Skip to content
GeZla logoGeZla
Get the app

Privacy

GeZla Privacy Policy

Last updated August 24, 2026. Controller: GEZLA LTD, registered in Bulgaria under UIC 208912276.

1. Introduction

GeZla operates a mobile application and website that connect customers with fashion designers for custom clothing, wardrobe management, payments, and AI-assisted styling recommendations.

This Privacy Policy explains how we collect, use, disclose, and protect personal data when you use the GeZla app, website, and related services (collectively, the Services).

By using the Services, you acknowledge that you have read this Privacy Policy. Where required by law, we ask for consent before processing certain personal data.

2. Who Is Responsible for Your Data

GEZLA LTD, a company registered in the Republic of Bulgaria under Unified Identification Code (UIC) 208912276, operates GeZla and is the controller responsible for your personal data.

Privacy contact: support@gezla.design. Telephone: +359 888 419 193.

We process personal data under Regulation (EU) 2016/679 (GDPR), the Bulgarian Personal Data Protection Act, and other applicable data-protection laws.

3. Information We Collect

We collect information you provide, information generated through your use of the Services, and limited information from providers you choose to use.

  • Account information: name, email address, phone number, authentication identifiers, profile photo, account role, and preferences.
  • Designer and business information: portfolio, specialties, location, payout details, IBAN, tax and VAT information, and other information needed to operate a designer account.
  • Profile and wardrobe data: measurements, size and body characteristics, style and color preferences, fit needs, wardrobe items, and reference photos.
  • AI feature data: submitted photos, measurements, styling instructions, prompts, generated images, capsule wardrobes, lookbooks, palettes, and related outputs.
  • Communications: customer-designer messages, attachments, support requests, and feedback.
  • Order and payment information: quote requests, offers, orders, delivery addresses, disputes, amounts, currency, payment status, limited billing information, and transaction references. Stripe processes payment-card details; GeZla does not store complete card numbers.
  • Technical and notification data: device and app information, IP address and infrastructure logs, crash or security data, push-notification token, and notification preferences.
  • Social sign-in information: basic profile and authentication data returned by Facebook when you choose Facebook login.

4. How We Collect Information

We collect data when you create or update an account, publish designer work, build a wardrobe profile, upload photos, contact another user, request or accept an offer, make a payment, manage an order, enable notifications, contact support, or otherwise use the Services.

We also receive limited technical, authentication, payment, hosting, and delivery-status data from providers used to operate the Services.

5. How We Use Your Information

We use personal data for the following purposes:

  • Providing accounts, authentication, wardrobe management, marketplace features, chat, support, and other requested Services.
  • Generating optional AI-assisted wardrobe, styling, measurement, and virtual try-on results.
  • Processing orders, facilitating payments, arranging delivery, and resolving disputes.
  • Personalizing content and interface preferences.
  • Sending service notices, security alerts, push notifications, and lawful optional marketing.
  • Maintaining, analyzing, securing, and improving the Services.
  • Preventing fraud, abuse, security incidents, and legal violations.
  • Meeting legal obligations and enforcing our Terms & Conditions.

6. Legal Bases for Processing

Under the GDPR, we rely on one or more legal bases depending on the activity:

  • Contract and pre-contract steps for accounts, quote requests, offers, orders, payments, messaging, and support.
  • Consent for optional AI photo processing, optional marketing, and other processing where consent is required. Consent can be withdrawn for future processing at any time.
  • Legitimate interests in operating, securing, improving, and protecting the Services, after balancing those interests against your rights.
  • Legal obligations relating to tax, accounting, consumer protection, payments, courts, authorities, and regulators.
  • Legal claims and vital interests where applicable.

7. AI Processing and Photos

When you choose AI styling or virtual try-on features, photos and related profile information may be transmitted to our cloud infrastructure and AI provider, including OpenAI, for analysis and generation of the result you requested.

We use these inputs to provide the selected feature, maintain its security, and troubleshoot failures. We do not use your photos for third-party advertising.

AI outputs may be inaccurate and do not make decisions that produce legal or similarly significant effects about you. The app asks for confirmation before a photo is submitted to an optional AI feature.

You can remove reference photos from your wardrobe profile, subject to the retention rules below.

8. How We Share Information

We do not sell personal data. We disclose only what is reasonably necessary for the purposes described here.

