Privacy Policy

We collect only what Clad9 needs in order to catalog your wardrobe and dress you well:

• Account information — your name, your email address, and either a salted password hash or, if you sign in with a provider, the basic profile that provider shares with us.
• Wardrobe imagery — the photos and videos of your clothes that you upload, plus the structured details we derive from them: category, color, pattern, fabric, formality, and season suitability.
• Photos of you — any photo you choose to upload so Clad9 can analyze your proportions and coloring, build your avatar, and catalog any clothing you're wearing in the photo. This is always optional; Clad9 works without it, with less personalized results.
• Calendar data — if you connect a calendar, the titles, times, and locations of your upcoming events, so recommendations can suit what you're actually doing.
• Location and weather — the approximate location you share or that we infer from your IP address, used to fetch your local forecast and to season-weight recommendations.
• Usage and device information — pages and screens you view, actions you take, your IP address, browser and device type, and app version. On the website we use cookies and session-replay analytics for this — see "Cookies and analytics" below. We do not serve ads and we do not use an advertising identifier.

We use the information above to:

• build and maintain your digital wardrobe from what you upload;
• generate outfit recommendations tuned to your body, your coloring, the forecast, and your calendar — which requires sending your images and prompts to the AI providers named below;
• create and render your avatar and outfit collages;
• learn from the outfits you accept, skip, and wear, so recommendations improve over time;
• manage your account, take payment where you buy something, and send you service and account email;
• monitor use of the Service, diagnose faults, and prevent abuse;
• meet our legal obligations and enforce our terms.

We do not sell your personal information, we do not share it with data brokers, and we do not use it for third-party advertising.

Photos of yourself are the most sensitive thing Clad9 handles, so we're specific about the limits. We use them for two purposes: to work out the silhouettes, cuts, lengths, and color palettes that suit you and render your avatar, and to identify clothing items you're wearing so they can be added to your digital wardrobe — the same cataloging we do for your wardrobe photos and videos. We also use basic framing information — how many people appear, and what kind of shot it is — to decide whether a photo is usable for this; we never use it to identify who anyone is.

We do not run facial recognition on your photos, we do not create a biometric identifier or faceprint from them, and we do not use them to identify you anywhere else or match you against any other person or database.

We do not use your photos, or the photos of your wardrobe, to train general-purpose AI models for other users. Learning from your feedback improves your recommendations, inside your account.

Your photos are private to your account. Nothing you upload becomes publicly visible, and we don't share it with other users. Uploading a photo of yourself is optional and you can delete it at any time without losing your wardrobe.

We share personal information only with service providers who process it on our behalf, under contract, and only for the purposes below — plus where the law requires it.

• AI processing providers — your uploaded images and the associated prompts are sent to third-party cloud AI platforms to catalog garments and generate recommendations. This is how the Service works; it can't produce a recommendation without it.
• Cloud hosting and storage providers — running Clad9 and storing and delivering your uploaded and generated images.
• Identity providers — where you choose to sign in with a third-party account, to authenticate you.
• Calendar and weather providers — where you connect a calendar, and to fetch the forecast for your area.
• Payment processors — taking payment and validating receipts where you buy something. Card and bank details go to the processor, never to us.
• Analytics and email providers — measuring how Clad9 is used, including the session recordings mentioned above, and sending you service and account email.

These providers operate in the United States and elsewhere, so your information may be transferred and processed outside your country. We may also disclose information where the law requires it, to protect our rights or someone's safety, or in connection with a merger or acquisition — in which case this policy continues to apply to the information transferred.

The Clad9 Closet Capture Chrome extension lets you save a product photo from any shopping site into your closet — by clicking "Capture" in the extension popup, or by right-clicking a product image and choosing "Add to Clad9 closet." It only ever reads or sends a page's content when you take one of those two actions, or once, when you click "Connect" to link the extension to your account — never automatically or in the background.

• When you capture a product (via the popup button or the right-click menu): the product photo (either the image itself, or its web address if the photo can't be read directly), its title, brand, and price if listed, and the page's address — sent to Clad9 to identify and add the item to your closet, the same AI processing already described above.
• When you click Connect: a private connection code is created and stored only in your browser's extension storage, on your device — never in a cookie, never readable by the websites you visit, never shared with anyone else. It authenticates the extension to your Clad9 account and nothing more.
• Each time you open the extension's popup while connected, it asks Clad9 for your name and how many items you've added today, to show a personalized greeting and a running count — this is an account lookup, not a page read, and involves no content from the site you're on.
• The extension does not read, collect, or send anything about the other websites you visit, your browsing history, or any page's content you haven't explicitly captured.

You can disconnect the extension at any time from Account Settings or from the extension itself, which also revokes its connection code immediately. Anything it imports becomes part of your wardrobe like any other item, and is deleted the same way (see "Keeping and deleting your data").

If you connect a Google Calendar, Clad9 asks for read-only access to your events (the calendar.readonly scope). We read the titles, times, and locations of your upcoming events, and we use them for one thing: suggesting outfits that suit what you actually have on. We never create, change, or delete anything in your calendar.

Clad9's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

• We don't use your calendar data for advertising, and we don't sell it.
• We don't pass it to anyone else except where we need to in order to run the calendar features you asked for, where the law requires it, or if the business is acquired.
• Nobody at Clad9 reads your calendar data unless you've asked us to look at something specific, we need to investigate abuse, the law requires it, or the data has been aggregated and stripped of anything identifying.
• You can disconnect your calendar at any time from your Calendar page, which deletes the stored tokens and any cached events. You can also revoke access yourself at myaccount.google.com/permissions.

Clad9 can be connected to an AI assistant — Claude, ChatGPT, Gemini, or your own tools — so you can ask about your wardrobe in the place you're already working. This only happens if you set it up yourself: either by creating a connection key on your connections page, or by approving a request on a Clad9 screen that names the assistant and lists, in plain language, everything it is asking for. Nothing is connected by default, and every connection is separate — you can connect one assistant and not another, allow one of them more than the other, and disconnect either without touching the rest.

When you ask an assistant about your wardrobe, your question and the details Clad9 sends back are handled by whoever makes that assistant, under their own privacy policy and their own retention and training terms — not ours. The assistant is not Clad9. We have no control over what they keep or what they do with it, and we can't delete it for you. Read their policy before you connect them, and connect only the ones you're willing to share this with.

• What it can read — only what you allowed. The permissions are: what's in your closet, your laundry basket and your style profile; the outfits Clad9 has recommended you and what you told us you wore; and your upcoming calendar events and what Clad9 thinks they call for. Each is granted separately and named on the screen where you grant it.
• What it can do — ask Clad9 for an outfit, change one piece of a look, mark an outfit as worn, and move clothes in and out of the laundry basket, again only where you allowed it. Everything it can change, you can change back in the app.
• What it can never do — upload photographs, add or delete anything in your closet, change your account, your plan or your payment details, or disconnect your calendar. These aren't permissions you can grant; they aren't offered at all.
• Photographs of you never leave, whatever you connect. Your FaceBooth photos, the self-photos you upload and your fit-check pictures are never sent to a connected assistant, at any permission level, in any form. Clad9 will tell an assistant which garments a fit check matched; it will not give it the picture. Photographs of your clothes, and the outfit images Clad9 generates, can be shared — that's what makes the answer useful. A photograph of you is a different thing, and we don't send it.
• What we record — which assistants you've connected, what you allowed each one to do, when you approved it, and when it last made a request, so your connections page can show you the truth and so we can spot a connection being abused. We don't keep a copy of your conversations with the assistant; those happen on their side, not ours.

You can disconnect an assistant at any time from your connections page, and it stops working immediately — we revoke the credential on our side, so it can no longer read anything whether or not it still holds one. Disconnecting never deletes anything from your Clad9 account, and anything an assistant added to your wardrobe stays yours and is deleted the same way as everything else (see "Keeping and deleting your data").

We use cookies to run Clad9 and to understand how it is actually used. We do not use them for advertising, we do not sell what they tell us, and we do not share it with data brokers.

• Cookies that keep the site working — these keep you signed in, protect forms against cross-site request forgery, and remember whether you last signed in with email or Google. The site can't work without them.
• Analytics and session replay — Google Analytics, which counts page views and visits, and FullStory, which records a replay of your session so we can see where the interface goes wrong. We treat these as part of operating the service: they are how we find the broken screen, the form nobody can finish, the step where people give up. They load on every page, including before you have an account.

There is no cookie banner. We would rather tell you plainly here what we collect than ask you to dismiss a box. FullStory masks the text you type by default, and we have deliberately left the sign-in and sign-up pages masked, so your email and password are not captured in a replay. If you would rather we did not record your sessions at all, email privacy@clad9.com and we will exclude you.

We keep your personal information for as long as your account is active, and afterward only as long as we need it for the purposes in this policy or to meet a legal obligation.

You can delete individual garments, remove your photo, disconnect your calendar, or delete your entire account at any time from your account settings. Deleting your account removes your wardrobe, your uploaded photos, your avatar, and your generated outfits from our live systems. Residual copies persist in encrypted backups until those backups age out on their normal rotation, after which they are gone.

If you'd rather we deleted something than waited for you to find the right setting, email privacy@clad9.com and we'll do it.

Depending on where you live, you have rights over your personal information — and we extend the core of these to every Clad9 user regardless of location. You can:

• access the personal information we hold about you, and get a copy of it;
• correct information that's wrong or incomplete;
• delete your information, as described above;
• object to or restrict certain processing, and withdraw a consent you previously gave;
• ask us not to sell or share your information — which we don't do in any case.

To exercise any of these, email privacy@clad9.com. We'll respond within the time the applicable law allows, and we won't treat you differently for asking.

Your data is stored on encrypted infrastructure, in transit and at rest, and access to production systems is limited to the people who need it to run the Service.

No system is perfectly secure, and we won't claim otherwise. If a breach affects your personal information, we'll notify you and the relevant regulator as the law requires.

Clad9 is intended for adults and is not directed at children. We don't knowingly collect personal information from anyone under 18. If you believe a child has given us their information, email privacy@clad9.com and we'll delete it.

We'll update this policy as Clad9 develops. The date at the top always reflects the current version, and where a change materially affects how we handle your information we'll tell you by email or in the app before it takes effect.