This Privacy Notice for Beautiqx Limited, doing business as Alessio, explains how and why the company may access, collect, store, use, and/or share personal information when users use the Services.
The Services include when users:
Questions or concerns can be sent to hello@tryalessio.com. Users who do not agree with the policy should not use the Services.
This summary provides key points from the Privacy Notice, with more details available through the linked sections or table of contents.
What personal information do we process? When users visit, use, or navigate the Services, Alessio may process personal information depending on how users interact with Alessio and the Services, the choices they make, and the products and features they use.
Do we process any sensitive personal information? Some information may be considered “special” or “sensitive” in certain jurisdictions. Alessio asks for biological sex during onboarding and processes photos and live camera video of users. Alessio may process this information when necessary with consent or as otherwise permitted by applicable law.
Do we collect any information from third parties? Alessio does not collect information from third parties.
How do we process your information? Alessio processes information to provide, improve, and administer the Services, communicate with users, for security and fraud prevention, and to comply with law. Alessio only processes information when it has a valid legal reason.
In what situations and with which types of parties do we share personal information? Alessio may share information in specific situations and with specific categories of third parties.
How do we keep your information safe? Alessio has organizational and technical processes and procedures to protect personal information, but no electronic transmission or storage technology can be guaranteed to be 100% secure.
What are your rights? Depending on geographic location and applicable privacy law, users may have certain rights regarding personal information.
How do you exercise your rights? Users can exercise rights by emailing hello@tryalessio.com.
In short: Alessio collects personal information that users provide to Alessio.
Alessio collects personal information voluntarily provided when users use the fit check, text Alessio, complete the onboarding, participate in activities on the Services, or otherwise contact Alessio.
Personal information may include:
Alessio has no user accounts: there are no usernames or passwords, and no social media logins.
When necessary, with consent or as otherwise permitted by applicable law, Alessio processes the following categories of sensitive information:
Paid features are purchased through Apple Pay via Alessio's payment partners (Linq and Stripe). Alessio receives and stores the payment status, amount, and the phone number the purchase belongs to. Alessio never sees or stores full card numbers; those are handled by the payment partners.
The fit check and the try-on mirror use the device camera through the browser. The browser asks for camera permission before any feature uses it. Users can decline; features requiring the camera will not run.
Users must provide true, complete, and accurate personal information and notify Alessio of any changes.
In short: Some information, such as IP address and/or browser and device characteristics, is collected automatically when users visit the Services.
Alessio automatically collects certain information when users visit, use, or navigate the Services. This information does not reveal specific identity, such as name or contact information, but may include device and usage information such as:
This information is primarily needed to maintain security and operation of the Services, and for internal analytics and reporting. Alessio's analytics are first-party: usage events go to Alessio's own database and to no advertising or analytics companies.
Alessio also collects information through cookies and similar technologies, only after users accept the consent banner. More information is available in the Cookie Notice.
The information collected includes:
In short: Alessio processes information to provide, improve, and administer the Services, communicate with users, for security and fraud prevention, and to comply with law. Alessio may also process information for other purposes only with prior explicit consent.
Alessio processes personal information for a variety of reasons, depending on how users interact with the Services, including:
In short: Alessio only processes personal information when it believes it is necessary and has a valid legal reason, such as consent, compliance with law, providing Services to fulfill contractual obligations, protecting rights, or fulfilling legitimate business interests.
The GDPR and UK GDPR require Alessio to explain the valid legal bases it relies on to process personal information. Alessio may rely on the following legal bases:
Alessio may process information if users have given specific permission, such as express consent, or in situations where permission can be inferred, such as implied consent. Users can withdraw consent at any time.
In some exceptional cases, Alessio may be legally permitted to process information without consent, including:
In short: Alessio may share information in specific situations and/or with certain categories of third parties.
Alessio may share data with third-party vendors, service providers, contractors, or agents who perform services for Alessio or on Alessio's behalf and require access to that information to do their work.
Alessio has agreements in place with third parties designed to safeguard personal information. These third parties cannot do anything with personal information unless instructed by Alessio, cannot share personal information with any organization apart from Alessio, and commit to protecting the data held on Alessio's behalf and retaining it only for the period Alessio instructs.
Categories of third parties include:
Alessio may also need to share personal information in the following situations:
In short: Alessio may use first-party cookies to collect and store information, only after users accept the consent banner.
Alessio uses a small number of first-party cookies and similar technologies to remember visitors and understand how the Services are used. These are set only after users accept the consent banner on Alessio's pages. Declining the banner means no cookies are set: the visit is counted anonymously and nothing else is tracked or saved.
Alessio does not use third-party advertising cookies, does not run third-party trackers, and does not use tracking for targeted advertising. Alessio honors the Global Privacy Control (GPC) signal: with GPC enabled, users are treated as having declined.
Specific information about cookies is in the Cookie Notice.
In short: Alessio offers products, features, or tools powered by artificial intelligence, machine learning, or similar technologies.
Alessio is an AI product. The Privacy Notice governs use of AI features within the Services.
