Privacy Policy

This Privacy Policy explains how CORE SHOP Inc. ("CORE," "we," "us," or "our") collects, uses, and shares information when you use core.shop and related services (the "Service"). CORE SHOP Inc. is a Delaware corporation and is the data controller of the personal data described below.

If you have questions, contact us at contact@core.shop.

1. Who this applies to

The Service is intended only for users who are 18 or older. We do not knowingly collect data from anyone under 18. If you believe a minor has provided us data, contact us and we will delete it.

2. Information we collect

Information you give us when you create an account

• Email address
• Name
• Username, display name, bio, and profile photo (if you add one). These appear on your public profile page, which anyone can view; any collections you mark as public are also visible there. You can keep collections private in your profile settings.
• Account credentials (your password is hashed and managed by our authentication provider; we never see it in plain text)

Information you give us during onboarding (used to personalize your recommendations)

• Your shopping context (womenswear / menswear) — required
• Aesthetic preferences (the styles you select) — optional
• Brands you like — optional
• Sizing and fit details: height, shoe size, waist, top size, and fit preference — optional

Your sizing and fit details are used only to improve the relevance of your recommendations. We do not sell them and do not use them for any purpose other than personalization.

Photos you upload

• Mirror photos: if you use the Mirror (virtual try-on), the base photo of yourself that you upload is stored so you can reuse it, and is sent to our try-on provider (Fashn) to render results. You can replace or delete your base photo from the Mirror at any time, and it is removed when your account deletion request is processed. Try-on result images are generated and hosted by Fashn; we store links to them with your account.
• Image searches: if you search with a photo from a personalized (onboarded) account, a downscaled copy is converted to a visual embedding to run the search, shown to an AI model to write the results caption, and retained by us in a private bucket for up to 60 days to improve search quality, after which it is automatically deleted. Photo searches from guests and new accounts are sent to Shopify's visual search instead and are not retained by us.

Information we collect as you use the Service

• Your swipe activity (likes/passes) and the taste profile we derive from it
• Searches you run, including natural-language ("vibe") queries
• Products you view and outbound clicks to third-party retailers
• Device, browser, approximate location (from IP), and similar technical data
• Cookies and analytics events (see our Cookie Policy)

If you use the Service without an account

You can run searches on our public pages without signing in. Guest searches run against our licensed Shopify product catalog; if you attach a photo, it is sent to Shopify's visual search. Guest searches are not linked to any account profile and are not kept in our search-improvement corpus.

Information we derive

• A taste/recommendation profile generated from the data above, used to tailor your feed.

3. How we use your information

We use your information to:

• Operate your account and provide the Service
• Generate and continuously improve your personalized recommendations and search results
• Send you transactional emails (e.g., verification, account notices)
• Measure and improve the Service through analytics (only with your consent where required)
• Maintain security, prevent abuse, and comply with law

AI features

To power personalization and search, we send relevant inputs — such as your onboarding answers, search queries, and photos you attach to a search — to third-party AI providers (currently OpenAI for taste analysis and search, and Fashn for try-on rendering and outfit video) through their business/API services. Per those providers' API terms, your inputs are processed to return results to us and are not used to train their models. We send only what is needed to deliver the feature.

4. Legal bases (EEA/UK users)

Where the GDPR or UK GDPR applies, we rely on:

• Performance of a contract — to create your account and provide the core Service
• Consent — for analytics cookies and any optional information you choose to provide; you may withdraw consent at any time
• Legitimate interests — to improve and secure the Service, where not overridden by your rights

5. How we share information

We do not sell your personal data. We share it only with:

Service providers (sub-processors) that operate the Service on our behalf:

We may update this list as our stack changes; the current version always appears here.

Other disclosures: we may disclose information to comply with law, enforce our Terms, protect rights and safety, or in connection with a merger, acquisition, or sale of assets (you will be notified of any such change in control of your data).

We do not share your data with the third-party retailers you browse, beyond the standard referral/click information generated when you click an outbound link.

6. International transfers

We are based in the United States and our providers are located primarily there (see the table in Section 5 for exceptions). If you access the Service from the EEA, UK, or elsewhere, your data will be transferred to and processed in the United States. Where required, we rely on appropriate safeguards such as the EU Standard Contractual Clauses and/or the EU–U.S. Data Privacy Framework.

7. Data retention

We keep your personal data while your account is active and as needed to provide the Service. You can request deletion of your account at contact@core.shop; we then delete or anonymize your personal data within a reasonable period, except where we must retain it for legal, security, or fraud-prevention reasons. Specific retention periods:

• Image-search photos: automatically deleted after 60 days.
• Mirror base photos: kept until you replace or delete them, or until your account deletion is processed. Try-on result images are hosted by Fashn; we keep links to them with your account.
• Taste profile and activity data: kept while your account is active; deleted with your account.
• Analytics session recordings: retained by our analytics provider for 30 days (see the Cookie Policy).

8. Your rights

EEA/UK (GDPR): you have the right to access, correct, delete, restrict, or object to processing, to data portability, and to withdraw consent. You may also lodge a complaint with your local data protection authority (in Italy, the Garante per la protezione dei dati personali).

California (CCPA/CPRA): you have the right to know what personal information we collect, to access and delete it, to correct it, and to opt out of "sale" or "sharing." We do not sell or share personal information as those terms are defined. You may exercise these rights without discrimination.

To exercise any right, email contact@core.shop. We will verify your request and respond within the timeframe required by applicable law.

9. Cookies

We use cookies and similar technologies as described in our Cookie Policy. In the EEA/UK, non-essential cookies (including analytics) are set only after you consent through our cookie banner.

10. Security

We use industry-standard measures (including encryption in transit and hashed credentials) to protect your data. No method of transmission or storage is perfectly secure, and we cannot guarantee absolute security.

11. Changes to this Policy

We may update this Policy from time to time. We will post the updated version here and revise the "Last updated" date, and will notify you of material changes where required.

12. Contact

CORE SHOP Inc.
2093 Philadelphia Pike #1702
Claymont, DE 19703
United States
Email: contact@core.shop