Privacy Policy

1. Information We Collect

We collect several types of information from and about users of our Platform. Our users are sellers, makers, and developers (Users). Beforewear does not process orders, and we receive no information about a User's customers.

1.1 Information from Users

This is personal information you provide to us as a user of Beforewear:

• Contact Information: Name, email address, and a company or brand name if you give one.
• Billing Information: Payment history for the funds you add (each order's identifier, its amount, the country of your billing address, and any refund), your request to start the Services right away (the box you tick before paying, and when), any withdrawal from a purchase, and the record of your Balance and of what was taken from it. Polar Software, Inc. ("Polar") is our merchant of record: it sells and bills the funds you add, as an independent party under its own terms and privacy policy. Polar processes your payment through Stripe and collects your card details and billing address. We do not receive your card number.
• Sign-in Information: There is no password. If you continue with Google, we receive your name, email address, and basic profile information from Google. If you sign in by email, we send a verification code to your address.
• Files You Upload: Sewing patterns and cut templates, 3D models, size charts, product photos, artwork, and logos. Most of this is not personal information, but a file can contain some (for example a name written in a file, or a person in a photo).
• AI Tool Inputs & Requests: The requests you write in words for the agent that builds garments, the words and any images you give the design generator to make or change a design, and what you put in a Build Request (the garment's name, sizes, fabric, computer, Spending Cap, and any note you add).
• Communications Data: Your emails to us, for example to contact@beforewear.com or legal@beforewear.com.

1.2 Information About Other People in Your Files

Where a file you upload contains information about another person — for example, a model shown in a product photo — and we handle it on your behalf, we act as a Data Processor. You, the User, are the Data Controller for this information. We do not use this information for any purpose of our own, except the review described in Section 3.5. Our Data Processing Addendum sets out how we process it.

1.3 Automatically Collected Information

This includes technical and usage information collected as you use the Platform:

• Usage Data: Pages visited, features used, time spent on the Platform, interaction with our tools, and user flows, and our servers' logs of the requests made to them. We use analytics tools (Google Analytics, PostHog) to improve user experience. Our servers also send PostHog a record of the outcome of each task they carry out for you, such as a Build or a design that finished or failed, with how long it took and any error message, linked to your account identifier. These records are part of running the Services and are not affected by your cookie choices or GPC (Section 7). Our servers' logs are kept for 30 days. We do not record or replay sessions. Where you are signed in, usage data is linked to your account and is personal data — see Section 3.4.
• Device Information: IP address, browser type, operating system, and device type.
• Outputs and Build Records: We collect and store what the Platform makes for you — built garments, mockups, and print files — and the record of each Build (its stages, its checks, its console lines, the computer it was done on, how long it took, and what it took from your Balance), to provide the service. We do not use them to train AI models unless you opt in (Section 3.1).
• Developer Tools: The MCP server and the Python SDK call our hosted server, through an assistant you connected or a personal token you made. We log each call: the operation, its inputs (with fields such as email addresses, phone numbers, tokens, and keys removed, and long text cut to 500 characters), when it was made, how long it took, whether it succeeded and any error, a summary of what came back, what it took from your Balance, and the assistant or token it came through. An assistant you connect is run by its own provider, which handles what you say to it and what our tools return to it under its own terms and privacy policy. The SDK used without a token answers from a stand-in in the package and sends us nothing.

2. How We Collect Information

• Directly from You (the User): When you create an account, add funds, upload a file, write a request, ask for a Build, contact customer support, or use our AI Tools.
• Automatically: Through cookies, log files, and analytics tools as you navigate and use the Platform.
• From Third Parties: We receive information from Polar, our merchant of record, which processes payments through Stripe, about the funds you add (each order, its amount, the country of your billing address, and any refund), and from Google when you choose to continue with Google.

3. How We Use Your Information

We use the information we collect for various purposes:

3.1 To Provide and Improve Our Services

• To operate the Platform, keep your Balance, do the Builds you ask for, and deliver the Services you request.
• To enhance and personalize your user experience.
• To conduct research and analysis to improve our Services and develop new features. For this we use usage data and Build records in aggregate (for example how long Builds take and where their checks refuse them). We do not use your inputs — including uploaded sewing patterns, cut templates, 3D models, size charts, photos, artwork, logos, and other files — or your Outputs to train our AI Tools or models unless you opt in. If you opt in, you may opt out again at any time by emailing legal@beforewear.com, and we will exclude your content from future model training. Models already trained cannot practically be un-trained. We do not train our models on information about other people that we process on behalf of a User (Section 1.2).

3.2 To Communicate with You

• To send you transactional notifications, security alerts, and support messages related to your account.
• To respond to your questions and provide customer support.
• To send you marketing communications about our products and offers, which you can opt out of at any time.

3.3 For Security and Legal Compliance

• To protect against fraudulent, unauthorized, or illegal activity.
• To enforce our Terms of Service.
• To comply with applicable laws, regulations, and legal requests.

3.4 For Analytics, Not for Advertising

We do not use your information for advertising or retargeting. We do not upload email addresses, hashed or not, to advertising platforms. We do not build custom or lookalike audiences. We place no advertising cookies or pixels.

Analytics and Product Insights:

• We use Google Analytics and PostHog for website and product analytics to understand how Users use our platform features
• These tools record pages viewed, navigation paths, and feature usage patterns
• Where you are signed in, this usage data is linked to your account identifier and is therefore personal data. It is not anonymous.
• We do not record or replay sessions, and our analytics tools do not receive the contents of the files you upload
• In the EU/EEA, UK and Switzerland, analytics cookies are set only where you have consented via our cookie banner; elsewhere you may opt out via GPC or Cookie Preferences
• You can opt out of analytics tracking using GPC browser signals or browser settings

3.5 To Monitor Content Quality and Compliance

We may review Your Content, including your AI Tool inputs, the files you upload, and Outputs, to:

• Ensure compliance with our Terms of Service and acceptable use policies
• Prevent misuse for creating illegal, infringing, or harmful content
• Find out why a Build failed or was refused, and help you when you ask for support
• Respond to IP infringement claims or legal process

Review may be automated (for example, the screening of the words given to the design generator) or done by our staff. We access only the minimum content necessary.

We do not sell personal data, and we do not share it for cross-context behavioral advertising ("sharing" under state privacy laws such as the California Consumer Privacy Act (CCPA)). We use information about other people in your files only as a Data Processor, to provide the Services to you, the User.

4. Disclosure of Your Information

We may disclose information under the following circumstances:

• To Service Providers and Sub-processors: We share information with third-party contractors who support our business. Our key service providers are listed below.
• To Fulfill Your Requests: We send your files and your requests to the service providers that carry them out: the computers that Builds are done on, and the AI model providers that read a request written in words or make or change a design. We do not send your files or Outputs to Production Partners, to marketplaces, or to other Users. A sewing pattern or cut template you upload is passed on only to the service providers that carry out your Build, or for the legal reasons and business transactions below.
• For Legal Reasons: If required by law, such as in response to a subpoena or court order, or to protect the rights, property, or safety of our company, our users, or others.
• In Connection with a Business Transaction: In the event of a merger, acquisition, or sale of our assets, your information may be transferred to the new entity.
• With Your Consent: For any other purpose disclosed by us when you provide the information.

4.1 Our Service Providers

We engage third-party services to provide the Platform. The key ones are:

• Infrastructure & Hosting: Amazon Web Services, Inc. (USA) – Cloud hosting, data storage, DNS, the computers with GPUs that Builds are done on, and the emails we send (such as sign-in codes)
• Payments: Polar Software, Inc. (USA) – Merchant of record for the funds you add, acting as an independent party under its own terms and privacy policy; it processes payments through Stripe, Inc. (USA)
• Sign-in: Google LLC (USA) – "Continue with Google"; Cloudflare, Inc. (USA) – the check on the sign-in page that a person, not a program, is asking for a code (Turnstile)
• AI & ML Providers: Google LLC (USA), OpenAI, Inc. (USA), Anthropic, PBC (USA), OpenRouter, Inc. (USA), Features & Labels, Inc. ("fal") (USA) – The agent that builds garments: reading requests written in words; the design generator: reading the words and images you give it and making or changing the design
• Image Processing: PhotoRoom SAS (France) – Background removal in the design generator
• Email: Google LLC (USA) – The mailboxes that receive your emails to us
• Analytics & Product Insights: Google LLC (Google Analytics) (USA), PostHog, Inc. (USA) – Website analytics, product analytics, feature usage tracking, and our servers' records of task outcomes (PostHog)
• Supporting Services: Google LLC (USA) – Serves the script of the 3D viewer on the Avatars page of our developer documentation

We maintain the right to update this list of sub-processors as our business needs evolve. Material changes to sub-processors that handle the files you upload will be communicated to active Users via email with at least 30 days' notice.

5. Data Retention

We will retain your information for as long as necessary to fulfill the purposes outlined in this Privacy Policy.

• Account Information: We retain your data as long as your account is open or as needed to provide you with Services and comply with our legal obligations.
• Files You Upload and Outputs: We keep your files, the garments built from them, your designs, mockups, print files, and Build records for as long as your account is open, so that you can open them, change them, and build from them again. You can delete a file, a design, or a built garment at any time. When you delete one, or close your account, we delete it from our active systems within 30 days. Copies may remain for a time in our backups and in stored earlier versions of files, which we keep only to recover from failures and do not use for anything else. Unless you opted in to training (Section 3.1), we do not keep it afterwards to improve our AI Tools.
• Information About Other People in Your Files: It is kept and deleted with the file that contains it.
• Content Used for Training: Only if you opted in (Section 3.1). Content used in a training set may persist in that set for the life of the model generation it supports. Opting out stops any future use.
• Billing and Balance Records: Our record of your Balance (the funds added, what was taken from it, and refunds) is kept while your account is open and deleted when it is closed. Polar, as merchant of record, keeps its own records of your purchases, invoices, and payments for as long as the law requires it to.
• After You Close Your Account: We keep your email address on a list of addresses we do not email, so that we do not email you again. We keep the records of calls made through the Developer Tools without their inputs and summaries and no longer linked to you, to count use.
• Inactive Accounts: Accounts that hold no unexpired funds added by the User and have no sign-in or activity for 12 consecutive months may be deleted after at least 30 days' advance notice to your registered email. Deletion removes personal information, the files you uploaded, and Outputs. Polar keeps its own records of past purchases as the law requires.
• Cookie Data: The cookie that keeps you signed in lasts up to 30 days, and analytics cookies persist for up to 2 years (Section 7). You can delete cookies via browser settings at any time.

6. Data Security

We implement appropriate technical and organizational measures, such as encryption and access controls, to protect your personal information. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials: access to your sign-in email address or Google account, and any API keys.

7. Cookies and Tracking Technologies

We use cookies and similar technologies (such as local storage) to operate our Platform and analyze usage. We use no advertising cookies, pixels, or web beacons.

Consent by region. If you are visiting from the European Union/EEA, the United Kingdom, or Switzerland, non-essential cookies (analytics) are disabled by default and are set only after you give consent through our cookie banner. You can accept or reject them, and you can change or withdraw your choice at any time via "Cookie Preferences". Dismissing the banner without making a choice leaves non-essential cookies off. In other regions (including the United States), analytics cookies are active by default and you can opt out at any time using the tools described below, including the Global Privacy Control (GPC) signal, which we honor automatically.

7.1 Types of Cookies We Use

Essential Cookies (Always Active)

• Purpose: Necessary for the website to function
• Examples: Session management, authentication, security
• Duration: Session or up to 30 days
• Legal Basis: These cookies do not require consent as they are strictly necessary

Analytics Cookies (Consent-based in EU/UK/Switzerland; Opt-Out elsewhere)

• Purpose: Understand how visitors use our site
• Third Parties: Google Analytics, PostHog
• Information Collected: Pages visited, time on site, referral source, device info, feature usage, user flows
• Duration: Up to 2 years
• Legal Basis: Consent where required (EU/EEA, UK, Switzerland); otherwise legitimate interests with opt-out
• Opt-out: Use GPC browser signal, browser settings, or Cookie Preferences

Advertising Cookies

• None. We set no advertising cookies.

7.2 Information We Collect Through Cookies

• Device information (browser type, operating system, screen resolution)
• IP address and approximate geographic location
• Pages visited and content viewed
• Time spent on pages and specific features
• Links clicked and user interactions
• Referral source (where you came from)
• Unique identifiers assigned by analytics services

7.3 Sale or Sharing of Personal Information via Cookies

We do not share information collected through cookies with advertising partners. We do not "sell" or "share" personal information as California law and other state privacy laws use those words.

7.4 Third-Party Services

We use the following third-party services that set cookies:

• Google Analytics: Website analytics - Privacy Policy
• PostHog: Product analytics - Privacy Policy

7.5 Your Cookie Choices

Cookie Banner

Accept, reject, or configure cookie categories when the banner appears, and reopen it anytime via "Cookie Preferences".

Global Privacy Control (GPC)

We honor GPC browser signals, as Section 7.6 describes.

Browser Settings

You can manage cookies directly through your browser settings:

• View and delete cookies
• Block third-party cookies
• Block all cookies (may affect site functionality)
• Clear cookies when closing your browser

Note: Blocking essential cookies may prevent our website from functioning properly.

7.6 Global Privacy Control (GPC)

We honor the Global Privacy Control browser signal. If your browser sends a GPC signal, we treat it as a request to opt out of non-essential cookies and turn off analytics tracking in your browser at once. It does not turn off our servers' records of task outcomes (Section 1.3).

To enable GPC:

• Use a privacy-focused browser like Brave or Firefox with GPC enabled
• Install a GPC browser extension
• Enable privacy signals in your browser settings

7.7 Cookie Duration

• Session cookies: Deleted when you close your browser
• Persistent analytics cookies: Remain on your device for up to 2 years
• Persistent essential cookies: Remain on your device for up to 30 days

7.8 Do Not Track (DNT)

We do not currently respond to "Do Not Track" (DNT) signals from browsers, as there is no industry standard for DNT compliance. However, we honor Global Privacy Control (GPC) signals as described above.

8. Your Rights and Data Control Choices

8.1 For Users

You can access and update your personal information through your account settings. You can delete your files, designs, and built garments yourself, or ask us to (Section 5). You can opt out of marketing communications by using the "unsubscribe" link in our emails.

8.2 For People Shown in a User's Files

If you are a person shown or named in a file that a User uploaded, Beforewear is a Data Processor for your information. If you wish to exercise your data protection rights (such as access, correction, or deletion), please contact the User who uploaded the file. We will assist the User in responding to your request as required by applicable law. If you do not know who uploaded it, write to legal@beforewear.com.

8.3 For Users in the European Economic Area and the United Kingdom

If you are located in the EEA or UK, you have the right to request access to, correction, deletion, or portability of your Personal Data, and to object to or restrict processing. You may also lodge a complaint with your local supervisory authority. We rely on (i) contract (Article 6 §1(b)) to provide the Platform, (ii) legal obligation (Article 6 §1(c)) where the law requires us to keep or disclose information, (iii) legitimate interests (Article 6 §1(f)) for platform safety and fraud prevention, for our servers' logs and records of task outcomes, for improving the Services from usage data and Build records in aggregate, as described in Section 3.1, and for emails to Users about our own Services, which you can opt out of at any time, and (iv) consent (Article 6 §1(a)) for analytics cookies, for marketing emails where the law requires consent, and for any use of your content to train our models. To exercise your rights, email legal@beforewear.com or submit a request via your account dashboard.

8.4 For California Residents

Under the California Consumer Privacy Act ("CCPA") and the California Privacy Rights Act ("CPRA"), you have the right to (i) know what personal information we collect, (ii) request deletion, (iii) correct inaccurate personal information, (iv) opt out of the sale or sharing of your personal information, and (v) not be discriminated against for exercising your rights.

We do not sell personal information, and we do not share it with advertising partners for targeted advertising, so there is nothing to opt out of. If that changes, we will update this Privacy Policy and give you a way to opt out before it does.

To exercise your other rights, email legal@beforewear.com.

8.5 For Users in Other Jurisdictions

If you are located in Canada, your personal information is handled in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA). If you are located in Australia, we handle personal information consistent with the Privacy Act 1988 and the Australian Privacy Principles. Residents of other regions may have similar rights under local law. To exercise any privacy right, contact legal@beforewear.com and we will respond in accordance with the law applicable to you.

9. International Data Transfers

Our services are operated in the United States. If you are located outside the United States, your information will be transferred to, stored, and processed in the United States. Transfers of Personal Data from the European Economic Area (EEA), UK, and Switzerland are safeguarded by appropriate mechanisms, including the EU Standard Contractual Clauses and the UK Addendum, to ensure your data is protected. For more details, write to legal@beforewear.com.

10. Children's Privacy

Our Services are not intended for children under 18 years of age. We do not knowingly collect personal information from children under 18.

11. Changes to Our Privacy Policy

We may update this Privacy Policy from time to time. We will tell you of any material change at least 14 days before it takes effect, by email or in-app notice, and post the new policy on this page with a new "Last updated" date.

12. Contact Information

To ask questions or comment about this Privacy Policy and our privacy practices, contact us at:

Algorithmic Labs, LLC
Attn: Legal Department
169 Madison Ave, STE 11762
New York, NY, 10016 US
Email: legal@beforewear.com