Privacy notice

1. Who processes the data

The data controller is Cama Davide, which runs Custoomy, with its registered office at Via E. Musolino 3, 89135 Reggio Calabria (RC), Italia, VAT number 03326110800. For any request about your data, write to privacy@custoomy.com.

2. What data we collect

You can read the site without registering and without leaving any data that identifies you. What follows concerns people who register, subscribe to our communications or use the tools. For the professionals and businesses we contact, and for the directories, sections 6 and 7 apply.

• Account. Email address and, if you provide them, your name and profile picture. Sign-in is handled by Clerk, which also stores your credentials: we neither see nor store passwords.
• Profile. Country, language and the segment you belong to (agency, business, private individual and so on), plus the optional details you add yourself: company, website, phone, city, short description.
• Email communications. Your address, the frequency you chose and the proof of consent: when you gave it, from which page and from which network address. It serves to show that the subscription is yours.
• Use of the tools. The results you save (ROI calculator, print technique quiz, size plans, size collections, configurations) and the files you upload, for example a logo you want to see applied to a garment. When you download or save a mockup from MyMockup we keep it in your area, together with the logos it uses and a small preview of it, in a private space that only you can open. You can delete it whenever you like from Configurations.
• Technical data. Network address, browser type and the pages requested end up in the logs of our infrastructure providers, for security and diagnostics. From your network address we work out your country, so as to offer you the right version of the site.
• Presence. If you are signed in, we record the time of the last page you loaded, to know how many people have been using the site in the last 5 minutes. It is a time, not a browsing history: we do not keep a list of the pages you visit.

3. Why we process it

• To provide the service you asked for: account, tools, saved items, support. Legal basis: performance of the contract with you.
• To send you editorial communications and product announcements. Legal basis: your consent, which you can withdraw at any time from your profile or from the link at the bottom of every email. Service emails — confirmation of a subscription, account recovery — are not covered here: without them the service does not work.
• To keep the site running and secure: technical logs, protection against abuse, fault diagnosis. Legal basis: our legitimate interest in a service that works.
• To understand how the site is used, through aggregate statistics. Legal basis: our legitimate interest for anonymous statistics, your consent for Google Analytics cookies (section 4).
• To make Custoomy known to professionals in the industry and to publish the directories (sections 6 and 7). Legal basis: our legitimate interest, balanced against your right to object at any time.

4. Cookies and measurement

The first time you visit, a banner asks whether you accept Google Analytics cookies. You can accept them all, keep only the necessary ones or choose for yourself. You can change your choice at any time from the Cookie preferences link at the bottom of every page.

Necessary, always on. They make the site work and do not require consent:

• Sign-in (Clerk): __session, __client_uat and the other __clerk cookies. They keep you signed in; they last for the session or up to one year.
• Your cookie choice: custoomy_consent, 12 months.
• Language: custoomy-locale-chosen and custoomy-locale-override, 12 months.
• Shared size collections: pin_verified_… (24 hours) and raccolta_…_risposta (30 days), to find the answer you gave again.
• Private area: sidebar_state, remembers whether the sidebar is open.

Anonymous statistics, always on. We count visits in aggregate form, without identifying you: Umami does not use cookies; the cstm_vid cookie (12 months) is used only to count unique visits to product pages and never leaves our site. These are our own tools, used only for statistics: that is why they do not require consent.

Google Analytics, only with your consent. If you accept, Google Analytics sets the _ga and _ga_… cookies (up to 2 years) to tell visits apart. If you do not accept, it installs no cookies and receives only anonymous signals about the visit, without identifiers, which it uses for aggregate estimates (Google's “consent mode”). In both cases it does not record your full network address, we do not use the data for advertising and we do not share it with other Google services.

5. Who we share the data with

We do not sell personal data and we do not pass it on to third parties for their own purposes. It is processed on our behalf, as processors, by the providers we need to run the service:

• Clerk — sign-in and account management.
• Supabase — database and file storage, in the European Union.
• Vercel — running the site, on servers in the European Union.
• Cloudflare — delivery and protection network, and private storage of the logos and previews of saved mockups.
• Resend — sending emails.
• Cloudinary — image processing and delivery.
• Google Analytics — statistics, within the limits of section 4.
• Umami — aggregate statistics without cookies.
• Microsoft Azure OpenAI — features assisted by artificial intelligence, on European servers.

Clerk, Vercel, Cloudflare, Resend, Cloudinary and Google are companies based in the United States. Where data leaves the European Union, the transfer relies on the European Commission's adequacy decision for providers certified under the EU–US Data Privacy Framework and, in all other cases, on the standard contractual clauses approved by the Commission.

6. Professionals and businesses we contact

To make Custoomy known, we write to communication agencies, graphic design studios, printers and businesses in the customisation industry. If you have received an email from us without having registered, here is where your data comes from and what we do with it.

• What data. Business data only: the name of the company or professional, work email and phone, website, city and services offered.
• Where it comes from. From public sources where you published it yourself in order to be found: your company website, professional profiles, industry listings and directories.
• Why. To introduce you to a service that relates to your work. Legal basis: our legitimate interest. We write to you only a few times and every email tells you how to stop receiving them.
• How to object. Reply “don't write to me again” or write to privacy@custoomy.com: we stop immediately, and of your address we keep only what is needed to avoid writing to you again by mistake.

7. The public directories

The directories of communication agencies and graphic design studios show professional data that is already public: name, city, website, services and sectors. They are there for people looking for a professional for a customisation project. Legal basis: our legitimate interest and yours, in being found by clients in the industry. The logo and the “verified” label appear only with the consent of whoever manages the listing.

If the listing is yours, you can ask us to correct it or remove it at any time by writing to privacy@custoomy.com: we remove it without you having to give a reason.

8. How long we keep it

• Account and profile: for as long as the account exists. If you delete it, they go with it.
• Subscription to communications: until you unsubscribe. After that, the address and the proof of consent remain, so that we can show that you had consented and that you asked to leave.
• Tool results and uploaded files: for as long as you keep them saved, and in any case no longer than the life of the account. A logo deletes itself when none of your mockups uses it any more.
• Professional contacts and directory listings: for as long as they are useful for the contacts and the directories, and never after you have asked us to remove them.
• Technical logs: for the retention period of the infrastructure providers, in the order of a few weeks.

9. Your rights

You can ask to access your data, rectify it, erase it, restrict its processing, object to it and receive it in a machine-readable format. Two of these you can do yourself, without asking anyone, from the Privacy and data section of your profile: download everything we hold about you and delete your account. For everything else, write to privacy@custoomy.com.

If you believe we are processing your data improperly, you can lodge a complaint with the Garante per la protezione dei dati personali, the Italian data protection authority (garanteprivacy.it).

10. Changes

When we change this document substantially we update its date and, if the change concerns the purposes you consented to, we ask you to accept it again the next time you sign in. The current version and its date are always at the top of this page.

The terms of use, on the other hand, explain what you can do with the service and what we commit to doing.