Data Processing

Overview

This page describes how Stylisee processes data on behalf of our users. As a business management platform for styling professionals, we act as a data processor for the client information you store — while you, the business owner, act as the data controller. This distinction is recognised under the Australian Privacy Act 1988 (Cth), the EU General Data Protection Regulation (GDPR), and equivalent frameworks.

Data We Process

On your behalf, we process the following categories of data:

• Client personal data — names, contact details, demographic information you record
• Style and appearance data — body shape, colour season, skin tone, hair colour, style preferences, and risk tolerance data
• Visual content — client photographs, wardrobe images, outfit documentation, and before/after styling photos
• Service records — bookings, appointment history, services rendered, and session notes
• Financial data — service pricing and revenue analytics (we do not process or store payment card details — these are handled exclusively by Stripe)
• Feedback — client reviews and ratings you collect through the platform

Legal Basis for Processing

We process data based on:

• Contractual necessity — to provide the Stylisee platform services you have subscribed to
• Legitimate interest — to maintain platform security, prevent abuse, and improve our services
• Your instructions — we only process your clients' data as directed by your use of the platform

How We Process Data

• Storage — all data is stored in secure, encrypted databases with access controls
• Transmission — all data in transit is encrypted using HTTPS/TLS
• Isolation — each business account's data is logically isolated; we enforce tenant separation at the application level to ensure no cross-tenant data access
• Access — only you and team members you explicitly authorise can view or modify your data
• Analytics — business analytics are generated from your own data only and are not shared across accounts

Photos & Wardrobe Data

We understand that client photographs and wardrobe documentation are particularly sensitive. Our processing of this data is limited to:

• Storing the images securely within your isolated business account
• Serving them back to you (and authorised team members) when you access the platform
• Permanently deleting them when you remove the associated client record or your account

We do not analyse, scan, index, share, or use client photographs or wardrobe data for any purpose other than storing and displaying them to you.

Payment Card Data

Stylisee does not collect, store, or process credit card or bank account details. All subscription payments are handled exclusively by Stripe, Inc., a PCI DSS Level 1 certified payment processor. When you subscribe, your card details are entered directly into Stripe's secure environment and never pass through Stylisee's servers. We receive only a tokenised reference and confirmation of payment status from Stripe.

Sub-Processors

We use the following sub-processors to deliver the Service:

All sub-processors are bound by data processing agreements and maintain appropriate security standards. Stripe is certified to PCI DSS Level 1.

Data Retention & Deletion

We retain your data for as long as your account is active. When your account is deleted — whether by you or a platform administrator — all data is permanently removed within 30 days, including client records, photographs, wardrobe data, bookings, and business settings. No backups of individual tenant data are retained after deletion.

International Data Transfers

Our infrastructure is operated primarily in Australia. Some sub-processors (including Stripe and our authentication provider) may process data in other jurisdictions including the United States. Where data is transferred internationally, we ensure appropriate safeguards are in place in accordance with the Australian Privacy Act and, where applicable, GDPR requirements for cross-border data transfers.

Your Obligations as Data Controller

As the business owner entering client data into Stylisee, you are the data controller and are responsible for:

• Obtaining appropriate consent from clients before recording their personal information, photographs, and styling data
• Informing your clients about how their data is stored and used (including that it is stored in the Stylisee platform)
• Responding to data access or deletion requests from your clients
• Ensuring your use of client data complies with the Australian Privacy Principles and any other applicable privacy laws

Contact

For data processing enquiries, contact us at privacy@stylisee.com.