Legal
Privacy Policy
Effective 6 November 2026
AiNDREA, Inc. ("AiNDREA", "we", "us") is the AI fashion house behind your brand. This policy explains what personal information we collect through aindrea.ai, our free weekly report, our free plan and our paid services, how we use it, and the choices you have.
Questions: [email protected], or AiNDREA, Inc., 5 West 37th St., 9th Floor, New York, NY 10018.
What we collect
Information you give us
- Your name, work email, company and role when you sign up for the free weekly report, request a pilot, create an account or contact us.
- The categories you choose to follow.
- Messages you send us, and your answers to calls and questions inside the product.
- Billing details when you subscribe. Payments are processed by Stripe; we do not see or store full card numbers.
Information from your connected store
When a brand connects its store (for example, Shopify) or imports a file, we read its products, prices, inventory and sales so AiNDREA can make calls for that brand. We do not store shoppers' personal information from connected stores: no names, email addresses, phone numbers or street addresses.
Information collected automatically
- Usage and device information: pages viewed, links clicked, browser type, approximate location from IP address, and the date and time of each visit.
- Email engagement: whether a report email was delivered and opened, and which links were clicked, so we can keep the report useful and stop sending to addresses that bounce.
- Cookies: see Cookies below.
Public market information
AiNDREA reads publicly available information about products and stores: what is launched, priced, marked down and sold out, and what people search for and talk about in public. We collect this to describe the market, not to profile individuals. We do not build profiles of individual shoppers.
How we use it
- To send the free weekly report you asked for, and the product updates you opt into.
- To provide the service: making calls for your brand from the market and your own data, and keeping your brand's Record.
- To run, secure and improve aindrea.ai and the service, and to fix problems.
- To bill you and keep business records.
- To meet legal obligations and protect our rights.
We do not sell your personal information for money. We do use advertising cookies and pixels, such as Meta's, to measure our ads and show them to people likely to be interested. Under some US state laws, including California's, that counts as "selling" or "sharing" personal information. You can opt out at any time with the "Your privacy choices" link at the bottom of every page, and we treat a Global Privacy Control signal from your browser as an opt-out.
Your brand's data
Each brand's data is kept separate from every other brand's. One brand never sees another brand's data, calls or Record. We use a brand's data only to serve that brand. We do not pool it with other brands' data, and we do not use it to serve or improve AiNDREA for anyone else.
- The free weekly report uses double opt-in: we send a confirmation email, and you are only subscribed once you confirm.
- Every email has a one-click unsubscribe link. You can also write to [email protected].
- Transactional emails about your account (sign-in, billing, security) are sent while your account is open.
Who we share it with
Only with service providers that help us run AiNDREA, under contracts that limit their use of the data to that purpose:
- hosting and storage;
- email delivery;
- payments (Stripe);
- analytics (Google Analytics);
- advertising measurement (Meta);
- the AI model providers that process data to produce outputs for you;
- customer support tools.
A current list of providers is available on request at [email protected].
We may also share information if the law requires it, to protect people's safety or our rights, or as part of a merger or sale of the company. In a sale, we would tell you before your information became subject to a different policy.
Cookies
We use three kinds of cookies and similar technologies:
- Necessary: the site needs these to work, for example to keep you signed in.
- Analytics: Google Analytics tells us how the site is used.
- Advertising: the Meta pixel measures our ads and helps show them to people likely to be interested.
In the EU and the UK, analytics and advertising cookies load only after you accept them. Everywhere else, you can turn off advertising cookies with the "Your privacy choices" link, and we honor Global Privacy Control signals. You can also block or delete cookies in your browser; the site still works, but you may need to sign in again.
How long we keep it
- Report subscriptions: until you unsubscribe, plus a suppression record of your email so we don't email you again.
- Account and brand data: while your account is open.
- Closing your account: you can still export your data for 30 days after you close it, and we finish deleting it within 90 days of closure.
- Asking us to delete your data now: we skip the export window and delete within 30 days of confirming your request.
- In both cases we keep only what we must for tax, legal or security reasons.
- Data from a disconnected store: see "Disconnect your store" on our Data deletion page.
- Website logs: 12 months.
Your rights
Depending on where you live, including California, other US states, the European Economic Area and the United Kingdom, you may have the right to:
- know what personal information we hold about you;
- get a copy of it;
- correct it;
- delete it;
- object to or limit how we use it;
- move it to another service.
To make a request, write to [email protected] or use the steps on our Data deletion page. We will confirm your request and answer within the time the law sets, usually 30 to 45 days. We won't treat you differently for using these rights. An authorized agent can make a request for you with your written permission.
If you are in the EEA or the UK, the legal bases we rely on are:
- the contract with you, to provide the service;
- your consent, for marketing emails and for analytics and advertising cookies;
- our legitimate interests, to run and secure the service;
- legal obligation.
You can withdraw consent at any time, as easily as you gave it: use the unsubscribe link in any email, or the "Your privacy choices" link at the bottom of every page to change your cookie choices. Withdrawing consent doesn't affect processing that happened before. You can also complain to your local data protection authority.
International transfers
We are based in the United States, and your information is processed in the United States. Where the law requires it, we use standard contractual clauses or another approved safeguard for transfers.
Security
We protect information with encryption in transit, access controls, and separation between brands. No method is perfectly secure. More detail is on our Security page.
Children
AiNDREA is a business service for people 18 and older. We do not knowingly collect information from children. If you believe a child has given us information, write to [email protected] and we will delete it.
Changes
If we change this policy, we will post the new version here with a new effective date. If a change is significant, we will also tell account holders and subscribers by email before it takes effect.