Privacy Policy

1. Introduction

Clotz ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the Clotz platform ("Service"), an AI-powered creative platform for fashion brands.

By accessing or using the Service, you consent to the data practices described in this Privacy Policy. If you do not agree with the practices described herein, please do not use the Service.

2. Information We Collect

2.1 Account Information

When you create an account, we collect information provided through our third-party authentication provider, which may include:

• Name and email address
• Profile picture
• Authentication identifiers

2.2 Brand and Business Information

To provide our services, we collect brand-related information you provide, including:

• Brand name, description, and identity details
• Style preferences and target audience information
• Color palettes, fonts, and visual guidelines
• Social media account connections and credentials

2.3 Uploaded Content

We collect and store content you upload to the Service, including:

• Product images and wardrobe items
• Model reference photos
• Moodboard images and creative assets
• Location and background references

2.4 Generated Content

We store AI-generated content created through your use of the Service, including generated photoshoot images, model variations, and creative compositions.

2.5 Usage Data

We automatically collect certain information when you use the Service, including:

• Device information (browser type, operating system, device type)
• Log data (IP address, access times, pages viewed)
• Feature usage patterns and generation history
• Credit consumption and billing history

2.6 Payment Information

Payment processing is handled by our third-party payment provider. We do not directly store your complete credit card numbers or financial account information. We may receive and store limited billing information such as the last four digits of your card, billing address, and transaction history.

3. How We Use Your Information

We use the information we collect for the following purposes:

• Service Delivery: To provide, maintain, and improve the Service, including AI content generation, brand management, and content publishing features
• AI Processing: To process your inputs (images, prompts, preferences) through our AI models to generate content on your behalf
• Account Management: To manage your account, process payments, and provide customer support
• Communications: To send you service-related notifications, updates, and promotional communications (which you may opt out of)
• Analytics: To understand how the Service is used and to improve our products and features
• Security: To detect, prevent, and address fraud, abuse, and security issues
• Legal Compliance: To comply with applicable laws, regulations, and legal processes

4. AI Processing and Generated Content

When you use our AI generation features, your inputs (including uploaded images, text prompts, and style preferences) are processed by AI models to generate content. You should understand that:

• Your uploaded images and prompts are sent to third-party AI model providers for processing
• We do not use your uploaded content or generated output to train our own or third-party AI models without your explicit consent
• Generated content is stored in your account and is accessible only to you unless you choose to share or publish it
• AI processing metadata (such as generation parameters and prompt details) may be retained for service improvement and debugging purposes
• You can delete your generated content at any time through the Service

5. Data Sharing and Third-Party Services

We share your information with third parties only in the following circumstances:

5.1 Service Providers

• Authentication: We use Clerk for user authentication and account management
• Payments: We use Stripe for payment processing and subscription management
• AI Providers: We use third-party AI model providers for content generation
• Cloud Storage: We use cloud infrastructure providers to store your content and data
• Analytics: We may use analytics services to understand Service usage

5.2 Social Media Platforms

When you connect social media accounts (such as Instagram or Pinterest) and use our publishing features, your content and relevant account information are shared with those platforms in accordance with their terms and your authorization.

5.3 Legal Requirements

We may disclose your information if required to do so by law or in response to valid legal processes, such as a court order, subpoena, or government request.

5.4 Business Transfers

In the event of a merger, acquisition, reorganization, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change and any choices you may have regarding your information.

6. Data Storage and Security

We implement industry-standard technical and organizational security measures to protect your information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit (TLS/SSL) and at rest
• Regular security assessments and monitoring
• Access controls and authentication mechanisms
• Secure cloud infrastructure with data redundancy

While we strive to protect your information, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security of your data.

7. Your Rights

Depending on your location and applicable data protection laws (including the GDPR and CCPA), you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you
• Rectification: Request correction of inaccurate or incomplete personal data
• Deletion: Request deletion of your personal data, subject to certain exceptions
• Portability: Request a copy of your data in a structured, machine-readable format
• Objection: Object to certain processing of your personal data
• Restriction: Request restriction of processing of your personal data
• Withdrawal of Consent: Withdraw your consent at any time where processing is based on consent

To exercise any of these rights, please contact us at privacy@clotz.ai. We will respond to your request within the timeframe required by applicable law.

California Residents (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act, including the right to know what personal information we collect, the right to request deletion, and the right to opt out of the sale of personal information. We do not sell your personal information.

8. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to operate and improve the Service. These include:

• Essential Cookies: Required for the Service to function, including authentication session cookies and language preference cookies (e.g., locale settings)
• Analytics Cookies: Used to understand how you interact with the Service and to improve our features
• Preference Cookies: Used to remember your settings and preferences, such as theme and language selection

You can manage cookie preferences through your browser settings. Disabling essential cookies may affect the functionality of the Service.

9. Children's Privacy

The Service is not directed at individuals under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal information from a child under 16, we will take steps to promptly delete that information. If you believe that a child under 16 has provided us with personal information, please contact us at privacy@clotz.ai.

10. International Data Transfers

Your information may be transferred to, stored, and processed in countries other than the country in which you reside. These countries may have data protection laws that differ from the laws of your country. By using the Service, you consent to the transfer of your information to these countries.

Where required by applicable law, we implement appropriate safeguards for international data transfers, such as Standard Contractual Clauses approved by the European Commission or other legally recognized transfer mechanisms.

11. Data Retention

We retain your personal data for as long as your account is active or as needed to provide the Service. We may also retain certain information as required by law or for legitimate business purposes, such as resolving disputes, enforcing our agreements, and complying with legal obligations.

Upon account deletion, we will delete or anonymize your personal data within a reasonable timeframe, except where retention is required by law. Generated content and uploaded assets associated with your account will be permanently deleted.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on the Service and updating the "Last Updated" date. Your continued use of the Service after any changes constitutes your acceptance of the revised Privacy Policy. We encourage you to review this policy periodically.

13. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

Email: privacy@clotz.ai

For data protection inquiries in the European Union, you may also contact your local data protection authority.