Privacy Policy · v1.1 · Effective July 9, 2026
You own your body data.
What we collect, what we never store, exactly how long we keep it, and who else ever sees it. Your scan photos are not stored on our servers.
Export your data
Download a portable copy: your server-side records (Digital Twin, consent history, memory, watches, audit trail) plus the AVANTÉ data stored in this browser.
Delete everything
Permanently remove your measurements, Digital Twin, wardrobe, purchase outcomes, consent records, memory and watches — plus the AVANTÉ data in this browser. Scan photos are never stored on our servers, so there are none to delete. Irreversible; the deletion itself is audit-logged.
Consent — fine-grained & revocable
Your data
What AVANTÉ needs to do the thing you asked for. Yours to export or delete, always.
- Allow body-scan processingProcess scan photos to estimate your measurements. Photos are never stored on our servers, and they are never used to train any model.
- Store my measurementsKeep your measurements so fit recommendations work across sessions. Yours to export or delete at any time.
- Personalise sizing from my historyLearn from your own purchases and returns to sharpen your own recommendations. This never leaves your account.
- Generate try-on imagesSend a garment image to our rendering provider to produce a preview you asked for.
- Preserve my face in rendersRender try-on previews with your likeness rather than a neutral form. Off by default.
- Send me product updatesOccasional email about new features and seasonal edits. Nothing to do with how your data is processed.
Shared intelligence
Statistics without people. We keep “this brand runs narrow in the shoulders” — never you.
- Contribute anonymised fit dataHelp improve brand sizing accuracy for everyone. We keep the statistic — “this brand's jackets run narrow in the shoulders” — never the person. No identity, no photos, no email, no Digital Twin identifiers.
AI research
Entirely optional. Never bundled. Your photos, scans and Style Profile are excluded even if you opt in.
- Help improve AVANTÉ's future AIAllow your fit outcomes to be included in the research corpus used to improve future recommendation models. Entirely optional, never bundled with anything else, and revocable at any time. Your photos, body scans and Digital Twin are excluded even if you opt in.
- Share identifiable data with retail partnersPartners only ever see anonymized, aggregate insight — never you.Never
Recent activity
No privacy activity yet this session.
1. Who we are
DeSouza Strategic Systems LLC, doing business as AVANTÉ operates AVANTÉ. We are the controller of the personal information described here. Contact us at info@dssadvisorygroup.com.
2. What we collect
We collect only what the service needs:
- Account information: your email address and, if you provide it, your first name.
- Body measurements and body-geometry estimates derived from a photo scan or entered by you (height, weight, chest, waist, hip, shoulder, sleeve, inseam, neck, torso).
- Scan photographs, captured in your browser and used only to estimate measurements.
- Style and usage data: wardrobe items, saved looks, comparisons, purchase outcomes you report, and preferences.
- Approximate location, only if you allow it, to tailor guidance to local weather.
- Billing information, handled by Stripe. We never receive or store your card number.
- Technical data inherent to serving the site, such as IP address and request metadata.
3. Biometric information — how we treat body data
Body-geometry measurements derived from your scan may constitute biometric identifiers or biometric information under laws including the Texas Capture or Use of Biometric Identifier Act and the Illinois Biometric Information Privacy Act.
We collect them only after you give informed consent, and only to estimate garment fit. A body scan cannot be performed until you are signed in and have granted body-scan consent, and every grant or withdrawal is written to an append-only consent ledger with a timestamp and the version of this policy in force at the time. We do not sell, lease, trade, or otherwise profit from your biometric information, and we do not disclose it except as you direct or as the law requires.
Scan photographs are processed in your browser and transmitted to our servers only for the moment measurements are estimated. They are not stored on our servers.
Biometric identifiers and biometric information are permanently destroyed on the earliest of: (i) the date you request deletion; (ii) the date the initial purpose for collecting them has been satisfied; or (iii) within one year of your last interaction with AVANTÉ.
