Privacy Notice

1. Who we are

Anchor Piece ("the Service") is operated by Anchor Piece ("we", "us"). For personal data you submit through the Service, Anchor Piece acts as the data controller. For payment-related personal data collected at checkout, our payment provider Paddle.com Market Limited acts as an independent controller and Merchant of Record — see Paddle's Privacy Notice.

2. Personal data we collect

• Account data — email address, hashed password (or OAuth identifier), sign-up date.
• Uploaded content — photos of clothing items or accessories that you upload, plus any free-text notes you provide.
• AI-generated content — outfit suggestions and generated images we produce in response to your uploads, and outfits you save to your closet.
• Usage and entitlement data — looks generated this period, pack credits, subscription status, closet usage.
• Technical data — IP address, browser/device identifiers, log data, and basic telemetry needed to operate and secure the Service.
• Support communications — messages you send us.

Payment card details, billing address, and tax-relevant information are collected directly by Paddle during checkout — we do not see or store full card numbers.

3. How we use your data and legal bases

• Providing the Service (account creation, generating outfits, saving closet items) — performance of our contract with you.
• Processing payments via Paddle and granting entitlements after a successful purchase — performance of our contract with you and our legal obligations.
• Securing the Service (fraud prevention, abuse detection, rate limiting) — our legitimate interests.
• Improving the Service (aggregated analytics on what works, debugging) — our legitimate interests, balanced against your rights.
• Customer support — performance of our contract with you.
• Communications about your account, purchases, and material changes to the Service — performance of our contract; for any optional marketing emails, your consent (which you can withdraw at any time).
• Legal compliance (tax, accounting, responding to lawful requests) — compliance with our legal obligations.

AI processing. Photos and notes you submit are sent to third-party AI model providers (currently the Lovable AI Gateway, which routes to Google Gemini and OpenAI models) solely to generate outfit suggestions and outfit images for you. We do not use your uploaded photos to train AI models.

4. Who we share data with

• Hosting and infrastructure providers (database, file storage, edge compute) acting as our processors.
• AI model providers (Google, OpenAI, via the Lovable AI Gateway) to produce outfit ideas and images on your request.
• Paddle.com Market Limited as the Merchant of Record for sales of the Service, subscription management, payment processing, tax compliance, invoicing, and refund handling.
• Professional advisers (legal, accounting) under appropriate confidentiality obligations.
• Authorities where required by law or to protect our rights, users, or the public.

We do not sell your personal data.

5. International transfers

Some of our processors and AI providers are located outside the UK/EEA, including in the United States. Where personal data is transferred outside your region, we rely on appropriate safeguards such as adequacy decisions or Standard Contractual Clauses (SCCs).

6. Retention

We retain account data and saved outfits for as long as your account is active. If you delete your account or remain inactive for an extended period, we will delete or anonymise your data within a reasonable period, except where a longer retention is required for legal, accounting, fraud-prevention, or dispute-resolution purposes (typically up to 7 years for transaction records held via Paddle). Uploaded photos are retained only as long as needed to provide and improve the Service and may be deleted earlier on request.

7. Your rights

Depending on your jurisdiction, you have the right to:

• access the personal data we hold about you;
• request correction of inaccurate data;
• request deletion of your data ("right to be forgotten");
• request restriction of processing;
• request data portability;
• object to processing based on our legitimate interests;
• withdraw consent at any time, where processing is based on consent;
• lodge a complaint with your local data-protection supervisory authority.

To exercise these rights, contact us via the support address listed on your receipt or through your account at paddle.net. We aim to respond within one (1) month.

8. Security

We implement appropriate technical and organisational measures to protect your data, including encryption in transit, access controls, isolated database row-level security, and least-privilege service credentials. No system is perfectly secure; we will notify you of any breach affecting your personal data as required by applicable law.

9. Cookies

We use only essential cookies and local storage required for sign-in, session management, and remembering your preferences. We do not use marketing or third-party advertising cookies. Paddle may set additional cookies during checkout, governed by its own privacy notice.

10. Children

The Service is not directed to children under 16. If you believe a child has provided us with personal data, contact us and we will delete it.

11. Changes

We may update this Privacy Notice from time to time. Material changes will be communicated via the Service or by email.

12. Contact

For privacy questions, contact Anchor Piece via the support address listed on your receipt or via paddle.net. See also our Terms of Service and Refund Policy.