Skip to contentMade to measure, made to order
Privacy notice

How we process your personal data

This page explains which data we collect when you visit Feelago, create an account, buy something or write to us, why we use it, who we share it with and how you can exercise your rights, as required by Articles 13 and 14 of Regulation (EU) 2016/679 (the "GDPR").

Version of

Text under legal review

This version is complete but is still being checked by a legal professional, so it may change before the public launch. If you have any questions, write to info@feelago.com or use our contact form.

1.Controller and contact details

The controller is Feelago, which operates the Feelago website and apps. Its identification details are shown below and in the Legal notice.

For questions about your data or to exercise your rights, write to info@feelago.com. No data protection officer (DPO) has been appointed at present; if one is appointed, we will publish their contact details here.

Back to contents

2.Who this notice is for

This notice covers:

  • people who visit the website or use the Feelago apps;
  • people who create an account, save projects, moodboards or room surveys, order samples or make a purchase;
  • newsletter subscribers;
  • people who write to customer service or use Ago, our AI-based assistant;
  • clients of an interior designer, architect or studio that uses Feelago Pro (see the dedicated section).

Professionals who use Feelago Pro for their work will also find specific rules in the Pro service terms.

Back to contents

3.What data we process

  • Contact and account: name, email, phone number, delivery and billing addresses, preferred language.
  • Sign-in: one-time codes sent by email or text message or, if you choose "Sign in with Google" on the website, Google's confirmation described in the next item; the date of your last activity on the account, with an indication of whether it took place on the website or in the app. We do not use passwords for customers.
  • Sign-in with Google, only if you choose it: Google sends us your name, your email address with an indication that it is verified, an identifier of your Google account and, if you have set one, your profile picture. We use the email address to find or create your account, and the name only if the account does not already have one; we do not store the Google identifier or the profile picture. You can always sign in with the email code instead.
  • Orders and projects: chosen products, measurements, fabrics and finishes, projects, rooms, surveys, moodboards and the photos you upload.
  • Payments: outcome, amount, type of method used (for example card, PayPal, Klarna, Satispay, Scalapay, Revolut Pay or bank transfer) and summary details provided by Stripe, such as the card network and last four digits. For bank transfers, the name and details of the account the payment comes from are processed by Stripe to match it to your order and, where needed, to refund you. Full card numbers never pass through our systems and are not stored by us.
  • Communications: messages exchanged with customer service and with Ago, the emails we send you and their technical status (delivered, bounced).
  • Technical data: IP address and device and browser information, used for security and to prevent abuse, including by the anti-bot check that protects some forms (Cloudflare Turnstile); cookies and similar tools described in the Cookie policy.
  • Usage statistics, only with your consent: pages visited, some actions on the website and in the apps (for example the configurator steps and adding to the cart), technical errors and page loading times, together with general information such as device type, operating system, browser, language, referring site, approximate location (country, region and city, which Cloudflare derives from the IP address) and whether you are browsing as a visitor, customer or professional. They are linked to a random session identifier, not to your name or your orders, and do not include your IP address (we only store the location) or anything you type into forms.
  • Use of the Feelago Pro service, for professionals only: setup steps completed, date of last activity and use of features (for example quotes created, sent and paid), from which we derive account activation and health indicators.
  • Acceptance of the Feelago Pro Terms, for professionals only: the account email, the accepted version with the fingerprint of the document, where you accepted them (application, Pro Area or subscription) and in which language, date and time of the acceptance and of the specific approval of the clauses, the device and browser used and a non-reversible fingerprint of the IP address (not the address itself).
  • Signature of the Feelago Pro contract, only for professionals who signed it in the past (today the Feelago Pro Terms are accepted online, without a signature): first and last name and email of the signer, the image of the drawn signature (or of the typed name), date and time, the moment the code sent by email was verified, the device and browser used and a non-reversible fingerprint of the IP address (not the address itself), together with the signed PDF.
  • Team of a Feelago Pro studio, only if a professional invites you to their studio's team: your email (and your name, if you already have a Feelago account), who invited you, the date and expiry of the invitation and whether you accepted it. If you join the team: the studio, your role, what you can see, the dates you joined and left, your confirmation that you work with your own personal account and, in the studio's data, what you created, follow or sent. The studio owner can see when you last used Feelago. Your email may be shown to the studio's clients as the reply-to address in emails about the quotes and appointments you follow, and as the organiser in calendar invitations for the appointments you schedule.
  • Feelago Pro waiting list, only if you ask to join it: your email, your language and, if you enter them, your studio name and city, so we can let you know when applications to Feelago Pro open.
  • Launch waiting list, only if you ask to join it: your email, your language and what you had chosen in the cart or quote, so we can let you know when Feelago opens for orders.

