Privacy Policy

Effective Date: 05/08/2026
Last Updated: 05/08/2026

1. Introduction

SpreeAI Corporation (“SpreeAI,” “we,” “us,” or “our”) is a fashion-technology company that provides AI-powered virtual try-on, sizing intelligence, and personalized shopping tools for retailers and consumers. We are committed to protecting your privacy and handling your personal information — including biometric and image data — with transparency and care.

This Privacy Policy explains what information we collect, how we use it, how we share it, your rights, and how to contact us with questions or requests.

This Policy applies to:

Our website at spreeai.com and any subdomains
Our virtual try-on platform and APIs
Our mobile applications
Our integrations with third-party retail and e-commerce partners

2. Information We Collect

2.1 Information You Provide Directly

Account information: Name, email address, password, and other registration details.
Profile and preferences: Body measurements, clothing size, style preferences, and shopping history that you voluntarily provide.
Communications: Messages, feedback, or support inquiries you send to us.
Payment information: Billing address and payment method details (processed by our third-party payment processors; SpreeAI does not store full payment card numbers).

2.2 Biometric and Image Data

SpreeAI’s core service involves the processing of user photographs and related biometric identifiers to enable virtual try-on functionality. Specifically, we may collect and process:

Photographs or selfies you upload or capture to generate your virtual avatar.
Body measurements and geometric data derived from your images (e.g., height, body proportions, face geometry).
Biometric identifiers or biometric information, as those terms are defined under applicable state laws such as the Illinois Biometric Information Privacy Act (BIPA) and similar statutes.

We collect biometric data only with your explicit consent. Please see Section 5 (Biometric Data — Special Notice) for important information about how we handle this category of data.

2.3 Information Collected Automatically

When you use our services, we automatically collect:

Usage data: Pages visited, features used, session duration, click paths, and interactions with our platform.
Device and technical data: IP address, browser type and version, operating system, device identifiers, and referring URLs.
Location data: General geographic location derived from your IP address. We do not collect precise GPS locations unless you expressly grant permission.
Cookies and tracking technologies: See Section 8 (Cookies and Tracking Technologies) for details.

2.4 Information from Third Parties

Retail and e-commerce partners: If you access SpreeAI through a partner retailer’s platform, we may receive information about your account or session from that retailer consistent with their privacy practices.
Social login providers: If you sign in using a social account (e.g., Google, Apple), we receive basic profile information as authorized by you on that platform.
Analytics providers: Aggregated and anonymized insights about platform performance and user behavior.

3. How We Use Your Information

We use the information we collect to:

Provide and operate our services, including generating photorealistic virtual try-on experiences, avatar creation, and fit recommendations.
Personalize your shopping experience, including recommending styles, sizes, and garments based on your preferences and virtual profile.
Improve our AI models and platform, by using anonymized and aggregated data to train, refine, and test our machine learning systems.
Communicate with you, including account notifications, customer support, service updates, and marketing communications (where you have consented or where permitted by law).
Process transactions and facilitate purchases made through partner retailers.
Ensure security and prevent fraud, including detecting and investigating unauthorized access or misuse of our platform.
Comply with legal obligations and enforce our Terms of Service.
Conduct research and analytics to understand how users engage with our platform and to develop new features.

We do not use your biometric data to identify you for purposes unrelated to the virtual try-on service, and we do not sell your biometric data.

4. Legal Basis for Processing (EEA, UK, and Similar Jurisdictions)

If you are located in the European Economic Area, the United Kingdom, or another jurisdiction with similar legal requirements, we process your personal data on the following legal bases:

Contractual necessity: To perform the services you request.
Legitimate interests: To improve our services, detect fraud, and ensure platform security, where not overridden by your privacy rights.
Consent: For biometric data processing, marketing communications, and any other processing where consent is required.
Legal obligation: Where we are required to process data to comply with applicable law.

5. Biometric Data — Special Notice

SpreeAI collects and processes biometric data as part of its virtual try-on technology. We take the following specific commitments with respect to biometric information:

Consent: We will obtain your express written consent before collecting or using your biometric data, describing the purpose and duration of collection.
Limited use: Biometric data is used solely to provide the virtual try-on and sizing features you request. It is not used for advertising targeting, sold to data brokers, or shared with third parties except as described in this Policy.
Retention and deletion: We retain biometric data only as long as necessary to provide the service, or as required by law, whichever is sooner. You may request deletion of your biometric data at any time (see Section 9).
Security: Biometric data is stored using industry-standard encryption and access controls.
No sale of biometric data: SpreeAI does not sell, lease, or trade biometric identifiers or biometric information.