Alessio provides AI features through third-party service providers, including OpenAI (outfit scoring and conversation replies), Decart (real-time virtual try-on video), and Evermind (conversation memory). User input, output, and personal information may be shared with and processed by these AI service providers to enable Alessio's AI features for the purposes described in the legal bases section. Users must not use AI features in any way that violates the terms or policies of any AI service provider.
Alessio's AI features are designed for:
All personal information processed using AI features is handled in line with the Privacy Notice and Alessio's agreements with third parties. This ensures security and safeguards for personal information throughout the process.
Users can opt out by:
In short: Alessio may transfer, store, and process information in countries other than the user's own.
Alessio's servers are located in the United States. Regardless of user location, information may be transferred to, stored by, and processed by Alessio in its facilities and in facilities of third parties with whom Alessio may share personal information, including in the United States and other countries.
If users are residents of the EEA, UK, or Switzerland, those other countries may not have data protection laws as comprehensive as the laws in the user's country. Alessio will take all necessary measures to protect personal information according to this Privacy Notice and applicable law.
In short: Alessio keeps information for as long as necessary to fulfill the purposes outlined in the Privacy Notice unless otherwise required by law.
Alessio keeps personal information only for as long as necessary for the purposes set out in this Privacy Notice, unless a longer retention period is required or permitted by law, such as tax, accounting, or other legal requirements. In particular:
When Alessio has no ongoing legitimate business need to process personal information, it will delete or anonymize the information. If deletion or anonymization is not possible, such as because personal information is stored in backup archives, Alessio will securely store the information and isolate it from further processing until deletion is possible.
In short: Alessio aims to protect personal information through organizational and technical security measures.
Alessio has implemented appropriate and reasonable technical and organizational security measures designed to protect personal information. However, despite safeguards, no electronic transmission over the internet or information storage technology can be guaranteed to be 100% secure. Alessio cannot promise or guarantee that hackers, cybercriminals, or other unauthorized third parties will not defeat security and improperly collect, access, steal, or modify personal information.
Transmission of personal information to and from the Services is at the user's own risk. Users should access the Services only within a secure environment.
In short: Depending on US state of residence or region, such as the EEA, UK, Switzerland, and Canada, users may have rights that allow greater access to and control over personal information.
In some regions, users may have rights under applicable data protection laws. These may include:
If a decision that produces legal or similarly significant effects is made solely by automated means, Alessio will inform the user, explain the main factors, and offer a simple way to request human review.
In certain circumstances, users may also have the right to object to processing of personal information. Alessio will consider and act upon requests in accordance with applicable data protection laws.
If users are located in the EEA or UK and believe Alessio is unlawfully processing personal information, they may complain to a Member State data protection authority or UK data protection authority. If users are located in Switzerland, they may contact the Federal Data Protection and Information Commissioner.
If Alessio relies on consent to process personal information, users have the right to withdraw consent at any time by contacting Alessio at hello@tryalessio.com or declining the consent banner.
Withdrawal does not affect the lawfulness of processing before withdrawal, and where applicable law allows, does not affect processing based on lawful grounds other than consent.
Users can stop Alessio from texting them at any time by:
No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Information sharing to subcontractors in support services, such as message delivery, is permitted. Text messaging originator opt-in data and consent will not be shared with third parties.
Alessio has no user accounts. Users who want to review, update, or delete the data Alessio holds about them (photos, recordings, profile, conversation memory, reports) can contact hello@tryalessio.com from or about the phone number they text from. Alessio may retain some information to prevent fraud, troubleshoot problems, assist investigations, enforce legal terms, and/or comply with applicable legal requirements.
Alessio only sets cookies after the consent banner is accepted. Users can decline the banner, enable Global Privacy Control, or clear cookies in their browser at any time. More information is available in the Cookie Notice.
Questions or comments about privacy rights can be emailed to hello@tryalessio.com.
Most web browsers and some mobile operating systems include a Do-Not-Track (“DNT”) feature or setting. No uniform technology standard for recognizing and implementing DNT signals has been finalized, and Alessio does not respond to legacy DNT browser signals.
Alessio does honor the Global Privacy Control (GPC): when a browser sends the GPC signal, Alessio treats the visit as having declined the consent banner, sets no cookies, and saves no media.
California law requires Alessio to disclose how it responds to DNT signals. Because there is currently no industry or legal standard for recognizing or honoring DNT signals beyond GPC, Alessio does not respond to them at this time.
In short: If users are residents of California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, or Virginia, they may have the right to request access to and receive details about personal information Alessio maintains about them and how Alessio has processed it, correct inaccuracies, get a copy of it, or delete it. Users may also have the right to withdraw consent to processing. These rights may be limited in some circumstances.
