Cuttoshape

Cuttoshape Privacy Policy

Effective Date: Oct 6, 2026

At Cuttoshape Afrowears LLC ("Cuttoshape," "we," "us," or "our"), we are committed to protecting the privacy, confidentiality, and security of everyone who uses Cuttoshape — our digital business management platform for fashion designers, tailors, fashion houses, fashion entrepreneurs, and their customers.

This Privacy Policy explains how we collect, use, store, share, and protect information when you use the Cuttoshape platform, including our website (www.cuttoshape.com), our Studio web application, our Studio mobile application, and our Fit App (our AI-enabled, contactless body measurement application) — together, the "Platform."

This Privacy Policy is part of, and incorporated into, our Terms of Service. Where a subject is not addressed here, it may be addressed there. By using the Platform, you agree to the practices described in this Privacy Policy. If you do not agree, please do not use the Platform. This Privacy Policy applies regardless of whether you access the Platform via our website, our mobile application(s) on the Apple App Store or Google Play Store, or our web applications.

1. Information We Collect

We collect information necessary to deliver, operate, secure, and improve Cuttoshape. This includes the following categories:

a. Account and Personal Information

When you create an account, we may collect:

  • Full name
  • Business or brand name and profile details
  • Email address
  • Phone number
  • Physical or business address
  • Date of birth or age (for eligibility verification)
  • Login credentials (securely encrypted)
  • Gender

b. Customer and Client Data (Designer-Managed Data)

Cuttoshape enables designers, tailors, and business users to store and manage information about their own customers, including:

  • Customer names and contact details
  • Order history
  • Design preferences
  • Communication records
  • Customer body measurements collected on the designer's behalf

This data is provided and controlled by the designer or business user and is used solely to support that user's business operations. See Section 6 ("Data Ownership and Responsibility") for more on how this data is handled.

c. Body Measurement and Image Data (Fit App)

Our Fit App uses a smartphone, tablet, or other device with a monocular camera to estimate a user's body measurements. When you use the Fit App, we collect:

  • A photo and of your body, provided voluntarily for the purpose of generating measurements;
  • Height, weight, age, and gender, entered by the user;
  • Computed measurements such as bust/chest, waist, hips, shoulder width, inseam, and other garment-related dimensions.

We do not process any imagery above the mid-neck for measurement purposes — we do not collect or analyze facial measurements or facial recognition data.

This data is collected strictly to support garment fitting, order fulfillment, styling recommendations, and tailoring accuracy, and is used and retained as described in Sections 4 and 8 below.

d. Usage and Technical Data

We automatically collect certain information about how you interact with the Platform, including:

  • Pages and features viewed and used
  • Time spent on the Platform
  • Device type, browser type, and operating system
  • IP address, unique device identifiers, and mobile network information
  • Log files and diagnostic data

e. Payment and Transaction Information

If you subscribe to a paid plan or process transactions through Cuttoshape, your payment details are processed securely through In-app Payment and/or third-party payment processors (for other devices). We do not store full credit card or bank account details on our own servers.

2. How We Collect Information

We collect the information described above in the following ways:

  • Directly from you, when you voluntarily use our services — registering an account, entering profile details, using the Fit App, contacting support, or communicating with us by email or social media. By using the Platform, you consent to our collection of this information.
  • Automatically, through cookies, web beacons, and similar analytics technologies, as described in Section 3 below.
  • From designer/business users, where a designer or business enters information about their own customers into the Platform on that customer's behalf.

3. Cookies and Browser Storage

We use essential cookies and similar technologies to operate our website and public storefronts and to remember your choices. We also use cookies and analytics tools to understand how users use our services (including browser type, language, access times, and location) and to improve the Platform.

You can manage or disable cookies at any time:

  • Through your browser settings (most browsers accept cookies by default; you can change this in your browser's settings/support articles); or
  • By selecting "Manage Cookies" in the website or storefront footer.

If you decline cookies, you may not be able to sign in, customize, or use certain interactive features of the Platform.

4. How We Use Your Information

We use the information we collect for the following purposes:

a. Platform Operation and Service Delivery

  • To provide core features: customer management, measurement storage, order tracking, pricing tools, invoicing, and analytics;
  • To generate estimated body measurements and support accurate garment fitting and order fulfillment through the Fit App;
  • To allow users to access, review, and manage the information stored in their account.

b. Platform Improvement and Research & Development

  • To analyze usage patterns and improve system performance, features, and the accuracy of our measurement technology;
  • To develop new features, tools, and integrations. Our employees and authorized personnel may access measurement data for these research and development purposes, subject to confidentiality obligations described in Section 5.

c. Communication

  • To send service-related notifications, updates, and account information;
  • To share product updates, feature announcements, or relevant offers, with the ability to opt out at any time (see Section 7).

d. Aggregated and De-Identified Data

We may create "aggregated" or de-identified information from the data we collect (for example, anonymized measurement, size, and shape trends across many users) that cannot reasonably be used to identify a specific individual. We may use this aggregated data to improve our services, understand relationships between body shapes and style preferences, and for research purposes, and we may share this aggregated, non-personal data with business partners.

e. Legal and Compliance

  • To comply with applicable laws, regulations, and legal process, including responding to lawful requests from government or regulatory authorities;
  • To enforce our Terms of Service, investigate potential violations, prevent fraud, and protect the security, rights, and property of Cuttoshape, our users, and the public.

f. Business Transfers

We may share information in connection with, or during negotiation of, a merger, acquisition, reorganization, sale of assets, financing, or similar transaction, in which personal information may be among the assets transferred, subject to the terms of this Privacy Policy.

5. Data Storage, Security, and Our Cloud Infrastructure Partner

a. Where Your Data Is Stored

All data submitted to Cuttoshape — including account information, customer/business data, images, and measurements collected through the Fit App — is processed and stored using Amazon Web Services (AWS), our approved and authorized cloud infrastructure partner. We are at liberty to change our cloud computing provider in the future; if we do, your information will be transferred and stored on our new provider's infrastructure, and continued use of the Platform after such a change constitutes your consent to it.

Data you provide is encrypted before transfer to AWS Cloud, and decrypted only once securely received. By using our services, you consent to your personal data — including images collected via the Fit App — being hosted and stored on AWS (or any successor cloud provider we may adopt).

b. Security Measures

We take data protection seriously and implement industry-standard safeguards, including:

  • Encryption of sensitive data at rest and in transit (including measurements, images, and login credentials), such as Secure Sockets Layer (SSL) encryption;
  • Secure cloud infrastructure with multi-layer security controls;
  • Role-based access controls, so that only personnel who need access to specific personal information to perform their job are granted it;
  • Multi-factor authentication (MFA) for systems that access user data;
  • Regular system monitoring, security reviews, and software updates; and
  • Staff training on data privacy, confidentiality, and security practices.

In the event of a security breach, access to affected systems is disabled and services are halted until multi-layer access credentials are reset and the issue is resolved.

c. No Absolute Guarantee

Despite these measures, no method of electronic transmission or storage is 100% secure. We cannot guarantee that information transmitted to or stored on the Platform will be completely free from unauthorized access, hacking, or security breach. By using the Platform, you acknowledge this inherent risk. You are encouraged to safeguard your own login credentials and notify us immediately at info@cuttoshape.com of any suspected unauthorized access.

6. Data Ownership and Responsibility

  • Designers and business users retain ownership of the customer data they store within Cuttoshape.
  • Cuttoshape acts as a data processor/service provider, providing the infrastructure and tools that designers and business users use to manage their own customer data.
  • We do not use designer-owned customer data for unrelated commercial purposes.
  • Designer/business users are responsible for obtaining any consents needed from their own customers to collect and store that customer's data on the Platform, and for complying with data protection laws applicable to their business.
  • We do not distribute personal information collected through the Platform to unauthorized third parties, except as described in this Privacy Policy.

7. Your Rights and Choices

Depending on your jurisdiction, you may have some or all of the following rights:

a. Access and Correction

You may view, update, or correct your personal information at any time through your account settings, or by emailing us at info@cuttoshape.com.

b. Deletion (Right to Erasure)

You may request deletion of your account and/or personal data by contacting us at info@cuttoshape.com. We will make best efforts to respond to deletion requests within 60 days. Note that deleting your account does not automatically delete all associated data instantly — we may retain certain data as necessary to comply with legal, accounting, tax, dispute-resolution, or contractual obligations, consistent with Section 8 below.

c. Data Portability

You may request a copy of your personal data in a structured, commonly used, machine-readable format, and request that we transmit it to another provider where technically feasible.

d. Right to Object

You may object, on grounds relating to your particular situation, to our processing of your personal data, including for direct marketing purposes. Where you object to processing for direct marketing, we will stop such processing.

e. Marketing Opt-Out

You may unsubscribe from promotional communications at any time by using the "unsubscribe" link in our emails or by contacting us directly. We may still contact you regarding transactional or service-related matters (such as order or account updates) even if you opt out of marketing communications.

f. Verification

To protect your data, we may ask you to verify your identity before fulfilling a rights request. We aim to respond to verified requests within 30 days.

To exercise any of these rights, contact us using the details in Section 12.

8. Data Retention

We retain personal and business data only for as long as necessary to:

  • Provide our services to you;
  • Meet legal, tax, accounting, or regulatory obligations; and
  • Resolve disputes and enforce our agreements.

Fit App images and measurement data are retained in our secure database for a period of ten (10) years from the date of capture, after which they are automatically deleted, unless you request earlier deletion (see Section 7) or we are legally required to retain the data longer. If you continue using the Fit App after this 10-year period, new measurement data collected will be subject to a fresh 10-year retention period.

If you delete your account, this does not automatically delete your data immediately — data may continue to be retained for the periods described above, or as otherwise required to comply with law. Data may also be anonymized rather than deleted once it is no longer needed to identify you.

