Privacy Policy

Account information — When you create an account we collect your email address and a hashed password. We do not store your password in readable form.

Business information — Your business name and related profile details.

Uploaded photos and documents — We store the vendor product photos, model reference photos, and business documents you upload (purchase orders, invoices, line sheets) for processing.

Generated content — AI-generated images and AI-written product listing content are stored in your account so you can review, edit, and publish them.

Vendor credentials — If you save sign-in credentials for your wholesale vendors’ websites, or complete a vendor sign-in through our secure connection flow, we store those credentials and session data encrypted, and use them only to retrieve product photos and product information on your behalf.

Platform connection data — If you connect your e-commerce store (such as Shopify or CommentSold), we store the access tokens needed to read and write product data on your behalf.

Email data — If you connect an email account, we access authorized messages solely to identify order-related information such as purchase orders and shipment tracking numbers.

Shipment data — Tracking numbers and delivery status for orders you manage in the platform.

Payment information — Billing is handled by our third-party payment processor in compliance with PCI-DSS standards. Your card details are transmitted directly to the processor and are never stored on our servers.

Usage, device, and browser data — We automatically collect standard technical information such as your IP address, browser type, operating system, pages visited, and features used. This is used for analytics and platform security.

To provide the service — Processing your photos and documents, generating product listings and images, retrieving product photos from your vendors’ websites on your behalf, publishing to your connected store when you choose to, managing your subscription, and tracking your shipments.

To communicate with you — Account notifications, billing receipts, subscription updates, and service announcements.

To improve the platform — We analyze usage patterns in aggregate to understand how features are used and where we can improve.

To prevent fraud and abuse — We monitor usage to detect and prevent unauthorized access, fraud, and violations of our Terms of Service.

Parts of fAIshion are powered by third-party artificial-intelligence providers. An AI language model helps read the business documents you upload and write product listing content. An AI image service generates product photography.

Your content is transmitted to these providers solely to provide the service to you. We do not use your content to train AI models, and our AI providers are contractually prohibited from using your content to train theirs.

AI-generated content is always presented to you for review; nothing is published anywhere without your action.

You retain full ownership of all photos, documents, and content you upload to fAIshion. We do not claim any ownership over your content and do not use it to train AI models.

Generated images are automatically deleted after a limited retention window: currently 30 days for Studio images and 45 days for AI-styled images in InventoryIQ. Download anything you want to keep before its window closes.

Product photos retrieved from your vendors and photos you upload for your listings are retained so your listings keep working, until you delete them or close your account.

We use a small number of trusted service providers to operate fAIshion:

Cloud infrastructure providers located in the United States host our application, database, and file storage.

A PCI-DSS-compliant payment processor handles all billing; your payment details never pass through our servers.

AI providers process your content to generate listings and images, as described in "How we use AI."

An email integration provider powers optional email-account connections; a transactional email service delivers our notifications; a carrier-tracking service looks up shipment status by tracking number; and a secure remote-browser service powers the one-time vendor sign-in flow.

Platforms you choose to connect (such as Shopify or CommentSold) receive product data at your direction and handle it under their own privacy policies.

A current list of our service providers is available on request at help@faishion.io.

We use cookies and similar technologies to keep you logged in, remember your preferences, and collect analytics data.

Essential cookies are required for the platform to function. These cannot be disabled.

We use Google Analytics to understand how visitors use our website and the Meta Pixel to measure the effectiveness of our advertising. Both collect anonymized data through cookies. You can opt out through your browser settings, the Google Analytics Opt-out Browser Add-on, or facebook.com/ads/preferences.

Most browsers allow you to block or delete cookies through their settings. Blocking essential cookies may prevent you from logging in or using the platform.

Account data is retained for as long as your account is active.

Generated images are deleted automatically after their retention window (currently 30 days for Studio images and 45 days for AI-styled images in InventoryIQ).

If you close your account, your personal data, uploaded photos and documents, and generated content will be deleted within 30 days.

