Privacy Policy
Last updated: 8 September 2026.
1. Controller and contact
The controller for this website, enquiries and business relationships is Ailo sp. z o.o. (Wearlo), Parkowe Wzgórze 100, 32-031 Mogilany, Poland, Tax ID (NIP) 6762430848. Contact: [email protected].
2. Website and correspondence data
The form sends your email address, selected language and submission time to our contact inbox. Additional company or store information you provide in correspondence is processed in connection with your enquiry. Providing an address is voluntary but necessary for a reply.
Hosting and email providers may process technical request and delivery data, including IP addresses, timestamps, browser details and errors. The form also uses short-lived pseudonymous identifiers to limit abuse.
The website photo comparison is a prepared illustration. Moving its slider does not upload your photo or start image generation.
3. Purposes and legal bases
- Enquiries and business contact: our legitimate interest in responding to interested people (Article 6(1)(f) GDPR).
- Steps before a contract or its performance, where you are a party: Article 6(1)(b) GDPR.
- Website security and troubleshooting: our legitimate interest in operating and protecting the service (Article 6(1)(f) GDPR).
- Billing records and other legal obligations arising from a business relationship: Article 6(1)(c) GDPR.
The form is for contact about Wearlo. It does not sign you up for a newsletter or subscription. We do not use your enquiry to make solely automated decisions with legal or similarly significant effects on you.
4. Recipients and transfers
Enquiries are handled by authorised Wearlo staff and providers needed for the website and correspondence: Railway (hosting), Resend (email delivery of the enquiry), and our mailbox provider.
Resend and Railway services may involve processing outside the EEA, including the United States. Their processing terms describe transfer mechanisms, including Standard Contractual Clauses: Resend DPA and Railway DPA. Contact us for information about safeguards applicable to your data.
5. Retention
We retain correspondence for the time needed to handle the enquiry and related discussions. If a business relationship or dispute arises, relevant records are kept as required by law or as needed to establish, pursue or defend claims.
The scope and retention of technical logs depend on their purpose and the infrastructure providers' settings. Contact us for information about a particular enquiry, its retention or deletion.
6. Shopper data in stores
In a pilot, try-on uses a shopper photo, product images, AI output and technical session data. The store determines the purpose and informs shoppers about the legal basis, recipients and retention. Wearlo processes data entrusted by the store under the agreed processing contract.
Photo processing may involve sending images to generation provider Kie.ai and storing files in AWS S3; product hosting uses Railway. Active providers, locations, transfer safeguards and deletion arrangements are defined for each pilot. See data processing for pilots.
7. Your rights
Subject to GDPR conditions, you may request access, rectification, erasure, restriction or portability, and object to processing based on legitimate interests. Where processing relies on consent, you can withdraw it without affecting the lawfulness of earlier processing.
Email [email protected]. The usual response period is one month, with extensions in the cases allowed by GDPR. The EDPB explains these rights. You may also complain to the Polish supervisory authority (UODO).
8. Cookies and updates
The website can remember your language choice. It does not contain advertising or retargeting pixels. You can manage cookies in your browser. The date above identifies this policy's latest update.