Privacy Policy

FitTo ("we," "our," or "us") provides an AI-powered fashion catalog generator that enables companies to upload product designs, create AI models, generate virtual try-on images, and build PDF catalogs. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our services at https://www.fitto.fun or through our application.

1. Information We Collect

We collect information you provide directly, information collected automatically, and information from third-party sources.

• Account information: Email address, name, company name, and password when you register or update your account.
• Product & design data: Garment photos, product images, flat-lay or mannequin photos you upload for virtual try-on and catalog generation.
• AI model data: Model attributes (gender, ethnicity, body type, pose) and generated model images you create in FitTo.
• Brand & catalog data: Company logos, brand aesthetics, style notes, and catalog configurations.
• Usage & technical data: IP address, browser type, device information, and usage patterns (pages visited, features used) to improve our services.

2. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain our services
• Process your garment and product images for AI virtual try-on and model generation
• Generate PDF catalogs with your branding
• Authenticate your identity and manage your account
• Send transactional emails (order confirmations, password resets) and service-related notifications
• Improve our AI models, algorithms, and user experience
• Detect and prevent fraud, abuse, or security incidents
• Comply with legal obligations and enforce our terms

3. Data Storage

Your data is stored on secure infrastructure. Account and relational data are stored in Supabase Postgres (hosted database). Product images, AI model images, and generated try-on images are stored on Supabase Storage. We retain your data for as long as your account is active or as needed to provide our services and comply with legal obligations.

4. Data Sharing & Disclosure

We do not sell your personal information. We may share your data:

• With service providers: Third parties that help us operate our services (see Section 5).
• For legal reasons: When required by law, court order, or to protect our rights, safety, or property.
• In business transfers: In connection with a merger, acquisition, or sale of assets, with appropriate data protection commitments.
• With your consent: When you explicitly authorize us to share your information.

5. Third-Party Services

FitTo relies on the following third-party services that process your data:

• Supabase: Authentication, database hosting, and file storage. Your account data, metadata, and uploaded images are stored securely.
• FASHN AI API: Virtual try-on and AI model generation. Product and model images are sent to FASHN for processing to produce try-on results.
• Resend: Transactional email delivery (welcome emails, password resets, notifications).

Each provider has its own privacy policy and data processing agreements. We select providers that meet our security and privacy standards.

6. Cookies & Similar Technologies

We use cookies and similar technologies to maintain your session, remember your preferences, and analyze how you use our application. Session cookies are essential for authentication and are required to use FitTo. We may also use analytics cookies to improve our services. You can control cookie preferences through your browser settings, though disabling certain cookies may limit functionality.

7. Your Rights (GDPR, CCPA & More)

Depending on your location, you may have the following rights:

• Access: Request a copy of the personal data we hold about you.
• Rectification: Correct inaccurate or incomplete data.
• Erasure: Request deletion of your personal data (subject to legal and contractual exceptions).
• Restriction: Request that we limit how we process your data.
• Portability: Receive your data in a portable format.
• Objection: Object to processing based on our legitimate interests.
• Withdraw consent: Where processing is based on consent, withdraw it at any time.
• Opt out of sale (CCPA): We do not sell personal information. California residents may have additional rights under the CCPA.

To exercise these rights, contact us at +91-9403832212. We will respond within the timeframe required by applicable law. You also have the right to lodge a complaint with your local data protection authority.

8. Data Retention

We retain your data for as long as your account is active and as needed to provide our services. After account closure, we may retain certain data for a limited period to comply with legal obligations, resolve disputes, enforce agreements, and support our legitimate business interests. Aggregated or anonymized data may be retained indefinitely for analytics and product improvement.

9. Security

We implement technical and organizational measures to protect your data, including encryption in transit (TLS) and at rest, access controls, secure authentication, and regular security assessments. While we strive to protect your personal information, no method of transmission over the internet or electronic storage is 100% secure. We encourage you to use strong passwords and keep your account credentials confidential.

10. Children's Privacy

FitTo is a business-to-business (B2B) service intended for companies and professionals. We do not knowingly collect personal information from anyone under 16 years of age. If you believe we have inadvertently collected such information, please contact us at +91-9403832212 and we will promptly delete it.

11. International Transfers

Your data may be processed and stored in countries other than your own. We ensure appropriate safeguards (such as Standard Contractual Clauses or equivalent mechanisms) are in place when transferring data internationally to comply with applicable data protection laws.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date. For significant changes, we may also notify you via email or a prominent notice in the application. We encourage you to review this policy periodically.

13. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us: