This policy explains what data LuxuryBandit collects and how we use it. LuxuryBandit is for adults (18+). If you have any question, reach us via our contact form.

What we collect

Account: your email and display name.
Photos: images you upload for an AI try-on, and (for models) profile photos.
Chat: messages you send in the AI chat.
Payments: if you subscribe, our payment provider (Stripe) processes your card — we never see or store your full card details.
Usage: basic, mostly aggregate data about how the app is used, plus cookies (see below).

How we use it (and why)

To provide the service — sign-in, generating your try-on videos, chat, and model profiles (to perform our agreement with you); to process payments for Premium (contract); to keep the service secure and improve it (our legitimate interest); and, only with your consent, for marketing measurement (the Meta Pixel). Where the law requires it (e.g. GDPR Art. 6), consent can be withdrawn at any time.

Photos & AI

Photos you upload are used to generate your try-on and are not used to train third-party AI models for their own purposes. You can delete your content and account at any time (see Data deletion).

We store them. Your uploaded photo, the photo of the person you picked, and the generated picture or video are saved on our hosting provider’s servers in Frankfurt, Germany (Supabase, EU) — so we can create your result, keep it in your gallery, and look into misuse. They are never published and never shown to other users; only our team can view them. Photos and results from visits without a purchase are deleted after 90 days; what you paid for stays until you delete it.

News & offers by email. If you enter your email address to receive your picture, you also agree that we may send you news and offers — new topics, new models and price offers. Every email has a one-click unsubscribe link, and you can withdraw at any time; it does not affect anything you already bought.

Cookies & the Meta Pixel

We use essential cookies to run the app (e.g. to keep you signed in) — these are always needed. We use the Meta (Facebook) Pixel for marketing measurement only after you accept it in the cookie banner; if you reject, the pixel does not load. You can change your choice by clearing the site data in your browser.

Who we share it with

We do not sell your personal data. We use trusted service providers only to run LuxuryBandit, for example: Supabase (hosting, database and image storage — on servers in Frankfurt, Germany), Stripe (payments), and AI providers for the chat and the try-on videos (Anthropic, OpenAI, fal.ai, Pixverse). With your consent, Meta receives pixel data for ad measurement. Some of these providers operate outside the EU; where that happens, appropriate safeguards apply.

Wedding invitations: your guests’ data

If you buy a wedding invitation, your guests can answer on your invitation page. A guest gives a first name and an email address — nothing else. No account, no password, no phone number, no postal address.

Those details belong to you, the couple, not to us. We store them only to run your invitation: to show you who is coming, to tell you by email when someone answers, and to send your guests the news you write, with the link back to your page. We never use guest addresses for our own advertising, never sell them, and never add them to any other list. News emails go out one by one, so no guest ever sees the addresses of the others.

The first names of the guests who answered are visible on the invitation page to anyone who has the link — that is what a guest list is for. Email addresses are never shown there, not to other guests and not in the page’s data.

Guest details live and die with the invitation: when you withdraw the invitation, or when it is deleted after the retention period below, they go with it. A guest who wants to be removed earlier can ask you, or write to us through the contact form — we will remove that entry.

How long we keep it

We keep your data only as long as it is needed to run your account and the service, and delete it when it is no longer needed or when you ask us to.

Your rights

You have the right to access, correct, delete, restrict, object to, and export your data, and to withdraw consent at any time. To exercise any of these, use our contact form. You also have the right to complain to your local data protection authority.

Last updated: 31 July 2026