Privacy policy

Controller

Thomas Renon, a French sole trader operating under the trading name Renown Studio, is the controller for the Lustro service. Address: 2 rue Pablo Picasso, 94550 Chevilly-Larue, France. Privacy contact: admin@renown.fr.

Data, purposes and legal bases

Lustro processes account identifiers, email, session and installation data, uploaded photos and garment images, generated results, permission declarations, try-on balances, purchase references, notification tokens and security logs.

Performance of the contract allows Lustro to create and connect your account, produce and deliver requested try-ons and manage your balance. Legal obligations justify processing necessary transactions and evidence. Lustro's legitimate interests allow it to secure the service, provide support and prevent abuse.

The email address and session data are required for an account. A photo and garment image are required only to produce the requested try-on. Purchase references are required only when a purchase is made. Without this data, the relevant feature cannot be provided. Notifications remain optional and may be disabled.

Automated checks may restrict a promotional offer when abuse is detected. They do not produce a decision with legal or similarly significant effects.

Photos and artificial intelligence

You must be the person shown or have their explicit permission. If you upload a third party's photo, you must provide them with this policy before uploading it.

Images are analysed by artificial-intelligence providers to generate the requested try-on. Lustro support accesses a photo only after your explicit request and solely to resolve the reported issue.

Recipients and transfers

Access to data is limited to Lustro and providers needed for hosting, storage, authentication, artificial intelligence, email, notifications, payment and purchase verification. Each recipient receives only the data required for its role. Competent authorities may also receive data when required by law.

Stripe Managed Payments processes Web payment data as the Merchant of Record identified in checkout and on the receipt; Link may be offered as a payment method. RevenueCat verifies and synchronizes only iOS and Android purchases. Lustro neither receives nor stores full card numbers.

Some providers may process data outside the European Economic Area. Depending on the country and provider, transfers rely on an adequacy decision or the European Commission's Standard Contractual Clauses and supplementary safeguards. You may request information about these safeguards at admin@renown.fr.

Retention and necessary storage

Temporary images required for a try-on are deleted after final completion or failure. A deleted photo, garment or result becomes inaccessible immediately and is erased from active storage within 24 hours. Technical and security logs are rotated automatically: storage is capped separately for each service and, when a limit is reached, the oldest segments are deleted. Their effective retention therefore varies with activity. These logs are minimised and contain neither uploaded images, authentication tokens nor data entered in the payment form. A disabled notification token is deleted no later than 90 days after it is disabled.

Daily PostgreSQL backups are retained for no more than 7 days and do not include files held in image storage. They are isolated from ordinary operations. A genuinely empty account inactive for 24 months may be deleted. User-requested deletion becomes final after a 30-day cancellation period. Strictly necessary transactions and contractual evidence are pseudonymised and retained for no more than 5 years.

After account deletion, anti-abuse fingerprints associated with the welcome offer are detached from the user, retained for 24 months and then deleted. They are used only to prevent an improper repeat grant of the same offer.

Lustro uses only cookies and storage needed for language, security, login and purchase sessions. No advertising or analytics cookies are used.

Your rights and complaints

You may request access, correction, erasure, restriction or portability of your data at admin@renown.fr. You may also object to processing based on legitimate interests. Account export and deletion are available from the authenticated Web portal; a ready archive remains downloadable for 24 hours.

You may complain to the French supervisory authority, CNIL, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France — cnil.fr.