Privacy Policy
Introduction
This Privacy Policy outlines the principles of processing and protecting the personal data of Users who use the product personalization service (hereinafter referred to as "Service"). Committed to protecting Users' privacy, we ensure data security in accordance with applicable legal regulations.
Data Controller
The data controller is Invidia Łukasz Macoń, based in Gdynia, Joachima Joachimczyka 1, 81-577, NIP: 9581677452, e-mail: luk.macon@gmail.com.
Scope of Collected Data
Registration Data
During account registration in the Service, we collect data such as: first name, last name, email address, phone number, company name (if applicable), and other data necessary for providing services.
Technical Data
While using the Service, we automatically collect technical data, such as: IP address, browser type, operating system, device information, location data, and cookies. Additionally, to analyze traffic and optimize the Service, we use Google Analytics, which may automatically collect and analyze some of this data. Google Analytics collects anonymous information about the use of the Service, such as visit counts, visit duration, traffic sources, visited pages, and user interactions. These data are processed by Google on servers outside the European Union, following Google's privacy protection principles and in compliance with mechanisms such as EU Standard Contractual Clauses (SCC), which provide an adequate level of data protection. Data collected by Google Analytics may be used solely for statistical and analytical purposes to better understand how the Service is used and adjust its performance to user needs. You may opt out of sharing data with Google Analytics at any time, for example, by installing a plugin that blocks Google Analytics.
User Content
We collect and process content uploaded by the User to the Service, such as graphics, texts, designs, and other materials.
Approximate country and interest statistics
At registration, or a subsequent successful login if no country has been recorded, we estimate your country from your IP address using a local geolocation database. For this purpose, we store the estimated country, determination date and source with your account, without adding IP address storage or sending your IP to an external geolocation service. The estimate may be inaccurate, for example when using a VPN. This mechanism does not determine your precise location or maintain a location history. We use these data to assess aggregate interest in the service by country, based on our legitimate interest in understanding geographic demand. We retain them until account deletion or acceptance of a valid objection. You can object by contacting the controller at luk.macon@gmail.com.
Newsletter subscriptions
Creating an account does not automatically subscribe you to the newsletter. When you sign up using the separate newsletter form, we store your email address and preferred language, plus an approximate country, determination date and source when available. The country is estimated using a local IP geolocation database, without additional storage of the IP address or sending it to an external geolocation service. This does not determine your precise location and the estimate may be inaccurate, for example when using a VPN. Country estimates are collected only for new newsletter subscriptions; existing subscriptions are not backfilled. These data are kept until you unsubscribe or an earlier deletion request is accepted. Every newsletter email includes an unsubscribe link.
Purpose of Data Processing
Users' personal data is processed for the following purposes:
- Service Provision: Account registration, login, use of Service features, payments, and invoicing.
- Communication: Responding to inquiries, informing about Service changes, sending notifications.
- Marketing: Sending promotional offers, newsletters, if the User has consented to it.
- Analysis and Improvement: Monitoring and analyzing Service usage to optimize and develop it.
Legal Basis for Data Processing
Personal data is processed based on:
- User Consent: For processing data for marketing purposes or receiving newsletters.
- Contract Fulfillment: Providing services related to the Service.
- Legal Obligations: Compliance with legal regulations.
- Legitimate Interest: Service improvement, ensuring security, direct marketing.
Data Retention
Personal data will be retained for the period necessary to fulfill the processing purposes and for the time required by law or until the User withdraws consent or deliberately deletes their account via the user panel.
User Rights
The User has the right to:
- Data Access: Receive information about processed personal data.
- Data Correction: Request correction of data if it is incorrect or incomplete.
- Data Deletion: Request deletion of data ("right to be forgotten").
- Processing Restriction: Receive their data in a format that enables it to be transferred to another controller.
- Objection: Object to data processing based on legitimate interest.
- Withdrawal of Consent: Withdraw consent for data processing at any time, which does not affect the legality of processing conducted before withdrawal.
User Data Deletion Instructions
To delete your data from the application, the user must follow these steps:
Log in to your account in the application.