We do not ask for special categories of data (for example health data): please do not include them in messages or notes.

Data marked as mandatory in forms is needed to complete the order or provide the service you request: without it we cannot proceed. Everything else is optional.

Back to contents

4.Why we process it, on what basis and for how long

For each purpose we state the legal basis (Article 6 GDPR) and the retention period. At the end of that period the data is deleted or anonymised.

  • Purpose
    Creating and managing your account and sign-in with a code or, if you choose it, with Google
    Legal basis
    Performance of a contract or of pre-contractual measures taken at your request (Art. 6(1)(b))
    Retention
    As long as you keep the account or until you ask us to delete it
  • Purpose
    Handling orders, payments, deliveries, returns and warranty claims
    Legal basis
    Performance of a contract (Art. 6(1)(b))
    Retention
    For the whole relationship; data needed to establish or defend legal claims up to 10 years after the order
  • Purpose
    Keeping invoices, order documents and accounting records
    Legal basis
    Legal obligation (Art. 6(1)(c))
    Retention
    10 years (Art. 2220 of the Italian Civil Code)
  • Purpose
    Answering support requests by email, form or chat, including through Ago
    Legal basis
    Performance of a contract or pre-contractual steps (Art. 6(1)(b)); legitimate interest in replying to people who contact us (Art. 6(1)(f))
    Retention
    24 months after the last message
  • Purpose
    AI-powered advice: chatting with Ago and room photo analysis
    Legal basis
    Performance of your request (Art. 6(1)(b))
    Retention
    Chat: as for customer service. Photos sent for analysis are not stored by us: we process them and discard them
  • Purpose
    Reviewing conversations with Ago and customer service to improve Ago's answers and the quality of our support
    Legal basis
    Legitimate interest in improving the service (Art. 6(1)(f)); you can object at any time
    Retention
    24 months from the last message, like support requests
  • Purpose
    Address suggestions while you type an address in our forms (checkout, account address book, Pro application and Pro studio profile); our staff also use them when entering or correcting an address to handle orders and shipments. Delivery address check when you continue to payment and, by our staff, before preparing the shipment, to avoid failed deliveries
    Legal basis
    Performance of your request and of the contract (Art. 6(1)(b)); for use by our staff, legitimate interest in having correct delivery addresses (Art. 6(1)(f))
    Retention
    We do not keep the text you type or the suggestions; the result of the check (including any proposed address) stays in the server's temporary memory for at most 24 hours, so the same request is not repeated, and is not stored permanently. Only the address you choose or confirm is kept, if you save it or complete the order
  • Purpose
    Newsletter and promotional communications
    Legal basis
    Consent (Art. 6(1)(a)), confirmed with one click in the verification email
    Retention
    Until you withdraw it: you can unsubscribe from any email. If you do not confirm your sign-up, the verification link expires after 7 days and, unless you have already bought from the website, we delete your address from our newsletter contacts 30 days after the request
  • Purpose
    Emails about products similar to ones you have already bought, only for purchases made on the site before 3 October 2026, when you could object immediately at the time of purchase
    Legal basis
    Legitimate interest (Art. 6(1)(f) GDPR and Art. 130(4) of the Italian Privacy Code)
    Retention
    Until you object, which you can do in any email
  • Purpose
    Reminders about an order you submitted but have not paid yet
    Legal basis
    Pre-contractual steps taken at your request (Art. 6.1.b) and legitimate interest in reminding you of an order you started (Art. 6.1.f)
    Retention
    Until the order is paid or cancelled; you can object using the link in every reminder
  • Purpose
    Reminders about a saved cart or samples received
    Legal basis
    Consent or, if you are already a customer, legitimate interest as above
    Retention
    Until you withdraw consent or object
  • Purpose
    Website and app usage statistics
    Legal basis
    Consent (Art. 6(1)(a) GDPR and Art. 122 of the Italian Privacy Code)
    Retention
    Browsing events: 90 days. Aggregated, anonymous statistics derived from them: up to 25 months
  • Purpose
    Technical monitoring and service improvement: anonymous counts of errors, of searches with no results, of requests rejected for exceeding limits, of app installs and opens (only the date of the last open stays on the device, key feelago_app_ping) and of sign-ups and orders by channel (website or app), without cookies or identifiers
    Legal basis
    Legitimate interest in keeping the website and apps working, secure and easy to use (Art. 6(1)(f))
    Retention
