Effective Date: May 29, 2025

Muse ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, share, and protect your information when you use our AI-powered fashion search engine ("the Service"). By accessing or using Muse, you agree to this Privacy Policy.

We are based in and operate under the laws of the United States. This policy complies with the California Consumer Privacy Act (CCPA), the Children's Online Privacy Protection Act (COPPA), the Federal Trade Commission (FTC) guidelines, and other applicable state and federal laws.

1. Information We Collect

A. Information You Provide Directly:

We may collect information that you provide to us voluntarily, such as:

• Gender, height, weight, body type
• Style and shopping preferences (such as price range, favorite brands)
• Account details (such as your name and email address)
• Other information you explicitly provide for personalization or fashion recommendations (e.g., favorite colors, preferred fit, fashion goals)

B. Automatically Collected Information:

We automatically collect certain information when you use the Service, including:

• Approximate geolocation (based on your IP address or device settings)
• Behavior data (e.g., searches, clicks, time spent, and pages viewed)
• Device and browser information
• Cookies and tracking technologies (e.g., pixels and session recordings)

We do not collect biometric, health, or sensitive personal data.

2. How We Collect Information

We collect information through:

• Forms you fill out when creating an account or setting preferences
• Your interactions with the Service (e.g., search inputs, clicks, favorites)
• Cookies, pixels, session recordings, and other standard tracking technologies

3. Why We Collect Information

We use your information to:

• Personalize your search and shopping experience
• Provide tailored recommendations based on your preferences
• Improve the functionality and performance of the Service
• Conduct internal analytics and business operations
• Comply with legal obligations

4. Legal Basis for Collection and Use

We collect and process your data on the basis of:

• Your consent (e.g., when you provide information for personalization)
• Our legitimate interest in providing and improving the Service
• Compliance with legal obligations

5. How We Share Your Information

We may share anonymized and aggregated data with:

• Advertising and marketing partners
• Analytics service providers
• Business and retail partners

We do not sell, rent, or share your personal information for profit. We do not share unprocessed or identifiable user photos without explicit user consent.

6. Data Storage and Processing

Your data is stored and processed on secure U.S.-based cloud infrastructure provided by leading providers such as AWS, GCP, Cloudflare, and Databricks. All vendors must adhere to industry best practices in data security and privacy.

7. Children's Privacy

Muse is not intended for users under the age of 13. We do not knowingly collect personal information from children under 13. If we learn that we have collected information from a child without appropriate consent, we will delete it.

8. Your Rights and Choices

You have the following rights:

• Access: Request access to the personal information we have about you
• Correction: Update inaccurate or incomplete information
• Deletion: Delete your account and personal data
• Opt-Out: Limit data used for personalization or analytics, where applicable

To exercise these rights, please contact us at: legal@search-muse.com

Account holders can delete their account directly through their profile. Personal data explicitly provided will be deleted upon request. Behavior data may be retained unless deletion is required by law.

9. Data Retention and Disposal

We retain personal data only as long as necessary to fulfill the purposes outlined in this policy or comply with legal requirements. Data is securely deleted or anonymized when no longer needed.

10. Data Security

We follow industry-standard protocols for securing data, including:

• Encryption in transit and at rest
• Role-based access controls
• Regular software and infrastructure updates
• Internal access auditing and monitoring

While no system is 100% secure, we take all reasonable precautions to protect your data.

11. Data Breach Procedures

In the event of a data breach, we will:

• Investigate and contain the incident
• Notify affected users as required by law
• Report to relevant authorities where applicable
• Implement measures to prevent future breaches

12. Changes to This Privacy Policy

We may update this Privacy Policy periodically. When we do, we will post the revised version with an updated "Effective Date." Your continued use of the Service after changes are posted constitutes your acceptance of the revised policy.