Privacy Policy

1. Who we are

AI Fashion Week and Plutopal ("AIFW", "Plutopal", "we", "us", "our") are products of Plutopal Cloud Services Corporation, a Delaware corporation with mailing address at 671 Nello Drive, Campbell, CA 95008. Contact: support@plutopal.ai.

2. Information we collect

We collect the following categories of information:

• Account information: email address, display name, username, avatar (optional). Sign-in uses one-time codes sent to your email or phone (no password); your sign-in identity is managed in Amazon Cognito.
• Contact information: phone number (when you provide it for sign-in, SMS updates, or shipping).
• Purchase information: shipping address, order history, payment details (processed by Stripe — we do not store card numbers).
• Content you upload: product listings, model posts, comments, images.
• Usage information: pages viewed, products interacted with, search queries, device type, IP address, browser type.
• Communications: messages sent via Beaming (group chat) or Jini (AI stylist).

3. How we use your information

• To provide, maintain, and improve our services
• To process transactions and deliver purchased products
• To send event confirmations and shipping updates
• To personalize your feed and Jini AI recommendations
• To communicate about your account (essential only — not marketing without consent)
• To send SMS updates about events you've registered for (only with your explicit consent)
• To detect and prevent fraud, abuse, and security incidents
• To comply with legal obligations

4. How we share your information

We do not sell your personal information. We share it only with:

• Service providers who help us operate: Stripe (payments), Amazon Web Services (cloud infrastructure, sign-in identity via Amazon Cognito, email delivery via Amazon SES, livestream video via Amazon IVS, and image and video storage and delivery via Amazon S3 and CloudFront), Twilio (SMS and phone verification), Vercel (hosting), Mux (video processing), GetStream (chat infrastructure for Beaming, direct messages, and livestream chat), MongoDB Atlas (database), Anthropic (Jini AI), Pinecone (search), Sentry (crash and error reporting), PostHog (product analytics).
• Designers and sellers when you place an order — they receive your shipping address and order details necessary to fulfill your purchase.
• Legal authorities when required by valid legal process or to protect our rights and users' safety.
• Business transfers if we are acquired or merged — successor entity would inherit these obligations.

We do not share your data with third parties for their own marketing purposes.

5. Analytics, diagnostics, and cookies

We use essential cookies to keep you signed in and remember your brand preference. We do not use advertising cookies, and we do not track you across other companies' sites or apps.

To understand how our products are used and to fix problems, we use:

• PostHog (product analytics): product interaction events (screens viewed, taps such as follow, like, save, add-to-cart, checkout), device model, operating system, app version, and an analytics identifier that is linked to your account after you sign in. PostHog session replay is enabled with input masking on: text you type and payment fields are masked — no keystrokes or field contents are captured.
• Sentry (crash and error reporting): crash logs, stack traces, device model, operating system, and app version. When you are signed in, your account ID may be attached so we can investigate problems you report. Network request bodies and message contents are not captured.

Neither tool is used for advertising or cross-app tracking, and no payment card data or chat message contents reach them.

5a. Mobile apps

Our iOS app collects the same categories described in this policy. Specifically: crash data and diagnostics (Sentry), product interaction and usage data with a device analytics identifier (PostHog, linked to your account after sign-in, with session-replay input masking on), account and purchase information as described above. The app does not use the advertising identifier (IDFA), does not request cross-app tracking, and does not collect precise location, contacts, or photo metadata beyond uploads you initiate.

6. SMS messaging

If you provide your phone number and consent to SMS updates, we may send you event-related messages (registration confirmations, event reminders, order updates) via Twilio from +1-833-603-2433. Message frequency depends on the events you register for — typically 1-5 messages per event. Standard message and data rates may apply. Reply STOP to opt out at any time. Reply HELP for help. See our SMS Terms for full details.

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. The phone number you provide for SMS is used solely to deliver the messages you consented to, and is shared only with Twilio, our SMS delivery provider, for that sole purpose. SMS opt-in consent is never shared with any third party. SMS is entirely optional and is not required to use any part of AI Fashion Week or Plutopal.

7. Data retention

We keep your account information for as long as your account is active plus 30 days after deletion. Purchase records are retained for 6 years for tax and accounting purposes. You can delete your account yourself at any time from the iOS app (Profile → Delete account), or request deletion by emailing support@plutopal.ai. Deletion scrubs your personal information (email, phone, name, username, avatar, bio) and removes your sign-in identity; order and payment records are retained with an anonymized reference, as financial-record laws require.

8. Your rights

You have the right to:

• Access the information we hold about you
• Correct inaccurate information
• Delete your account and personal information
• Export your data in a portable format
• Object to certain processing
• Withdraw consent for SMS or marketing communications at any time

To exercise any of these rights, email support@plutopal.ai. We will respond within 30 days.

9. California residents (CCPA)

California residents have the specific right to know what personal information we collect, to request deletion, and to opt out of any "sale" of personal information. We do not sell personal information. To make a request, email support@plutopal.ai.

10. European users (GDPR)

If you are in the European Economic Area, we process your data based on: (a) contract when providing services you've requested, (b) legitimate interest for fraud prevention and service improvement, (c) consent for marketing communications, and (d) legal obligation for tax records. You have the right to lodge a complaint with your local data protection authority.

11. Children

Our services are not directed to children under 13. We do not knowingly collect personal information from children under 13. If we discover we have collected such information, we will delete it promptly. Users between 13 and 17 require parental consent to make purchases.

12. Security

We use industry-standard security measures including TLS encryption, secure password hashing, AWS Secrets Manager for keys, and regular security reviews. However, no method of transmission over the internet is 100% secure.

13. Changes to this policy

We may update this Privacy Policy periodically. When we make material changes, we will notify you by email at least 30 days before they take effect. Continued use of the service after changes take effect constitutes acceptance.

14. Contact

Questions or concerns? Email us at support@plutopal.ai.

Plutopal Cloud Services Corporation, 671 Nello Drive, Campbell, CA 95008, USA