Privacy Policy

Fitora is a web-based wardrobe organisation tool based in Singapore. References to "we", "us", or "our" refer to Fitora.

Contact: support@fitora.app

• Account data: email address, username, optional profile picture when you register
• Profile data: bio, cover photo, display preferences you choose to set
• Wardrobe data: URLs and images of products you choose to import, names, prices, notes you add
• Usage data: pages visited, features used, scrape history for rate limiting purposes only
• Payment data: handled entirely by Stripe — we never store card details. We store your Stripe customer ID and subscription status only.
• Technical data: IP address (hashed, never stored in plain text), browser type, device type

• To provide and operate the Fitora service
• To process payments via Stripe
• To enforce usage limits and prevent abuse
• To send transactional emails (account, billing)
• To improve the service based on aggregate usage

• We do not sell your personal data to third parties
• We do not share your data with advertisers or data brokers
• We do not use your wardrobe data to train AI models without your explicit consent
• We do not read or monitor private messages — Fitora does not provide a messaging service

We process your personal data on the following bases:

• Contract: to provide the Fitora service you sign up for, including account management and wardrobe features
• Service delivery: to prevent abuse, enforce rate limits, maintain security, and improve the service using aggregated analytics
• Consent: where you choose to make your profile or collections public, or where required for optional communications
• Legal obligation: to keep billing records and comply with applicable law

We use trusted third-party services to operate Fitora. These providers process data on our behalf and only as needed to deliver the service:

• Supabase — authentication, database, and file storage for profile images and uploaded content
• Stripe — payment processing and subscription management
• Vercel — website hosting and anonymous analytics

Each provider has its own privacy policy governing how they handle data. We do not authorise them to use your data for their own marketing purposes.

Some of our service providers may process data outside Singapore. Where this occurs, we ensure appropriate safeguards are in place so your data remains protected in accordance with applicable data protection law.

• Account and wardrobe data: retained while your account is active and deleted when your account is deleted
• Scrape and preview usage logs: retained for a limited period for rate limiting and abuse prevention, then deleted or anonymised
• Billing records: retained as required by applicable tax and accounting law

Depending on where you live, you may have the right to access, correct, delete, or restrict processing of your personal data, and to data portability where applicable.

To exercise any of these rights, contact us at support@fitora.app. We will respond within a reasonable timeframe.

If you are in Singapore, you may also lodge a complaint with the Personal Data Protection Commission (PDPC) at pdpc.gov.sg.

We use industry-standard measures to protect your data, including encryption in transit (HTTPS), access controls, and hashed IP addresses for rate limiting (we never store plain-text IP addresses). No method of transmission over the internet is 100% secure, but we work to protect your information using appropriate technical and organisational safeguards.

Fitora is not directed at children under 13. We do not knowingly collect personal data from anyone under 13. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. Continued use of Fitora after changes take effect constitutes acceptance of the updated policy.

For any privacy-related questions, contact us at support@fitora.app.