Go to the Your Account section available at: https://alterproduct.com/app/your-account.
Click the Delete Account button.
Confirm your decision by entering your password (if required) and typing the appropriate text into the text field.
Press the Delete Account button to permanently delete your data from the application.
Data Sharing
Users' personal data may be shared with:
- Processing Entities: Technology partners, hosting companies, IT service providers - solely to the extent necessary to fulfill processing purposes.
- State Authorities: When required to fulfill a legal obligation.
Data Security
We implement appropriate technical and organizational measures to protect personal data from unauthorized access, loss, alteration, or destruction.
Cookies
The Service uses cookies to:
- Facilitate Service Usage: Remembering the User’s session.
- Content Personalization: Adapting content to the User’s preferences.
- Analysis: Monitoring traffic and User behavior on the site.
- Advertising measurement (Meta Pixel, TikTok Pixel, Reddit Pixel and Google Ads): With your separate marketing consent, we use Meta Pixel, TikTok Pixel, Reddit Pixel and Google Ads to measure advertising performance, including account registration, checkout starts, paid purchases and contact requests. The SDKs receive technical data such as IP address, browser information, page URLs, cookies and usage events. Our code sends a pseudonymous event identifier and, for purchases, the value and currency. Our code does not send your email address, phone number or message content to these pixels. Automatic Advanced Matching and Enhanced Data Postback are disabled. Google Analytics requires separate analytics consent. You can change or withdraw these consents in the website cookie settings. For Reddit, Advanced Matching using email or phone and Enhanced metadata sharing are disabled. Withdrawing marketing consent stops us from sending future advertising events. Enhanced Conversions in Google Ads are disabled.
Cookie Management
You can change or withdraw analytics and marketing consent separately in the website cookie settings. You can also manage cookies in your browser; restricting essential cookies may affect website functionality.
Changes to the Privacy Policy
We reserve the right to make changes to this Privacy Policy. Any changes will be communicated to Users by publishing an updated version on the Service’s website.
Contact
For questions or concerns regarding personal data processing, please contact us at: contact@alterproduct.com
AI connections (MCP)
You can connect a chosen AI client, such as ChatGPT or Codex, to Alter Product through MCP. We process the data needed to provide the access and editing you request, authenticate the connection, enforce project permissions and protect the service.
Data exchanged
Depending on the tools you use, the connection exchanges account and project identifiers, project names, template selections, tool inputs and results, editing status and technical connection data. Requested results may include authored text, artwork and vector geometry, product and pattern information, mannequin settings and body measurements you provide. Imported images or generated-image file references and image contents may also pass through the connection. Your native account password remains with Alter Product.
Recipients
Tool inputs and results pass through the Alter Product relay between your browser workspace and the AI client you choose. The client receives the requested results in its tool or conversation context. Its provider processes and retains the data it receives under its own policies and your settings.
Drafts and saved projects
Editing changes the browser draft. Tool requests and results still pass through the connection; the MCP relay does not keep a separate conversation archive. Saving a project to your Alter Product account, including through an available save tool, is a separate explicit action requiring write permission. Undo history, native browser saves or recovery may remain with the draft or local recovery data. Saved projects and their assets remain after disconnection and follow the normal project or account deletion process.
Connection lifetime and disconnection
Account access lasts at most 8 hours and expires after 2 hours without qualifying activity. Access tokens last at most 15 minutes; paired-tab sessions last at most 2 hours. Authorization requests expire after 5 minutes and authorization codes after 1 minute. Relay authorization, token and session state is held in memory. Public OAuth client registrations, containing client identification and callback details rather than tokens, may be stored on disk until an administrator removes them. Workspace Disconnect ends only that editor session. Account authorization remains valid until it expires or is revoked separately. To unlink the AI client, also use its connection or access settings; if it offers no revocation option, contact contact@alterproduct.com.
Your choices and rights
You choose the client, projects and permissions to approve. You can request access, correction or deletion of your personal data and exercise the other rights described above by contacting contact@alterproduct.com. Disconnection or revocation does not delete projects you saved or data already received by the AI provider.