    Hourly counts: 35 days, then only anonymous daily totals for up to 25 months
  • Purpose
    Security and prevention of fraud and abuse (request limits, technical logs)
    Legal basis
    Legitimate interest (Art. 6(1)(f))
    Retention
    Rate-limit records: 24 hours. Technical log of emails sent: 90 days
  • Purpose
    Protecting some forms from automated programs (bots) with Cloudflare's anti-bot check (Turnstile): sign-in with a code, Pro application, sending a quote from the cart, the support form and chat, newsletter sign-up, launch waiting list and Feelago Pro waiting list
    Legal basis
    Legitimate interest in protecting the service and its users from abuse, spam and the automated sending of codes and messages (Art. 6(1)(f))
    Retention
    We do not keep the information collected for the check: our server only receives a single-use token, verifies it once with Cloudflare (together with your IP address) and discards it
  • Purpose
    Feelago Pro professional accounts: application, subscription, commissions with Stripe Connect
    Legal basis
    Performance of a contract (Art. 6(1)(b)); legal obligations, including anti-money-laundering checks handled with Stripe (Art. 6(1)(c))
    Retention
    For the whole relationship; accounting data for 10 years
  • Purpose
    Feelago Pro: activation and health indicators for the professional's account, to offer support and improve the service. Any action is assessed by a person and never decided automatically
    Legal basis
    Legitimate interest (Art. 6(1)(f)), with the right to object
    Retention
    Up to 24 months
  • Purpose
    Feelago Pro: online acceptance of the Feelago Pro Terms (account email, accepted version and fingerprint of the document, where and in which language, date and time, device and a non-reversible fingerprint of the IP address), as proof of the acceptance
    Legal basis
    Performance of a contract (Art. 6(1)(b)); legitimate interest in keeping proof of the acceptance and defending our rights (Art. 6(1)(f))
    Retention
    For the whole relationship and up to 10 years after it ends, even if the account is deleted
  • Purpose
    Feelago Pro: electronic signature of the contract, for professionals who signed it in the past (first and last name, email, image of the signature, date and time, verification of the code sent by email, device and a non-reversible fingerprint of the IP address) and storage of the signed PDF
    Legal basis
    Performance of a contract (Art. 6(1)(b)); legitimate interest in keeping proof of the agreement and defending our rights (Art. 6(1)(f))
    Retention
    For the whole relationship and up to 10 years after it ends, even if the account is deleted
  • Purpose
    Feelago Pro: inviting you to a studio's team, if the studio owner invites you, and giving you access to the studio's data with your personal account (email invitation, joining, role, what you can see, leaving) and making sure that the studio's clients' replies about the quotes and appointments you follow reach you
    Legal basis
    Performance of the relationship with the studio that invites you and of the Feelago Pro Terms you accept when joining the team (Art. 6(1)(b)); for an invitation not yet accepted, the studio's and our legitimate interest in having you join the team (Art. 6(1)(f))
    Retention
    Accepted invitation: kept together with your team membership. Invitation not accepted (expired or withdrawn): until 30 days after it expires; then we delete it or make it anonymous. Team membership: as long as you are on the team and then, as the studio's history (who did what, dates of joining and leaving), for as long as the studio's relationship with Feelago lasts
  • Purpose
    Defending our rights and responding to authorities
    Legal basis
    Legitimate interest (Art. 6(1)(f)) or legal obligation (Art. 6(1)(c))
    Retention
    For as long as the specific proceedings require
  • Purpose
    Letting you know when applications to Feelago Pro open, if you join its waiting list
    Legal basis
    Your request: consent (Art. 6(1)(a)), which you give by leaving your email to be notified
    Retention
    Until we tell you applications have opened, and in any case no longer than 12 months. You can ask to be removed from the list at any time by writing to customer service
  • Purpose
    Letting you know when Feelago opens for orders, if you join the launch waiting list
    Legal basis
    Your request: consent (Art. 6(1)(a)), which you give by leaving your email to be notified
    Retention
    Until we tell you we have opened, and in any case no longer than 12 months. You can ask to be removed from the list at any time by writing to customer service

Technical monitoring works even without consent to statistics because it uses no cookies and does not record who you are: the server only counts how many times something happens (for example a given error code in a given hour), without IP addresses, identifiers or browsing paths. In the app, only the date of the last open stays on the device: it is used to count opens once a day, never to identify you.

