Privacy Policy

Effective Date: June 2026

As a German company based in Munich, GDPR compliance and data protection are among our highest priorities. At Kleiders ("Company," "we," "us," or "our"), we respect your privacy and are committed to protecting it through strict adherence to this policy and the General Data Protection Regulation (GDPR). This document describes the types of information we may collect from you or that you may provide when you visit our platform, and our practices for collecting, using, maintaining, protecting, and disclosing that information.

1. Information We Collect

Personal & Account InformationWe collect personal information that you provide to us directly, such as your name, email address, postal address, and payment information when you register for an account or place an order.

Biometric & Fit DataCrucially for our bespoke services, we collect biometric measurements, fit preferences, and 3D body scans ("Fit Profile Data") necessary to facilitate custom garment creation with our partner Ateliers.

AI Generation HistoryWe log the text prompts, image inputs, and the resulting AI-generated fashion concepts created within the Design Studio `/studio`.

Automatically Collected Information (Cookies & Trackers)As you navigate through and interact with our platform, we use automated data collection technologies to collect certain information about your equipment, browsing actions, and patterns. Specifically, we use:

Google Tag Manager: Used to manage and deploy analytics and marketing tags on our website without modifying the core code.
Microsoft Clarity: Used to capture how you use and interact with our website through behavioral metrics, heatmaps, and session replay to improve our platform's user experience.

2. How We Use Your Information

To provide, maintain, and improve our Platform.
To process and route your bespoke orders to suitable Ateliers based on capacity and material inventory.
To understand user behavior and optimize our user interface via analytics.
To detect, prevent, and address technical issues or fraudulent activities.

3. Intellectual Property & AI Training

We understand that the fashion designs, sketches, and concepts you upload or generate on our platform represent sensitive Intellectual Property (IP).

No AI Training on Your IPWe do not use your personal designs, uploaded reference images, or generated bespoke concepts to train any foundational AI models. Your creative work remains solely yours.

Anonymized TelemetryAny data used internally to improve our service (such as system performance metrics or feature usage) is strictly anonymized and aggregated, completely stripped of your identity and your intellectual property.

4. Information Sharing with Ateliers

When you initiate an order or request a quote from an Atelier, your necessary physical measurements, design concepts, and preferred material choices are shared with that selected independent business. We do not share your full payment details (e.g., credit card numbers) with Ateliers; all transactions are securely processed through our central escrow system.

5. Data Security & Storage

We employ strict, enterprise-grade security measures to ensure your data is protected:

Data MinimizationWe strictly adhere to the principle of data minimization, meaning we only collect, process, and store the absolute minimum amount of personal data required to deliver our bespoke tailoring services.

Row Level Security (RLS)Our database infrastructure utilizes strict Row Level Security policies. This cryptographic-level safeguard ensures that users, and the application itself, can only query or access data that belongs explicitly to the authenticated user.

We implement reasonable security measures designed to protect your personal information, especially sensitive Biometric Data. However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security. You are responsible for keeping your account password secure.

6. Your Data Rights (GDPR)

Under the General Data Protection Regulation (GDPR) and other applicable privacy laws, you possess the following rights regarding your personal data:

Right to Access: You can request a copy of the personal data we hold about you.
Right to Rectification: You can request that we correct any inaccurate or incomplete personal data.
Right to Erasure (Right to be Forgotten): You have the right to request that we delete your account and all associated personal data from our systems.
Right to Data Portability: You can request to receive your data in a structured, commonly used, and machine-readable format.

You can manage many of these settings directly from your `/dashboard/settings`. To exercise any of these rights, including full account deletion, please contact our Data Protection Officer.

For privacy inquiries or to exercise your data rights, please contact our Data Protection Officer at privacy@kleiders.com