Vesta is a personal wardrobe app. This policy explains what we collect, how it's used, who else touches it, and the rights you have over it — including what happens when you connect an AI assistant. The data controller is [Vesta Style LLC] (US), reachable at support@vesta.style.
Your wardrobe data exists to power your own closet: cataloguing, outfit suggestions, packing lists, and purchase advice. Under the GDPR, each use rests on a legal basis:
Your data is never sold, never shared for advertising, and never used to advertise to you.
Photos and text are processed by AI providers — Anthropic's Claude for image analysis and chat, Google's Gemini for generating illustrations — solely to provide Vesta's features to you. We use these providers' commercial APIs, whose terms do not permit your content to be used to train their models.
If you connect Vesta to an AI assistant (such as ChatGPT or Claude), that assistant can read your wardrobe only: items, outfits, trips, and item images. Your style profile, memories, body notes, account details, and photos of you are never shared through this connection, and the connection cannot change or delete anything. You can disconnect at any time from Settings, which revokes the assistant's access immediately.
Vesta uses only essential cookies — the ones that keep you signed in; the service can't work without them. There are no advertising or tracking cookies, so there's no cookie banner to click through.
For analytics we run Umami, a privacy-focused, cookieless analytics tool, self-hosted on our own EU server. It gives us aggregate numbers only — pages visited, rough location by country, device type — using no cookies and no cross-site tracking, and it can't identify you. Analytics data is never joined to your wardrobe.
Your closet is stored in the EU, with Supabase (Postgres, auth, and file storage) and on our own server with Hetzner — and so is our analytics. Some providers process data in the US: Anthropic and Google when AI features run, and Stripe for payments. Where data leaves the EU/UK, we rely on safeguards such as the EU-US Data Privacy Framework and standard contractual clauses, as applicable to each provider.
Your data stays until you delete it or close your account. Deleting an item, closet, or memory removes it from the live service right away; deleting your account removes all your closets and content, with residual copies in routine backups expiring within about 30 days. Server logs are kept briefly for security and debugging, then rotated out.
Service providers that process data on Vesta's behalf, each receiving only what its function requires: Supabase (database, auth, file storage), Hetzner (hosting), Anthropic and Google (AI processing of wardrobe content), Stripe (payments), and Cloudflare (DNS and email routing, including the email-import forwarding addresses). Analytics is self-hosted, so no analytics provider ever sees your data. We don't share your data with anyone else, except if the law compels us — and if it ever does, we'll tell you unless legally barred.
Wherever you live, you can access, correct, and delete your data. You can delete items, closets, memories, and assistant connections yourself in the app, and request full account deletion at support@vesta.style.
Export: in-app data export is in development. Until it ships, email us and we'll send you a complete copy of your data in a portable format within 30 days, free of charge.
You additionally have the right to restrict or object to processing, the right to data portability, the right to withdraw consent at any time, and the right to lodge a complaint with your local supervisory authority. We'll answer any rights request within one month.
You have the right to know what personal information we collect (this policy is the disclosure), to access, correct, and delete it, and to not be discriminated against for exercising those rights. Vesta does not sell or share personal information as those terms are defined in the CCPA, and doesn't use or disclose sensitive personal information beyond what's needed to provide the service — so there's nothing to opt out of. You can act through an authorized agent; we'll verify requests via your account email.
Vesta is for adults: you must be at least 18 to use it, and we don't knowingly collect data from anyone under 18. If you believe someone under 18 has an account, tell us and we'll delete it.
If this policy changes materially, we'll notify you in the app (or by email) before the change takes effect. The "last updated" date above always reflects the current version.