Privacy Policy
Last updated: October 2026
Introduction
Sartorly ("we," "our," or "us") respects your privacy and is committed to protecting the personal information you share with us. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.
By using Sartorly, you agree to the collection and use of information in accordance with this policy.
Information We Collect
Account Information
When you create an account, we collect:
- Name and email address
- Company/business name
- Billing information (processed by Stripe, our payment provider)
- Password (stored in encrypted form)
Client Data
When you use our service for client consultations, you upload:
- Client photographs
- Client names and contact information (optional)
- Generated visualizations and lookbooks
Important: You are responsible for obtaining appropriate consent from your clients before uploading their photographs to our service.
Usage Data
We automatically collect:
- Log data (IP address, browser type, pages visited)
- Device information
- Usage patterns and analytics
- Cookies and similar tracking technologies
How We Use Your Information
We use the information we collect to:
- Provide, maintain, and improve our service
- Process transactions and send related information
- Send administrative notifications and updates
- Respond to customer service requests
- Monitor and analyze usage patterns
- Detect, prevent, and address technical issues
- Personalize and improve your experience
AI Processing and Client Photos
When you upload client photographs, AI models process them to generate visualizations. Here's how we handle this data:
- Photos are encrypted during upload and storage
- To generate previews, client photos, fabric images, and the descriptions of each look are sent to image, video, and text models run by OpenAI and Google (Gemini)
- We do not train AI models on your client photos. OpenAI and Google process them under their own API terms
- Photos and visualizations are stored only as long as needed for your account
- You can delete client data at any time from your account
Data Sharing and Disclosure
We do not sell, trade, or rent your personal information. We may share information only in these limited circumstances:
- Service Providers: With the vendors who operate parts of our service:
- OpenAI and Google (Gemini): the AI models that receive client photos, fabric images, and look descriptions to generate previews
- Google Cloud and Firebase: hosting, database, file storage, and sign-in
- Stripe: subscription payments and billing
- Resend: the emails we send (sign-in links, invitations, lookbooks, and billing notices)
- Google Calendar and Google Meet: demo calls you book with us
- Google Analytics: usage analytics
- Sentry: error monitoring
- Legal Requirements: When required by law or to protect our rights
- Business Transfers: In connection with a merger, acquisition, or sale of assets
- With Your Consent: For any other purpose with your explicit consent
Data Security
We implement appropriate security measures to protect your information:
- TLS 1.3 encryption for data in transit
- AES-256 encryption for data at rest
- Access controls and authentication requirements
- Secure infrastructure hosted on Google Cloud Platform
While we strive to protect your information, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.
Data Retention
We retain your information for as long as your account is active or as needed to provide services. You can request deletion of your data at any time by contacting us.
When you delete data or close your account, we will delete or anonymize your information within 30 days, except where we are required to retain it for legal purposes.
Your Rights
Depending on your location, you may have the right to:
- Access the personal information we hold about you
- Request correction of inaccurate information
- Request deletion of your information
- Object to or restrict certain processing
- Data portability (receive your data in a structured format)
- Withdraw consent where processing is based on consent
To exercise these rights, contact us at support@sartorly.com.
International Data Transfers
Our service is operated from the United States. If you are accessing our service from outside the US, your information may be transferred to, stored, and processed in the US or other countries where our service providers operate.
We ensure appropriate safeguards are in place for international transfers in compliance with applicable data protection laws.
Children's Privacy
Our service is not directed to individuals under 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date.
We encourage you to review this Privacy Policy periodically for any changes.
Contact Us
If you have questions about this Privacy Policy or our data practices, please contact us:
- Email: support@sartorly.com