This Privacy Policy explains how Fitted AI, Inc.("Fitted AI," "we," "us," or "our") collects, uses, and shares information in connection with the Fitted website and services (the "Service"). Fitted is a product of and operated by Fitted AI, Inc. By using the Service, you consent to the practices described in this policy.
1. Information We Collect
We collect the following categories of information:
- Information you provide. Account details such as your name, company, email address, and phone number, along with any information you submit when you request a demo or contact us.
- Campaign and creator data. Content links, campaign configurations, and analytics you upload or connect to the Service.
- Social platform data. When you connect an account from a platform such as Instagram, TikTok, YouTube, or Facebook, we access the data you authorize, such as post metadata and performance metrics.
- Automatically collected data. Log and usage data described below.
2. How We Use Your Information
We use the information we collect to:
- operate, maintain, and secure the Service;
- measure brand visibility and calculate creator payouts;
- personalize your experience and develop new features;
- communicate with you about your account, support requests, and updates;
- analyze usage to improve performance; and
- detect, prevent, and address fraud or abuse.
3. Social Media and Platform Data
Where you connect a third-party platform, we use that data solely to provide the analytics and payout features you request. Our use of information received from those platforms adheres to each platform's developer and API policies. You can revoke our access at any time through the relevant platform's settings.
4. Shopify Store Data
Brands can connect a Shopify store to Fitted by installing the Fitted app from Shopify. When a brand connects its store through the Fitted app, we access only the data needed to run creator gifting. We do not read the brand's orders or details about the brand's other customers:
- Products, variants, and inventory, so the brand can choose which products creators may request and see how much stock is available. We may also use product images to recognize the brand's products in creator content for that brand.
- Gift draft orders. When a brand approves a creator's gift request, we create a no-charge draft order in the brand's own Shopify store containing only the creator's name and shipping address, so the brand can ship the gift. We do not send the creator's email address or phone number to the store.
Some brands connect Fitted through a custom Shopify app of their own instead. Only where a brand gives its own app that access, we may also read store locations, order fulfillment status, order totals, and the discount codes used on orders, to show shipping progress and attribute sales to creators.
We use Shopify data only to provide these features to the brand that connected the store. We do not sell it or use it for advertising. Shopify access tokens are encrypted at rest. When a brand uninstalls the Fitted app, we stop accessing the store, delete its access token immediately, and delete the store data we imported within 30 days. We honor Shopify's privacy webhooks: customer data requests (customers/data_request), customer data erasure (customers/redact), and shop data erasure (shop/redact).
5. Creators and Gifting
When a creator requests a gift from a brand through Fitted, we share the creator's name, shipping address, and any phone number or email address the creator provides with that brand, only to ship that gift. When the brand's store is connected through the Fitted Shopify app, only the creator's name and shipping address are sent to the store. Brands are responsible for handling this information in line with their own privacy policies. We erase a gift's shipping details 90 days after the gift is delivered, rejected or cancelled, and a creator can ask us to delete them sooner using the contact details below.
6. Log Files
Like most websites, the Service uses log files. These may record IP addresses, browser type, internet service provider, referring and exit pages, and date and time stamps. This information is used to analyze trends and administer the site and is not, on its own, used to personally identify you.
7. Cookies and Web Beacons
We use cookies and similar technologies to store preferences, keep you signed in, and understand how the Service is used so we can optimize your experience. You can control cookies through your browser settings, though disabling them may affect some features.
8. How We Share Information
We do not sell your personal information. We may share information with:
- Service providers who process data on our behalf (such as hosting, analytics, and payment processors) under confidentiality obligations;
- Third-party platforms you choose to connect, as needed to provide the Service;
- Legal and safety recipients when required by law or to protect our rights, users, or the public; and
- Business transfers, such as in connection with a merger, acquisition, or sale of assets.
9. Data Retention
We retain personal information for as long as needed to provide the Service and for legitimate business or legal purposes. When information is no longer needed, we take reasonable steps to delete or anonymize it.
10. Data Security
We use reasonable administrative, technical, and physical safeguards designed to protect your information. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.
11. Your California Privacy Rights (CCPA)
If you are a California resident, you have the right to request disclosure of the personal information we collect, to request deletion of your personal information, and to opt out of the sale of personal information (we do not sell it). We will not discriminate against you for exercising these rights.
12. Your GDPR Data Protection Rights
If you are in the European Economic Area or the United Kingdom, you have the right to access, rectify, erase, restrict, or object to the processing of your personal data, and the right to data portability. You may also withdraw consent at any time. To exercise these rights, contact us using the details below.
13. Children's Information
The Service is not directed to children under 13, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will take steps to delete it.
14. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above. We encourage you to review this policy periodically.
15. Contact Us
If you have questions about this Privacy Policy or how we handle your information, contact us at adam@fitted.co.
Fitted is a product of Fitted AI, Inc.