Billing records may be retained longer as required by law.

Access — You can view and update your account information at any time through your account settings.

Deletion — You can delete individual items through the dashboard. To delete your entire account and all associated data, contact us at help@faishion.io.

Data portability — You can download your generated images at any time from the dashboard before their retention window closes. We will also provide a copy of your account data in a structured, machine-readable format on request.

California residents — If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, the right to request deletion, and the right to opt out of the sale of personal information. We do not sell your personal information. To exercise your CCPA rights, contact us at help@faishion.io.

EU and UK residents (GDPR / UK GDPR) — If you are located in the European Economic Area, the United Kingdom, or Switzerland, you have additional rights under the General Data Protection Regulation and equivalent UK law. We respond to verified requests within 30 days, unless legally required to retain the data.

• Right of access — Request a copy of the personal data we hold about you.

• Right to rectification — Correct inaccurate or incomplete personal data.

• Right to erasure (right to be forgotten) — Request deletion of your personal data.

• Right to restriction of processing — Limit how we use your personal data while a request is being resolved.

• Right to data portability — Receive your personal data in a structured, commonly used, machine-readable format and transmit it to another controller.

• Right to object — Object to processing of your personal data, including for direct marketing.

• Right not to be subject to solely automated decision-making — None of our processing produces legal or similarly significant effects on you based solely on automated decision-making.

• Right to withdraw consent — Where processing is based on consent, withdraw it at any time without affecting the lawfulness of prior processing.

• Right to lodge a complaint — File a complaint with your local supervisory authority. For UK residents, this is the Information Commissioner's Office (ico.org.uk). For EU residents, contact your national Data Protection Authority.

To exercise any of these rights, contact help@faishion.io. We may need to verify your identity before responding.

For users in the EU, EEA, UK, or Switzerland, we process your personal data on the following lawful bases:

• Performance of a contract — We process your account information, uploaded photos and documents, saved vendor credentials, platform connection tokens, and content transmitted to our AI providers to provide the service you signed up for.

• Legitimate interests — We process usage data and device/browser data for platform security, fraud prevention, and aggregate analytics. We have evaluated these interests against your privacy and conclude they are not overridden by your rights.

• Consent — We use analytics cookies (Google Analytics, Meta Pixel) only after you provide consent through our cookie banner. You may withdraw consent at any time through the same banner or your browser settings.

• Compliance with legal obligations — We retain billing records as required by tax, accounting, and other applicable law.

fAIshion is operated from the United States. If you access the service from outside the United States, your personal data is transferred to and processed in the United States, which may not provide the same level of data protection as your country of residence.

For transfers of personal data from the EEA, UK, or Switzerland to the United States, we rely on the European Commission's Standard Contractual Clauses (SCCs) and the UK International Data Transfer Addendum where applicable, in addition to supplementary technical and organizational measures (encryption in transit and at rest, access controls, etc.).

A copy of the SCCs we use can be obtained by contacting help@faishion.io.

For business customers, we are happy to enter into a Data Processing Agreement (DPA) that incorporates the Standard Contractual Clauses where required by GDPR or UK GDPR. Our DPA covers our role as a processor of personal data on your behalf.

Request a DPA at help@faishion.io.

We protect your data with infrastructure-level encryption at rest, secure HTTPS connections, hashed account passwords, application-layer encryption on saved vendor credentials, token-based store integrations, and per-customer access controls enforced at the database layer. However, no system is completely secure and we cannot guarantee absolute security.

If we become aware of a security breach affecting your personal data, we will notify you and any required supervisory authority within 72 hours of becoming aware of the breach where required by GDPR Article 33 or equivalent law, and as soon as reasonably practicable in all other cases. We will provide the information required by applicable law, including the nature of the breach, the categories and approximate number of affected individuals, the likely consequences, and the measures we are taking in response.

You can reach us about any security concern at help@faishion.io.