Residents of Illinois, Texas, Washington, and other states with specific biometric privacy laws may have additional rights. Please refer to Section 11 (State-Specific Privacy Rights) for more information.

6. How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

Retail and commerce partners: If you use SpreeAI through a partner retailer’s platform, we may share your virtual try-on results or fit data with that retailer to complete your transaction or provide the service.
Service providers: We engage trusted third-party vendors (e.g., cloud hosting, analytics, payment processing, customer support) who process data on our behalf under contractual obligations to protect your information.
AI research collaborators: We may share anonymized, aggregated, or de-identified data with research partners (including academic institutions) for the purpose of improving AI and computer vision technology.
Business transfers: In connection with a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity, subject to the same privacy protections described in this Policy.
Legal requirements: We may disclose information when required by law, subpoena, court order, or to protect the rights, property, or safety of SpreeAI, our users, or the public.
With your consent: We may share your information in other ways when you have given us explicit permission to do so.

7. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you services. We also retain data as necessary to:

Comply with legal obligations
Resolve disputes
Enforce our agreements

When we no longer need your data, we securely delete or de-identify it. Biometric data is subject to shorter retention limits described in Section 5.

8. Cookies and Tracking Technologies

We use cookies, web beacons, and similar technologies to:

Maintain your session and authentication state
Remember your preferences
Analyze platform usage and performance
Support marketing and advertising (where applicable)

You can manage cookie preferences through your browser settings or our cookie preference tool on the website. Note that disabling certain cookies may affect platform functionality.

9. Your Rights and Choices

Depending on your location, you may have the right to:

Access the personal information we hold about you.
Correct inaccurate or incomplete information.
Delete your personal information, including your biometric data.
Restrict or object to certain processing activities.
Data portability: Receive a copy of your data in a structured, machine-readable format.
Withdraw consent at any time where processing is based on your consent, without affecting the lawfulness of prior processing.
Opt out of marketing communications at any time by clicking “unsubscribe” in any email or contacting us directly.

To exercise any of these rights, please contact us at: privacy@spreeai.com

We will respond to verified requests within the timeframes required by applicable law (typically 30–45 days). We may need to verify your identity before processing your request.

10. Data Security

We implement technical, organizational, and physical safeguards to protect your personal information, including:

Encryption of data in transit (TLS) and at rest (AES-256 or equivalent)
Role-based access controls
Regular security assessments and penetration testing
Incident response procedures

No method of transmission or storage is 100% secure. If we become aware of a security breach affecting your personal information, we will notify you as required by applicable law.

11. State-Specific Privacy Rights

California (CCPA / CPRA)

California residents have the right to know, access, correct, delete, and opt out of the sale or sharing of their personal information. SpreeAI does not sell personal information. To submit a privacy request, contact us at privacy@spreeai.com or call [TOLL-FREE NUMBER].

Illinois (BIPA)

Illinois residents have specific rights under the Biometric Information Privacy Act. We comply with BIPA requirements including obtaining written consent, publishing a retention schedule, and prohibiting the sale of biometric data. Contact us at privacy@spreeai.com to exercise your BIPA rights.

Virginia, Colorado, Connecticut, Texas, and Other States

Residents of states with comprehensive privacy laws may have rights to access, correct, delete, and opt out of certain processing of personal data. Contact us to exercise these rights.

12. International Data Transfers

SpreeAI is headquartered in the United States. If you are accessing our services from outside the United States, your information may be transferred to, stored, and processed in the United States or other countries. We take appropriate safeguards — such as Standard Contractual Clauses or other approved transfer mechanisms — to protect your information when it is transferred internationally.

13. Children’s Privacy

Our services are not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected information from a child under 13, please contact us at privacy@spreeai.com and we will promptly delete it.

14. Third-Party Links and Services

Our platform may contain links to third-party websites or integrate with third-party retail platforms. This Privacy Policy does not apply to those third parties. We encourage you to review the privacy policies of any third-party services you interact with.

15. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email (if you have an account) or by posting a prominent notice on our website, and we will update the “Last Updated” date at the top of this Policy. Your continued use of our services after the effective date of any update constitutes your acceptance of the revised Policy.

16. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Email: privacy@spreeai.com
Website: https://www.spreeai.com

This Privacy Policy is provided for informational purposes. SpreeAI recommends consulting qualified legal counsel to ensure compliance with all applicable privacy laws before publishing a final versi