Privacy Policy

ShopToMatch is operated by First Commit LLC ("we," "our," or "us"). We are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and website (collectively, the "Service").

1. Information We Collect

We collect information you provide directly and information generated through your use of the Service:

• Account Information: When you create an account, we collect your name, email address, and authentication credentials. If you sign in with Google or Apple, we receive your name and email from those providers.
• Uploaded Images: When you use our matching feature, you upload photos of clothing items. These images are stored securely to generate outfit recommendations.
• Style Preferences: Your saved closet items, favorited products, and match history help us understand your style.
• Usage Data: We collect information about how you interact with the Service, including pages visited, features used, and actions taken.
• Device Information: We may collect device type, operating system, and unique device identifiers.
• Payment Information: When you subscribe to our premium plan, payment details are processed by our payment partners (Stripe, Apple, or Google). We do not store your full payment card details.

2. How We Use Your Information

We use the information we collect to:

• Generate AI-powered outfit matches and product recommendations
• Personalize your experience based on your style preferences and history
• Manage your account and provide customer support
• Process subscriptions and payments
• Send transactional emails (account verification, password resets, receipts)
• Analyze usage patterns to improve the Service (via anonymized analytics)
• Detect and prevent fraud, abuse, and security incidents

3. Information Sharing

We do not sell your personal information. We share information only in the following circumstances:

• Affiliate Partners: When you click on product links, our affiliate partners (retailers) receive click and referral data. They do not receive your personal information such as your name or email address.
• Service Providers: We use third-party services to operate the platform (see Section 7). These providers process data on our behalf under strict contractual obligations.
• Legal Requirements: We may disclose information if required by law, regulation, or legal process.

4. Data Retention

Uploaded images are stored in our secure cloud storage (Vercel Blob) for as long as your account is active or as needed to provide the Service. Account data is stored in our database and retained until you delete your account.

When you delete your account, we remove your personal information and uploaded images within 30 days. Some anonymized, aggregated data may be retained for analytics purposes.

5. Your Rights

You have the right to:

• Access: Request a copy of the personal data we hold about you.
• Delete: Delete your account and all associated data at any time from your profile settings.
• Export: Request an export of your data in a portable format.
• Opt Out: Unsubscribe from marketing communications at any time via the link in any email.
• Correct: Update inaccurate personal information through your account settings.

To exercise any of these rights, contact us at hello@shoptomatch.com.

6. Cookies & Tracking

We use the following cookies and similar technologies:

• Session Cookies: Essential for keeping you signed in and maintaining your session.
• Analytics (PostHog): We use PostHog to understand how users interact with the Service. PostHog collects anonymized usage data to help us improve the experience.

We do not use advertising cookies or sell data to ad networks.

7. Third-Party Services

We rely on the following third-party services to operate the platform:

• Stripe: Payment processing for web subscriptions.
• Apple & Google: In-app purchase processing for mobile subscriptions.
• AWS SES: Transactional email delivery.
• PostHog: Product analytics.
• Sentry: Error tracking and performance monitoring.
• Vercel: Hosting, image storage, and infrastructure.

Each provider has its own privacy policy governing the data they process.

8. Children's Privacy

ShopToMatch is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we learn that we have collected data from a child under 13, we will delete that information promptly. If you believe a child under 13 has provided us with personal data, please contact us at hello@shoptomatch.com.

9. Data Security

We implement industry-standard security measures to protect your information, including encryption in transit (TLS) and at rest. However, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date. Your continued use of the Service after changes constitutes acceptance of the revised policy.

11. Consent Records

When you grant or withdraw consent for marketing communications — at signup, in your profile settings, or by clicking an unsubscribe link — we keep a record of that action. Each record includes:

• Whether you granted or withdrew consent
• The method (signup, profile setting, unsubscribe link)
• Your IP address and browser/device information at the time of the action
• The version of the consent language you saw
• The timestamp

We keep these records to comply with marketing communications laws, including the EU GDPR (Article 7) and the U.S. CAN-SPAM Act, which require us to be able to demonstrate that consent was given freely and informed. Records are retained for the lifetime of your account and for three (3) years after your account is deleted or your last consent withdrawal, whichever is later. After that period they are removed.

You can request a copy of your consent history at any time by emailing hello@shoptomatch.com.

12. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us at: