Privacy Policy

This Privacy Policy explains how Clothesfix ("we", "us") processes personal data when you visit clothesfix.com. We comply with the EU General Data Protection Regulation (Regulation (EU) 2016/679, "GDPR") and the ePrivacy Directive.

1. Controller

The data controller is the operator of Clothesfix. For any privacy question or to exercise your rights, contact: privacy@clothesfix.com.

2. What data we collect

• Wishlist submissions — the wish text you write and, if you choose to provide it, your email address and the language you used.
• AI chat messages — the text you send to our repair-help chat. Messages are sent to Google (Gemini) via the Lovable AI Gateway to generate a response.
• Technical data — IP address, user-agent and timestamps, processed transiently by our hosting provider for security and to deliver the page.
• Cookies & similar — see the Cookie Policy. Advertising and analytics cookies only after your consent.

3. Purposes & legal bases (Art. 6 GDPR)

• Operating the site and showing repair instructions — legitimate interest (Art. 6(1)(f)).
• Saving wishlist entries to shape future content — consent via form submission (Art. 6(1)(a)).
• Answering AI chat queries — consent by sending a message (Art. 6(1)(a)).
• Personalised ads via Google AdSense — consent (Art. 6(1)(a)).
• Security, fraud prevention and legal compliance — legitimate interest / legal obligation.

4. Recipients & processors

We share data with the following processors, each under a Data Processing Agreement:

• Supabase (database & hosting of wishlist data) — EU region.
• Lovable (application hosting, AI gateway routing).
• Google Ireland Ltd. — AdSense advertising (only after consent).
• Google LLC / Gemini — AI chat responses.

5. International transfers

Where data is transferred outside the EEA (e.g. to Google in the US), transfers rely on the EU–US Data Privacy Framework and/or the European Commission's Standard Contractual Clauses (Art. 46 GDPR).

6. Retention

• Wishlist entries: kept until they are no longer needed for product planning, max 24 months, then deleted or anonymised.
• AI chat messages: not stored by us beyond the request; subject to Google's retention.
• Server access logs: up to 30 days.
• Consent record: 12 months.

7. Your rights

Under the GDPR you have the right to:

• access your data (Art. 15)
• rectification (Art. 16)
• erasure / "right to be forgotten" (Art. 17)
• restriction of processing (Art. 18)
• data portability (Art. 20)
• object to processing based on legitimate interests (Art. 21)
• withdraw consent at any time (Art. 7(3)) — without affecting prior lawful processing
• lodge a complaint with your supervisory authority (e.g. the Finnish Data Protection Ombudsman, tietosuoja.fi)

To exercise any right, email privacy@clothesfix.com.

8. Children

The site is not directed at children under 16. We do not knowingly collect data from children under 16.

9. Changes

We may update this policy. Material changes will be highlighted on the site.