9. Sharing of Information

We do not sell your personal information. We may share information as follows:

  • With our cloud infrastructure partner (AWS), as described in Section 5, to host and store data;
  • With service providers who perform functions on our behalf (e.g., payment processing, analytics, customer communications), who are contractually bound to keep such information confidential and to use it only for the purposes we authorize;
  • With designer/business users, where you are a customer of a designer or tailor using Cuttoshape — your relevant order, measurement, and contact information is shared with that designer/business to fulfill your order;
  • For legal reasons, where required by law, legal process, or governmental request, or where we believe in good faith that disclosure is necessary to protect our rights, property, or safety, or that of our users or the public;
  • In connection with a business transfer, as described in Section 4(f); and
  • With your consent, or as otherwise disclosed at the time information is collected.

We do not share location data with third parties without your explicit consent, except where required by law.

10. Location Data

Cuttoshape may collect limited location data to enhance Platform functionality, such as:

  • Connecting designers with nearby customers (where applicable); and
  • Supporting order delivery, logistics, or service coordination.

Location data is only accessed when required for legitimate business operations (e.g., order fulfillment), and a designer only gains access to a customer's location data after that customer initiates or confirms an order. You may enable or disable location services through your device or application settings; disabling location services may limit certain features but will not restrict core functionality.

11. Children's Privacy and Age Requirements

11.1 Minimum Age

The lowest age at which a person may create a profile or account on any part of the Platform — including our website, Studio web app, Studio mobile app, and Fit App — is 13 years old, and this floor applies globally, wherever you access the Platform. We do not knowingly collect personal information, images, or measurements from anyone under the age of 13.

11.2 Users Under 18

Consistent with our Terms of Service, any user between the ages of 13 and 17 may only use the Platform, including the Fit App, under the supervision of — and with the verifiable consent of — a parent or legal guardian. That parent or legal guardian must review and agree to this Privacy Policy and our Terms of Service on the minor's behalf before the minor submits any personal information, photos, or measurements.

11.3 If We Learn of Underage Use

If we learn that we have collected personal information from a user under the age of 13, or from a minor user aged 13–17 without appropriate verifiable parental or guardian consent, we will take steps to delete that information as soon as reasonably possible, unless we are legally obligated to retain it. If you believe a minor has provided us with personal information in violation of this Policy, please contact us immediately at info@cuttoshape.com.

11.4 Global Design and Jurisdictional Variation

Because Cuttoshape is used worldwide, we do not rely on a single country's children's-privacy law. The age rules in this Section 11 are designed to meet or exceed the strictest standard among the frameworks we are aware of, including the U.S. Children's Online Privacy Protection Act (COPPA), the EU/UK General Data Protection Regulation (GDPR, which permits member states to set a child's consent age between 13 and 16), Nigeria's Data Protection Act (NDPA), and Brazil's LGPD (each of which treats anyone under 18 as a child requiring parental or guardian consent). If the law of your country or region requires a higher age of consent than described here, that higher standard governs.

12. Third-Party Links and Social Sign-In

Our website, mobile applications, and/or emails may contain links to third-party websites. These third-party sites are governed by their own privacy policies, and we are not responsible for their content or privacy practices. If you choose to sign in using a social media account (e.g., Facebook, Google), your login is routed through that platform's own login system; we do not receive your social media password, and are not privy to information you share directly with that platform.

13. Jurisdiction-Specific Rights

This Section 13 describes additional, region-specific rights that may apply to you. Our baseline age-of-consent protections, described in Section 11, are designed to apply globally and to meet or exceed each of the region-specific standards below.

  • California: We aim to comply with the California Online Privacy Protection Act (CalOPPA) and applicable California privacy laws to the extent they apply to us. We do not currently respond to browser "Do Not Track" signals.
  • European Economic Area / UK (GDPR): Where applicable, we aim to process personal data consistently with the principles of the General Data Protection Regulation (GDPR), including the rights described in Section 7. GDPR Article 8 lets member states set a child's own consent age between 13 and 16; our global requirement of parental or guardian consent for all users under 18 (Section 11) is designed to meet or exceed that range.
  • Nigeria: Nigeria's Data Protection Act (NDPA) defines a "child" as anyone under 18 and requires parental or guardian consent before processing a child's data. Our global age policy in Section 11 already requires verifiable parental or guardian consent for every user under 18, regardless of location, so our baseline protections are designed to meet this standard.

If you have questions about our compliance in your jurisdiction, please contact us using the details in Section 15.

14. Changes to This Privacy Policy

Because our Platform is continuously developing, we may update this Privacy Policy from time to time to reflect new features, legal requirements, or operational changes. Updates will be posted on the Platform. Except where a more prominent notice is required by law, we have no obligation to individually notify you of changes, and your continued use of the Platform after changes are posted is deemed acceptance of the revised Policy. We recommend checking this page periodically. Changes become effective 24 hours after posting, unless stated otherwise.

15. How to Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices — including to exercise any of the rights described in Section 7 — please contact us:

Cuttoshape Afrowears

Email: info@cuttoshape.com

Website: www.cuttoshape.com