The table shows categories of personal information collected in the past twelve months. The examples are illustrative and do not reflect the personal information collected from every user.
| Category | Examples | Collected |
|---|---|---|
| A. Identifiers | Phone number, nickname, online identifier, IP address | YES |
| B. Personal information as defined in the California Customer Records statute | Name and contact information | YES |
| C. Protected classification characteristics under state or federal law | Biological sex collected during onboarding | YES |
| D. Commercial information | Purchase status and amounts for paid features (never full card numbers) | YES |
| E. Biometric information | Fingerprints, faceprints, and voiceprints | NO |
| F. Internet or other similar network activity | Interactions with the Services (first-party analytics only) | YES |
| G. Geolocation data | Precise device location | NO |
| H. Audio, electronic, sensory, or similar information | Outfit photos and, with consent, mirror session recordings | YES |
| I. Professional or employment-related information | Job title, work history | NO |
| J. Education Information | Student records and directory information | NO |
| K. Inferences drawn from collected personal information | Fit scores and style preferences used to personalize recommendations | YES |
| L. Sensitive personal information | Account credentials, biometric identifiers | NO |
Alessio does not extract biometric identifiers such as faceprints or voiceprints; see Biometric Information for how camera data is handled. Alessio does not collect or process sensitive personal information for the purpose of inferring characteristics about users beyond the styling preferences users explicitly provide.
Alessio may also collect other personal information outside these categories through interactions in person, online, or by email in the context of:
Alessio will use and retain collected personal information as needed to provide the Services or for:
See What Information Do We Collect?
See How Do We Process Your Information?
Alessio may disclose personal information with service providers pursuant to written contracts between Alessio and each service provider.
Alessio may use personal information for business purposes, such as internal research for technological development and demonstration. This is not considered “selling” personal information.
Alessio has not sold or shared any personal information to third parties for a business or commercial purpose in the preceding twelve months.
Alessio has disclosed the following categories of personal information to third parties (its service providers) for a business purpose in the preceding twelve months:
Users have rights under certain US state data protection laws. These rights are not absolute, and Alessio may decline requests as permitted by law. Rights include:
Depending on state of residence, users may also have additional rights, including the right to access the categories of personal data being processed, obtain lists of the categories or specific third parties to which Alessio has disclosed personal data, review and question how personal data has been profiled, limit use and disclosure of sensitive personal data, and opt out of collection of data through voice or facial recognition features, in each case as permitted by the applicable state's law.
Users can exercise rights by:
Under certain US state data protection laws, users can designate an authorized agent to make a request on their behalf. Alessio may deny a request from an authorized agent if the agent does not submit proof that they have been validly authorized to act on the user's behalf in accordance with applicable laws.
Upon receiving a request, Alessio will verify the user's identity to determine that the user is the same person about whom Alessio has information in its system, for example by confirming control of the phone number the request concerns. Alessio will only use personal information provided in the request to verify identity or authority to make the request. If Alessio cannot verify identity from information already maintained, it may request additional information for identity verification and security or fraud-prevention purposes.
If the request is submitted through an authorized agent, the agent must provide written and signed permission from the user to submit the request on the user's behalf.
Under certain US state data protection laws, if Alessio declines to take action regarding a request, the user may appeal by emailing hello@tryalessio.com. Alessio will inform the user in writing of any action taken or not taken in response to the appeal, including a written explanation of reasons for the decision. If the appeal is denied, the user may submit a complaint to their state attorney general.
California Civil Code Section 1798.83, also known as the “Shine The Light” law, permits California residents to request and obtain from Alessio, once a year and free of charge, information about categories of personal information, if any, that Alessio disclosed to third parties for direct marketing purposes and the names and addresses of all third parties with which Alessio shared personal information in the immediately preceding calendar year. California residents who want to make such a request should submit it in writing to hello@tryalessio.com.
The fit check and the try-on mirror use the camera. Alessio analyzes outfit photos to score them, and the mirror processes the live camera feed to render recommended garments on the user in real time.
Depending on the feature, a saved item may include:
Depending on where the user lives, camera data may be regulated under laws such as the Illinois Biometric Information Privacy Act (BIPA), Texas CUBI, and Washington's My Health My Data Act.
Alessio:
By using a camera feature, the user consents to the collection, storage, and use described in this section.
With the user's consent (the banner on Alessio's pages), Alessio uses saved fit photos, reports, and mirror recordings to train, test, and improve:
Alessio does not sell photos or recordings and does not license them to other companies for their own products.
Users can opt out at any time by declining the consent banner (nothing gets saved) or by emailing hello@tryalessio.com to have saved media deleted and excluded going forward.
One limit: if a photo or recording was already used to train a system, Alessio cannot remove it from a system that is already trained. Alessio will stop using it going forward. If that is not acceptable, do not accept the consent banner.
In short: Yes, Alessio will update the notice as necessary to stay compliant with relevant laws.
Alessio may update this Privacy Notice from time to time. The updated version will be indicated by an updated “Last updated” date at the top. If Alessio makes material changes, it may notify users by prominently posting a notice of the changes or by directly sending a notification. Users are encouraged to review the Privacy Notice frequently to stay informed about how Alessio protects information.
Users with questions or comments about the notice may contact Alessio by email at hello@tryalessio.com.
Based on applicable laws of the user's country or US state of residence, users may have the right to request access to personal information Alessio collects, details about how Alessio has processed it, correction of inaccuracies, or deletion of personal information. Users may also have the right to withdraw consent to processing of personal information. These rights may be limited in some circumstances by applicable law.
To request review, update, or deletion of personal information, email hello@tryalessio.com.
‹ back to alessio