4. Retention and destruction schedule
We keep personal information only as long as it is needed for the purpose it was collected for, or as the law requires. This is our published schedule:
| Data | How long we keep it | Why, and what enforces it |
|---|---|---|
| Scan photographs | Never stored | Captured in your browser, transmitted only for the instant measurements are estimated, then discarded. There is nothing to retain and nothing to delete. |
| Digital Twin, measurements, wardrobe | 24 months after your last interaction, or immediately when you delete it | Yours while you are using it: the clock starts at your last interaction, not at your scan, so an active member never loses their twin. If you walk away, your measurements do not stay on our disks indefinitely — they are erased, with the keys that could read them, by a job that runs monthly and records what it deleted. Encrypted the whole time. Deleted immediately, and irreversibly, whenever you ask. |
| Data of a deleted account | Immediate | Erased on request. Backups roll off on their own schedule; we do not restore a deleted account from one. |
| Consent records (the consent ledger) | 3 years after your last interaction | Append-only proof that consent was lawfully obtained and that any withdrawal was honoured. Contains no biometric data, no measurements and no imagery. Deleting your data withdraws every consent; it does not erase the record that you once gave, and later withdrew, that consent. |
| Audit events, security incidents, architecture decisions | Permanent | The institutional record. Append-only. A deletion produces a tombstone rather than a rewritten history. |
| Billing, invoices, subscriptions, tax records | 5 years | Tax, accounting and legal obligations. Held by Stripe as processor; AVANTÉ never receives or stores your card number. |
| Beta-validation study records | 3 years after collection | Identified only by participant ID, never by name. Destroyed on withdrawal from the study. |
| Render ledger, fit calculations, product imports | 3 years | Model improvement, cost accounting and troubleshooting. Carries no identifiable body data. |
| Unused render assets | 12 months from last access | A cache is not an archive. The clock runs from last access, not from creation: a render you keep coming back to stays, and one nobody has opened in a year goes. It holds no measurements and no body data — only a picture already shown to the person who asked for it. |
| Telemetry, performance and debug logs, rate-limit counters | 1 year | Operational only. No body data, no Digital Twin identifiers. |
| Temporary uploads, failed imports, processing artefacts | 30 days | Transient by construction. |
5. How we use information
We use personal information to:
- Estimate your measurements and produce fit scores, size recommendations, and try-on images you request.
- Provide styling and shopping guidance, and remember your wardrobe and preferences.
- Operate your account, authenticate you, and process subscription billing.
- Send transactional messages, and — only if you opt in — product updates or promotions.
- Improve accuracy in aggregate, and publish aggregate research figures that never identify you.
- Protect the service against abuse and meet legal obligations.
6. AI training — what we will never do without asking
Your photographs, body scans, Digital Twin, and any biometric-derived information are excluded from AI model training. Not de-prioritised, not anonymised first — excluded. This holds whether or not you opt in to anything else on this page.
We organise your data in three tiers, and the boundary between them is enforced in code rather than by policy alone.
Tier 1 — core product data. Your Digital Twin, measurements, wardrobe, preferences and fit history. Used only to provide the service you asked for. Never used to train foundation models. Never shared with third parties. Yours to export or delete at any time.
Tier 2 — anonymous product intelligence. Statistical signals with identity, photographs, names, email addresses and Digital Twin identifiers removed. The record we keep is “this brand's jackets run narrow in the shoulders” — never “this person has 18.4-inch shoulders.”
Tier 3 — the AI research corpus. Entirely optional, separately consented, never bundled with anything else, and revocable at any time from the Privacy page. Your photographs, body scans and Digital Twin remain excluded even if you opt in. If you do nothing, you are not in it.
Marketing consent and AI processing consent are separate switches. We will never treat agreement to one as agreement to the other.
8. Your rights and how to exercise them
Wherever you live, you can access, export, correct, and delete your data from the Privacy page, and you can grant or withdraw each consent independently. Export and deletion require you to be signed in so that nobody else can act on your account.
If you are in California, you have the right to know, delete, correct, and to opt out of sale or sharing (we do none), and not to be discriminated against for exercising a right. If you are in the European Economic Area or the United Kingdom, you have the rights of access, rectification, erasure, restriction, portability, and objection, and you may lodge a complaint with your supervisory authority. Where we rely on consent, you may withdraw it at any time.
To exercise any right, use the Privacy page or write to info@dssadvisorygroup.com. We will respond within the time the law allows.
9. Security
Access to your account is protected by a signed, HTTP-only session cookie, transmitted only over HTTPS in production. Consent changes, exports, and deletions are audit-logged. Access to your data requires your authenticated session.
No system is perfectly secure. If a breach affects your personal information, we will notify you and the relevant authorities as the law requires.
11. Children
AVANTÉ is for adults aged 18 and over. This is enforced when an account is created: you must state your date of birth, and an account is not created for anyone under 18. We validate the date and then discard it — we keep only the fact that you attested, when, and under which version of this statement.
We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.
12. International transfers
We operate from the United States, and our service providers may process data in the United States and elsewhere. Where we transfer personal information out of the European Economic Area or the United Kingdom, we rely on appropriate safeguards such as the Standard Contractual Clauses.
13. Changes to this policy
We will update this policy when our practices change, and we will change it in the same release as the change it describes. Material changes will be notified to you. The version and effective date at the top of this page always identify the current policy.
14. Contact
Privacy questions, requests, and complaints: info@dssadvisorygroup.com. DeSouza Strategic Systems LLC, doing business as AVANTÉ.
DeSouza Strategic Systems LLC, doing business as AVANTÉ. See also our Terms of Service and Disclosures.