.

To exercise any of these rights, contact us at privacy@saya.ai.

9. International data transfers

Your data may be transferred to and processed in countries outside your own, including countries that may not provide the same level of data protection. Where we transfer data internationally, we put in place appropriate safeguards (such as Standard Contractual Clauses) to ensure your data remains protected.

10. Security

We implement industry-standard technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. However, no transmission over the internet is completely secure, and we cannot guarantee absolute security.

11. Children

Our services are not directed to individuals under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

12. Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of material changes by updating the effective date and, where appropriate, by email or in-app notification. Continued use of the service after any update constitutes acceptance of the revised policy.

13. Contact us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact:

Saya Technologies Ltd
Email: privacy@saya.ai