  • Designers you contact or order from receive relevant profile, wardrobe, measurement, and communication information needed for your request. Personal reference photos are not included in quote-request wardrobe snapshots.
  • Google Firebase provides authentication, database, file storage, and server functions.
  • Stripe provides payment processing and payment-related fraud prevention.
  • OpenAI processes data for optional AI features.
  • Meta/Facebook provides authentication when you choose Facebook login.
  • Expo and device-platform providers support push notifications and app infrastructure.
  • Authorities, courts, regulators, professional advisers, or law enforcement may receive data where disclosure is required or legally justified.
  • A buyer, investor, or successor may receive data in a merger, financing, restructuring, or business transfer, subject to appropriate safeguards and notice where required.
  • Other recipients may receive data when you direct us or give valid consent.

9. International Data Transfers

Some providers may process data outside Bulgaria or the European Economic Area, including in the United States. Where applicable, we use an adequacy decision, Standard Contractual Clauses, or another lawful transfer mechanism and supplementary safeguards where appropriate.

Contact us for more information about safeguards relevant to your data.

10. Data Retention

We retain personal data only as long as needed to provide the Services, complete orders, maintain security and backups, resolve disputes, enforce agreements, and meet legal, tax, and accounting duties.

Account and profile data is generally kept while an account is active. Transaction and accounting records may be kept for legally required periods. Messages and dispute evidence may be retained while needed to support transactions and legal claims.

When data is no longer required, we delete or anonymize it. Backup copies may remain for a limited period until overwritten under our backup cycle.

11. Security

We use technical and organizational measures designed to protect personal data from unauthorized access, alteration, disclosure, loss, and misuse. Access is limited according to operational need.

No system is completely secure. Keep your credentials confidential and contact us if you suspect unauthorized access.

12. Your Privacy Rights

Subject to applicable law, you may exercise the following rights. We may request information needed to verify your identity and protect other users' data.

  • Information and access to your personal data.
  • Correction of inaccurate or incomplete data.
  • Deletion where the legal conditions are met.
  • Restriction of processing in the cases provided by law.
  • Objection to processing based on legitimate interests and an absolute objection to direct marketing.
  • Data portability for eligible data processed automatically on the basis of consent or contract.
  • Withdrawal of consent at any time for future processing based on that consent.
  • A complaint to the Bulgarian Commission for Personal Data Protection (CPDP) or another competent supervisory authority, and a judicial remedy.

13. Exercising Your Rights

Email support@gezla.design with the subject “Privacy Request,” contact GeZla support in the app, or call +359 888 419 193.

Describe your request and provide enough information for us to identify the relevant account and respond securely. Do not send passwords or complete payment-card information.

We respond within the period required by applicable law. Requests are normally free, but the law permits a reasonable fee or refusal for manifestly unfounded or excessive requests.

14. Marketing and Notifications

Service messages about accounts, security, payments, orders, and material policy changes are not marketing. Optional marketing is sent only where a lawful basis exists.

You may opt out through message instructions or by contacting us. Push notifications can be managed through the app or device settings.

15. Children

The Services are not directed to children under 16. We do not knowingly create accounts for or collect personal data from children under 16.

If you believe a child has provided personal data, contact us so we can investigate and delete it where required.

16. Marketing Website

At the date of this policy, the GeZla marketing website does not accept form submissions and does not intentionally use analytics or advertising cookies. Hosting and security providers may process standard technical request logs needed to deliver and protect the website.

If we add forms, analytics, advertising technologies, or non-essential cookies, we will update this policy and provide any consent controls required by law.

17. Third-Party Links and Services

The Services may link to or integrate with third parties. Their own terms and privacy notices govern processing they perform independently. Review those notices before providing data directly to them.

18. Changes to This Policy

We may update this policy when our Services, providers, or legal obligations change. We will publish the updated version and revise the date above. We will provide additional notice or request consent where required by law.

19. Contact and Supervisory Authority

GEZLA LTD, UIC 208912276

Email: support@gezla.design

Telephone: +359 888 419 193

Bulgarian supervisory authority: Commission for Personal Data Protection (CPDP), 2 Prof. Tsvetan Lazarov Blvd., Sofia 1592, Bulgaria; website: cpdp.bg.