If you are a professional using Feelago Pro, we derive some activation and health indicators for your account from the service data, to understand where to offer help and what to improve. They are not automated decisions: they do not suspend the account, change commissions or terms, delay payments or reject applications. You can object at any time by writing to info@feelago.com.

Back to contents

5.Ago and our artificial intelligence tools

Ago is an assistant based on artificial intelligence, not a person: we say so in the chat too. It answers questions about products, measurements and orders. If you are signed in, it can read, without changing anything, a summary of your orders, returns and quotes to give you better answers. You can ask to speak to a person on our team at any time.

To generate its answers, your messages and, when you use the dedicated tool, photos of your rooms are sent to our artificial intelligence provider (Anthropic), which processes them on our behalf. Answers may contain inaccuracies: the prices, availability and terms that apply are always those shown on the site and in the order summary.

We may review conversations to improve Ago's answers and the quality of our support, on the basis of our legitimate interest (Article 6(1)(f) GDPR); conversations are kept for no longer than 24 months from the last message. You can object at any time: write to us and we will exclude yours.

We do not take decisions based solely on automated processing that produce legal effects concerning you or similarly significantly affect you (Article 22 GDPR).

Back to contents

6.Who we share data with

We do not sell your data. We share it only with providers that help us deliver the service, appointed as processors (Article 28 GDPR), and with parties that process it as independent controllers: the provider of the payment method you choose, Google for address suggestions and checks and, if you choose it, for sign-in with your Google account, and the other parties listed in the table or required by law.

  • Provider
    Render
    Service
    Hosting of the website, apps and database
    Where the data is processed
    European Union (Frankfurt, Germany); company based in the United States
  • Provider
    Cloudflare
    Service
    Content delivery and traffic protection; for statistics, only with your consent, it tells us the approximate location of the visit (country, region and city). Anti-bot check on some forms (Turnstile): it receives your IP address and technical information about your browser and device, such as the user agent and some signals from the browsing environment, and returns only the result to us; it does not use advertising cookies and is not used to profile you. Cloudflare also uses this information as an independent controller, to improve its own bot detection
    Where the data is processed
    European Union and United States
  • Provider
    Stripe
    Service
    Payments and fraud prevention; for professionals, Stripe Connect for commissions. For some processing (fraud prevention, regulatory obligations) Stripe acts as an independent controller
    Where the data is processed
    European Union and United States
  • Provider
    PayPal, Klarna, Satispay, Scalapay and Revolut (Revolut Pay)
    Service
    Payment with the method you choose on the payment page, including the provider's own checks and, for Klarna and Scalapay, the assessment of your request to pay later or in instalments. They receive the necessary data only if you choose their method, and process it as independent controllers under their own privacy policies
    Where the data is processed
    As stated in each provider's privacy policy
  • Provider
    Resend
    Service
    Sending emails
    Where the data is processed
    United States
  • Provider
    Anthropic
    Service
    Artificial intelligence behind Ago and photo analysis
    Where the data is processed
    United States
  • Provider
    Google (Google Ireland Limited and Google LLC)
    Service
    Address suggestions and checks (Google Maps Platform: Places API and Address Validation API). For suggestions it receives the characters you type in the address field and the selected country and language, and returns matching addresses. For checks it receives the full delivery address (street and house number, postal code, city, province or state and country) when you continue to payment, and when our staff check it before preparing the shipment; it returns the address as it knows it, with any corrections. Requests are sent from our servers: Google does not receive your name, your email, your phone number, the second address line (apartment, floor, c/o) or your IP address. It processes this data as an independent controller, under its own privacy policy
    Where the data is processed
    European Union and United States
  • Provider
    Google (Sign in with Google)
    Service
    Sign-in with your Google account, only on the website and only if you tap the "Sign in with Google" button on the sign-in pages or in the sign-in box at checkout. The button is our own: until you tap it, Google receives nothing. Tapping it takes you to Google's page, which receives your IP address and technical information about your browser; there you choose the account, and Google sends us your name, verified email address, an identifier of your Google account and, if there is one, your profile picture. Google processes this data as an independent controller, under its own privacy policy
    Where the data is processed
    European Union and United States
  • Provider
    Packlink and couriers
    Service
    Shipping labels, collection and delivery
    Where the data is processed
    European Union and, for shipments outside the EU, the destination country
  • Provider
    Twilio
    Service
    Sending sign-in codes by text message, when you choose your phone
    Where the data is processed
    United States
  • Provider
    Advisers and banks
    Service
    Accounting, tax and legal obligations, payments and refunds
    Where the data is processed
    Italy and European Union

For address suggestions and checks Google processes data as an independent controller: how it uses the data is explained in the Google Privacy Policy. Use of Google Maps features is also subject to the Google Maps/Google Earth Additional Terms of Service.

