Privacy Policy

1. Introduction

At Butix we respect your privacy and are committed to protecting your personal data. This policy explains what information we collect, how we use it, and the rights you have over it, in compliance with Law 1581 of 2012 (Personal Data Protection Law of Colombia) and international standards such as GDPR.

2. Data We Collect

Data you provide to us:

• Name, email, and password when you register
• Shipping address, phone number, and contact details for orders
• Personal photo (optional) when using the Virtual Try-On
• Messages you send to our AI fashion advisor chat
• Size and style preferences

Social media data (if you connect your accounts):

• OAuth tokens from Facebook, Instagram, or TikTok (never your password for those platforms)
• Public display name and profile picture of your connected account
• Unique identifier of your account (Open ID / Page ID)
• For TikTok: basic profile info via scope user.info.basic (display name, avatar URL, open_id) and video upload/publish capability via scopes video.upload and video.publish
• For Meta (Facebook & Instagram): Page access tokens and Instagram Business account ID required to publish content

Data collected automatically:

• IP address and browser information
• Pages visited within the site
• Cookies necessary for the platform to function

3. How We Use Your Data

We use your information exclusively to:

• Process and deliver your orders
• Authenticate you in your account
• Send you transactional notifications (confirmation, shipment, delivery)
• Generate personalized recommendations with AI assistance
• Publish content to your connected social media accounts (only what you explicitly approve)
• Improve the service and prevent fraud

4. Third-Party AI Services

Some features use third-party artificial intelligence services that process data temporarily:

• Virtual Try-On: sends your photo to the model in the cloud to generate the result. The image is not used to train models nor shared with additional third parties.
• Fashion Advisor: sends your message to the AI service to generate contextual responses based on our inventory.
• Social Hub: sends your base copy to the AI service to generate text variations.

These services comply with their own privacy policies, which you can consult on their official websites.

5. Social Media Integrations

When you connect your Facebook, Instagram, or TikTok account through the Social Hub:

• We only request the minimum permissions necessary to publish content
• We store access tokens encrypted in our database
• We never sell, rent, or share your social media data with third parties
• We do NOT access private messages, comments, or your followers’ data
• We do NOT use your social data to build advertising profiles or train AI models
• You can disconnect your account at any time from the admin panel, which deletes all stored tokens within 24 hours
• Revocation in the source platform (e.g., TikTok settings > Apps) immediately invalidates our access

6. Sharing Data with Third Parties

We do not sell your personal data. We only share it with:

• Payment gateways (Wompi): to process transactions
• Shipping companies: delivery data for dispatch
• Infrastructure providers (hosting, storage, email)
• Competent authorities: only when legally required

7. Data Retention

We keep your data while your account is active or as long as necessary to comply with legal, accounting, or tax obligations. Virtual Try-On images are deleted after 30 days unless you mark them as favorites. Social media OAuth tokens are deleted immediately upon disconnection from the admin panel.

8. Your Rights

Under applicable regulations, you have the right to:

• Access: request a copy of the data we hold about you
• Rectification: correct inaccurate or incomplete data
• Deletion: request the removal of your data (“right to be forgotten”)
• Objection: object to certain uses of your data
• Portability: receive your data in a structured format
• Withdrawal: revoke consent at any time

To exercise these rights, send an email to info@butix.co.

9. Security

We implement reasonable technical and organizational measures to protect your data against unauthorized access, loss, or alteration. This includes password encryption, HTTPS connections, encrypted OAuth tokens, and regular backups.

10. Minors

Butix is not directed at children under 14 years of age. We do not knowingly collect data from minors without authorization from their parents or legal guardians.

11. Cookies

We use cookies solely for the essential functioning of the site (session, shopping cart, preferences). We do not use third-party advertising tracking cookies without your explicit consent.

12. International Data Transfers

Some of our service providers (AI services, cloud storage, social media APIs) may process data outside of Colombia. When this happens, we ensure that the transfer is subject to appropriate safeguards, including contractual clauses and providers that comply with recognized privacy frameworks.

13. Changes to This Policy

We may update this policy periodically. Significant changes will be notified through a visible notice on the platform or by email. The date of the last update will always be visible at the top.

14. Contact

If you have questions, concerns, or want to exercise your rights, contact us: