Plain-language data practice

Privacy notice

Effective August 3, 2026

PatternProof uses a customer body photo, a garment reference, and tailoring decisions to create one private visual-intent record. It does not sell those images or use them for advertising.

Who is responsible

The tailor or shop that creates a brief decides why the customer information is used and is the first contact for requests about that brief. The PatternProof deployment operator provides the application and its processors.

What we process

  • the shop owner's authentication email and shop name;
  • a customer label, body photo, and garment reference image;
  • garment category, requirements, feasibility decisions, adjustments, and notes;
  • an AI-generated visual-intent preview and cryptographic image digests;
  • consent and image-rights confirmations; and
  • review-link state, approval name, timestamps, and frozen approval evidence.

Please use a customer label rather than a full legal name during intake, and do not upload identification documents, medical images, or unrelated sensitive material.

Why and how it is used

The information is used only to validate private uploads, generate a YouCam garment preview, let the tailor record construction feasibility, and let the customer review the exact frozen Cut Card before approval. The preview communicates visual intent; it is not a fit, measurement, construction, fabric-behavior, or final-appearance guarantee.

Originals are uploaded to private temporary storage. The server validates and normalizes accepted images, removes embedded metadata, and keeps private canonical copies. YouCam receives short-lived signed input links for preview generation. Its returned image is downloaded, validated, normalized, and re-hosted privately.

Retention and deletion

RecordTreatment
Temporary originalsDeleted after successful normalization. An unfinished intake grant expires after two hours; the maintenance worker retries cleanup. On a once-daily scheduler, actual cleanup can occur after that expiry window.
Normalized body photoKept privately while needed for the brief. After approval or archival, the shop can start an audited erasure that is retried until storage deletion succeeds.
Reference, preview, and Cut CardKept as the working brief and agreement record under the shop's retention responsibilities. Reviewed evidence is protected from silent mutation.
Review and approval evidenceA frozen snapshot, digest, consent assertions, requirements, decisions, approval name, and timestamps remain as integrity evidence even after body-photo erasure.

Who receives data

Supabase provides authentication, PostgreSQL, and private object storage. YouCam processes the two input images to generate the visual preview. The deployment host (for the reference deployment, Vercel) handles application requests and operational logs. A customer with the unexpired private review link can see only that frozen review. PatternProof does not include advertising or product-analytics SDKs.

Your choices

A body photo is not processed until the intake user confirms customer consent and permission to use the garment reference. Do not continue if either confirmation is missing. A customer can decline approval and ask the shop to withdraw the review. Contact the shop that created the brief to request access, correction, withdrawal, or eligible body-photo erasure.

For deployment-level privacy or security requests, contact dev-privacy@patternproof.local.

Security and link safety

Images live in a private bucket and are served through short-lived signed URLs. Customer review links are bearer links: anyone who receives one may be able to view the frozen Cut Card until it expires or is withdrawn, so recipients should not forward it. Raw review tokens are not stored in the database. No internet service can promise absolute security; suspected link or account exposure should be reported promptly.

Changes

Material changes will be reflected here with a new effective date. New processing purposes require an updated notice and, where required, renewed consent.