ThreadWeb uses third-party AI APIs to turn your wardrobe, visible appearance, preferences, instructions and context into styling suggestions and virtual try-on results. AI supports the service; it does not make legal, employment, credit, insurance, health or similarly significant decisions about you.

Model names can change as providers retire or replace models. We may substitute a functionally similar business/API model from the same provider. We will update this notice and obtain new permission where a new provider or materially different purpose requires it.

ThreadWeb aims to send only the information needed for the requested task. We do not ask an AI provider to infer ethnicity or racial origin. We do not create face or body templates for identification, and we do not use face recognition, identity matching, age estimation or emotion analysis.

If you upload a body or appearance photo, ThreadWeb sends it to OpenAI for analysis of directly visible styling attributes. Google Gemini may be used as a fallback.

ThreadWeb sends your body photo or selected generated model image, together with a clothing image, to OpenAI or Google Gemini to create an approximation.

If you ask ThreadWeb to clear the background on an uploaded body photo, ThreadWeb sends that photo to Google Gemini to place you on a plain studio background.

If you upload a photo of yourself wearing an item for wardrobe capture, ThreadWeb may send it to xAI to isolate the clothing.

Text models use your wardrobe, preferences, answers and Style File context to suggest items and outfits. You may select an AI-generated model that reflects your chosen appearance settings instead of uploading a body photo. This reduces the need to provide a photo of yourself, although the selected model and garment images are still processed by an AI provider for virtual try-on.

ThreadWeb has intentionally retained these provider-log settings because provider dashboards and logs are important for diagnosing failures, investigating misuse and improving reliability. Zero Data Retention (ZDR) is therefore not currently enabled. ZDR would reduce or remove provider-side content retention; it is not required merely because data is sent to a provider. The relevant requirement is that retention is necessary, secure, contractually permitted and clearly explained. Provider safety systems may retain content for longer where required to investigate suspected abuse, unlawful content or child sexual abuse material. Provider personnel may access limited content for safety, security, support or legal reasons under their business terms.

ThreadWeb clearly identifies the Virtual Try-On area. Try-on results are currently private within that feature and cannot be saved, exported or shared through ThreadWeb. Do not treat an output as an authentic photograph or use it to deceive another person.

AI outputs are generated automatically, but ThreadWeb's two authorised team members may review an input, output or log where necessary to diagnose an error, investigate security or abuse, respond to your support request or meet a legal duty. Access is restricted and is not used for unrelated marketing. Providers may carry out their own limited safety or abuse review under their terms.

AI is central to ThreadWeb's personalised service. If you withdraw permission for all future third-party AI processing, ThreadWeb cannot provide the affected features and you may need to close your account. Withdrawing marketing consent has no effect on AI features.

Only upload content that you have the right and permission to use. You must not upload images of children, intimate images, images of another person without permission or content that violates privacy or intellectual-property rights. Retailer product images remain the property of their owners and are used only in the requested product or try-on context; ThreadWeb does not grant a separate reuse right. The acceptable-use rules in the Terms of Service apply to every AI feature. ThreadWeb may block or remove inputs or outputs to comply with law, provider rules or safety obligations.

For UK data-protection purposes, core AI processing is generally necessary to perform the ThreadWeb service contract you request. Service security and diagnostics also rely on ThreadWeb's legitimate interests, and optional marketing relies on consent. The signup permission required for third-party AI is an explicit product permission and does not turn unrelated processing into consent. See the Privacy Notice for full lawful bases, international transfers, retention and rights.

Questions or rights requests can be sent to James Moffitt, Data Protection Officer, at james.moffitt@threadweb.co.uk. We will update this notice when a provider, model category, purpose, retention setting or user choice changes materially, and will seek new permission where required.