If you choose "Sign in with Google", Google processes the data of your Google account and of the sign-in as an independent controller: how it uses the data is explained in the Google Privacy Policy. You can disconnect Feelago at any time in your Google account settings: your Feelago account remains and you can always sign in with the email code. For the anti-bot check, how Cloudflare processes data is explained in Cloudflare's Turnstile privacy addendum.

If you are on the team of a Feelago Pro studio, the studio that invited you also sees the data about you and your email may be shown to its clients, as explained in the item "Team of a Feelago Pro studio" under "What data we process".

We disclose data to public authorities only when the law requires it. Feelago staff access data only as far as their work requires.

Back to contents

7.Transfers outside the European Economic Area

The website and database are hosted in the European Union, in Render's data centres in Frankfurt (Germany). Render is a company based in the United States: any access to the data from the United States takes place with the safeguards required by the GDPR (for example the European Commission's standard contractual clauses). Some of the other providers listed above also process data in the United States. Independent controllers, such as the payment providers (PayPal, Klarna, Satispay, Scalapay and Revolut) and Google for address suggestions and checks and for sign-in with Google, handle any transfers outside the European Economic Area under their own privacy policies.

These transfers rely on the European Commission's adequacy decision for providers certified under the EU-U.S. Data Privacy Framework, or on the standard contractual clauses approved by the Commission, together with any necessary supplementary measures. You can ask us for information or a copy of the safeguards in place by writing to info@feelago.com.

Back to contents

8.If you are a client of a professional who uses Feelago

Interior designers, architects and studios can use Feelago Pro to prepare quotes, moodboards, room surveys and appointments for their clients, including under their own brand.

For the data a professional collects and manages in their tools (contact details, appointments, notes, surveys), the professional is the controller and Feelago processes that data on their behalf as a processor. Within the studio, the team members authorised by the professional can also access your data, each with their own personal account. To exercise your rights, please contact the professional first; if you write to us, we will forward your request to them.

When you buy Feelago products through a professional's quote, the controller for the order, payment and delivery is Feelago, as for any other purchase.

If you arrive from a professional's invitation link and order fabric samples, we tell them that samples were ordered from their link: the project, the date and the fabrics chosen. We do not share your name, contact details, address or the amount paid. We do this on the basis of our legitimate interest in completing the journey the professional suggested to you; a technical cookie remembers the invitation for 7 days.

Back to contents

9.Your rights

At any time you can exercise the rights set out in Articles 15 to 22 GDPR:

  • access your data and receive information about how it is processed;
  • have inaccurate data corrected and incomplete data completed;
  • have your data erased, in the cases provided for by law;
  • restrict processing;
  • receive the data you gave us in a structured, machine-readable format (portability);
  • object to processing based on legitimate interest and, at any time and without giving reasons, to direct marketing, including for specific channels only;
  • withdraw your consent, without affecting processing carried out before the withdrawal;
  • lodge a complaint with the Italian data protection authority (Garante per la protezione dei dati personali) or with the authority of the country where you live or work.

To exercise them, write to info@feelago.com or use our contact form. We reply without undue delay and in any case within one month, which may be extended by two months for complex requests, in which case we will let you know. We may ask for some information to verify your identity.

If you ask us to delete your account, some data (for example invoices and order documents) is kept for the period required by law.

Back to contents

10.Minors

Feelago is intended for adults: you must be at least 18 to make a purchase. We do not knowingly collect data from children under 14, the minimum age in Italy for consenting to online services on one's own (Article 2-quinquies of the Italian Privacy Code).

Back to contents

11.How we protect data

We use encrypted connections (HTTPS), sign-in with one-time codes (or, if you choose it, with Google) instead of passwords, an anti-bot check on the forms most exposed to abuse, signed sessions that we can revoke, hard-to-guess personal links for order and quote pages, access limited to authorised staff and backups. No system is infallible: if a breach affecting you occurs, we will inform you in the cases and within the time limits set by law.

Back to contents

13.Changes to this notice

We update this notice when our services or the law change. The date of the current version is shown at the top; if the changes are significant, we will let you know on the site or by email.

Back to contents