Legal
Politique de confidentialité
What is collected, why, for how long, and what you can require of us. Written under the GDPR and the loi Informatique et Libertés, and applied to everyone wherever they are.
Last updated 28 August 2026
Who is responsible
The controller is JANNA, 288 Cours Lafayette, 69003 Lyon, France. Full identification is published in the mentions légales. For anything in this policy, write to support@jannaclothing.com.
Your photographs are not used to train any model
Photographs of your garments are used to produce the result you asked for, and for nothing else. They are not used to train, fine-tune, evaluate or improve any model, ours or anyone else's. They are not sold, licensed, published, or shared for advertising or analysis.
They are transmitted to the model provider configured by the operator solely to generate your result, under a contract that forbids that provider from retaining them or using them for training. Nothing about your garment is used to build a dataset.
What is collected and why
- Account
- Email address and a hashed password. Basis: performance of the contract. Needed to give you an account at all.
- Photographs of garments and your description
- Basis: performance of the contract. Used to read the damage and generate previews and sequences. Not used for training.
- Generated results
- Basis: performance of the contract. Kept in your workspace so you can return to them.
- Subscription and billing records
- Basis: performance of the contract, and legal obligation for accounting records. Card details are never seen or stored by us; they are handled by the payment provider configured by the operator.
- Support correspondence
- Basis: performance of the contract and our legitimate interest in answering you.
- Measurement
- Aggregate page-view counts, only if you accepted optional cookies. Basis: consent, withdrawable at any time.
- Security and abuse logs
- Basis: legitimate interest in keeping the service working and preventing misuse.
We do not collect special-category data. Uploads containing an identifiable person are not permitted, and images of a garment being worn are not accepted.
How long it is kept
- Photographs and generated results
- Kept while your account is open. Deleting a garment removes it from active storage immediately and from backups within thirty days.
- Account
- Deleted within thirty days of you closing it, except records we must keep by law.
- Billing records
- Ten years, as required by French accounting and tax law.
- Support correspondence
- Three years from the last exchange.
- Measurement
- Thirteen months at most.
- Cookie choice
- Six months, then you are asked again.
Who else sees it
Only processors acting on our instructions: the hosting provider, the identity and storage provider, the model provider that generates your previews, and the payment provider that takes your payment. Each is bound by a contract under article 28 GDPR.
Where a processor is outside the European Economic Area, the transfer is covered by the European Commission's standard contractual clauses together with the technical measures needed to make them effective. We do not sell personal data and we do not share it for anyone else's marketing.
Your rights
Under the GDPR and the loi Informatique et Libertés you may ask us to:
- give you access to the personal data we hold about you;
- correct anything inaccurate;
- erase your data;
- restrict how we process it;
- hand it to you, or to someone else, in a portable form;
- stop processing carried out on the basis of a legitimate interest;
- withdraw a consent you have given, at any time, without affecting what came before;
- give directions about what happens to your data after your death (article 85 de la loi Informatique et Libertés).
Write to support@jannaclothing.com. We answer within one month. We may ask you to confirm who you are, but only as far as necessary.
Complaining to the CNIL
If you consider that your rights have not been respected, you have the right to lodge a complaint with the French supervisory authority:
- Commission Nationale de l'Informatique et des Libertés (CNIL)
- 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France
- Site internet
- www.cnil.fr
You may complain to the CNIL directly. You do not have to contact us first, though it is usually quicker if you do.
Security
Traffic is encrypted in transit. Photographs are stored in access-controlled object storage. Passwords are stored hashed and are never recoverable in plain text. Access by staff is limited to what is needed to answer a support request and is logged.
If a breach occurs that is likely to result in a high risk to your rights, we tell you and the CNIL within the periods the GDPR requires.
Children
The service is for people aged 16 and over. We do not knowingly collect data from anyone younger without the consent of a parent or legal guardian, and we delete it if we discover it.