Privacy Policy
Last updated: September 2026
1. Data Controller
Lookam S.L., based in Barcelona (Spain), is the controller of merchant-account personal data collected through lookam.io and the dashboard. Contact: hello@lookam.io.
For photos and accounts of people trying on clothes, Lookam acts as a processor when the shopper uses the widget anonymously in your store, and as controller of the My Lookam account when that person creates a Lookam profile. That shopper account is governed by the My Lookam policy (my.lookam.io/legal/privacy), not by this document.
2. Data We Collect
From you as a customer: registration data (name, email, company, hashed password); dashboard usage (widget settings, catalogue garments you upload, session metrics); billing handled by Stripe (Lookam does not store card data); and technical data (IP, access and error logs).
We do not receive or show in the dashboard a shopper’s optional personal card (name, sex, age or body measurements). Try-on metrics are shown operationally and, where applicable, in aggregate.
3. Purpose and Legal Basis
Delivery of contracted service (basis: contract performance). Billing and tax compliance (basis: legal obligation). Service-related communications (basis: legitimate interest). Product improvement through aggregated, anonymized metrics (basis: legitimate interest).
4. AI-Processed Images
Garment images you upload are processed by AI models to generate the try-on and are retained according to your plan’s retention period.
A shopper’s body or face photo is sent to AI providers only to generate that try-on and is served privately (authenticated storage and a signed proxy). If the shopper has a Lookam account, those photos and results are governed by the My Lookam policy. Depending on your plan and settings, the dashboard may show results or session photos of that try-on — not a personal album and not the measurements card. We do not extract biometric templates to identify anyone.
5. International Transfers
AI models and some cloud infrastructure may be outside the EEA. In that case we apply appropriate safeguards (EU Standard Contractual Clauses) under the GDPR, and we limit the transfer to what is needed to deliver the service.
6. Your Rights
As holder of the merchant account you have the right to access, rectify, erase, object, port and restrict. Write to hello@lookam.io. You may also lodge a complaint with the AEPD (aepd.es).
Shoppers exercise rights over their account and photos through My Lookam or by writing to hello@lookam.io; do not use this dashboard to export their personal card, because it is not here.
7. Data Retention
We retain your account data while you have an active relationship with Lookam and, after cancellation, for as long as legal duties require (generally around 5 years for tax data). Garment images and try-on results follow your plan’s retention period and media-maintenance settings.
8. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by email and via a notice in the dashboard. The current version will always be available at lookam.io/legal/privacy.
9. Widget, shoppers and My Lookam
The widget in your store allows anonymous try-ons and, if you enable it, creating or using a Lookam account. That account, album and optional card are not a separate product you sell: the shopper contracts My Lookam with Lookam under My Lookam’s terms and privacy. You do not have to draft that policy, but you should tell shoppers on your store, where relevant, that the fitting room is operated by Lookam.