Privacy Policy

Introduction

This Privacy Policy explains how personal information is collected, used, shared, and kept when you use Entersize: the website, a merchant account, size charts, Size Finder, or a storefront embed on WooCommerce or Shopify.

Entersize is a business tool for merchants and store operators. Where mandatory consumer or data-protection rules apply to you, they prevail over any conflicting part of this policy.

Who we are

Entersize is established in Poland. The data controller for accounts, this website, billing, and support is Jakub Jakubik, a sole trader entered in CEIDG, at Stara Góra 6D, 56-200 Stara Góra, Poland, NIP 5010083817, REGON 525332112.

Privacy questions, access requests, and complaints: hello@entersize.com. In Poland, you may also complain to the President of the Personal Data Protection Office (UODO).

Controller and processor

We are the controller for merchant accounts, organization settings, billing, contact messages, and visitors to this website.

When you connect a store or enable a storefront embed, you are the controller for your catalog and for shoppers who use the tools on your store. We process that data on your instructions to show size charts and run Size Finder. A short processing clause is in the Terms of Service.

We are also a controller for a narrow set of our own purposes: counting Size Finder predictions against a plan, blocking repeated requests, securing the service, and testing and improving the accuracy of Size Finder recommendations. We do not build a shopper profile across stores, and we do not take orders or returns from the merchant.

Where data comes from

Most of it comes from you: the account form, Google if you use it to sign in, what you type into the app, and the contact form.

A connected WooCommerce or Shopify store sends the product fields described below. We do not receive order history, return history, or a customer list from those platforms.

A shopper's browser sends a product identifier when a size chart loads, and the Size Finder answers when the shopper submits them. We do not buy personal data from brokers or other merchants.

Information from merchants

Account data: first name, last name, email address, a password hash if you use a password, email verification status, and an optional profile image. Email sign-up uses a short-lived verification code. Password reset uses a one-time link.

Google sign-in, if you use it: your Google account identifier, name, email, profile image, and the tokens needed to keep that login connected. We do not receive your Google password.

Session and security data: a session cookie, session expiry, IP address, browser user agent, and timestamps. Sign-in sessions last about seven days and refresh while you use the app. Rate-limit counters store a hash of an IP address or email, not the raw value.

What you create in the app: organization name, plan, measurement-unit preference, size charts, chart rules, product assignments, embed appearance, and similar configuration.

From a connected store we read product data needed to match charts: product id, title, handle, SKU, thumbnail, and brand, category, and tag values. WooCommerce access uses the API credentials you connect. Shopify access is limited to reading products. We do not receive the store owner's phone number or postal address from Shopify, and we do not pull customer accounts or orders from either platform.

Billing data: plan, subscription status, Stripe customer and subscription identifiers, and Size Finder usage counts used for included limits and overage. Card numbers stay with Stripe.

Contact data: name, work email, company or store, and message sent through the contact form. We email you to verify an address, reset a password, or reply to that message. We do not send a marketing newsletter.

Information from shoppers

A size chart on its own does not ask a shopper for body measurements. It loads the chart for the product being viewed. That request can include a product identifier and the technical data needed to pick the chart.

Size Finder, when the merchant turns it on, asks for the answers needed to recommend a size. Depending on the product, that can include height, weight, age, gender, fit preference, body-shape answers, bra size, and a size the shopper already wears. We store those answers, the product, the recommended size (or, for a product sold in one size, the estimated chance that size fits), and an optional vote on the merchant's organization: whether the result was helpful and, after a not helpful vote, which way they expected it to go: a smaller or larger size, or, for a product sold in one size, a tighter or looser fit.

With each prediction we also keep a technical record of how the size was chosen: the algorithm version, the version of the size chart used, and the steps of the calculation. We use it, together with the snapshot and any vote, to check and improve the accuracy of recommendations and fit estimates.

We do not store a shopper's name, email address, Shopify or WooCommerce customer id, payment details, or shipping address as part of Size Finder. The snapshot is not linked to a customer profile. A hash of the same inputs is kept so a repeated request is not billed twice.

To show the last recommendation again, Size Finder saves the shopper's answers and result in the browser's local storage on that store, separately for each size chart. They stay on the device until the shopper uses Reset or clears the site data. Size Finder does not set a visitor id, and this copy is not sent to us except as part of a new request. The demo on this website calculates a size in the request and does not save the measurements.

A recommendation is an estimate from the chart and the answers given. It is not a guarantee of fit. The shopper's browser may load Instrument Sans from Google Fonts for the embed popup. Merchants must cover the embed and Size Finder in their own customer privacy notices where the law requires it.

Merchant analytics show counts, such as predictions and matches over time. They do not show an individual shopper's measurements.

How we use information

We use this information to provide Entersize, secure accounts, connect stores, resolve size charts, calculate a size, show merchants aggregate usage, process subscriptions, send the emails described above, answer contact messages, prevent abuse, and comply with law.

Shopper measurements are used to recommend a size for that product, meter the merchant's plan, block a repeated request, and improve the accuracy of Size Finder. For that last purpose we analyze predictions without a shopper's name or contact details, mostly in aggregate, for example to compare algorithm versions or to find charts where recommendations are often marked as not helpful. Improvements may benefit every store that uses Size Finder, but we never show one merchant's shopper data to another merchant. We do not use measurements to predict purchasing, tailor offers, or market to the shopper. A recommendation is an estimate. It is not a decision that produces a legal or similarly significant effect.

We do not sell personal information.

Legal bases

Merchant accounts, charts, store connections, and billing are processed to perform the contract with you. You can object where we rely on legitimate interests, as described under Your rights.

Security, fraud prevention, rate limits, and keeping the service reliable rely on legitimate interests. We have weighed those against the effect on the people involved. Billing and invoice records are also kept where tax or accounting law requires it.

Shopper measurements on a store are processed on the merchant's instructions, so the merchant sets the legal basis it gives its customers. Counting those predictions for the merchant's plan, and blocking repeats, is our legitimate interest and stays inside that limit.

Improving the accuracy of Size Finder relies on our legitimate interest in offering reliable recommendations, which also serves shoppers and merchants. We limit it to data without names or contact details, keep it for a limited time, and do not use it for marketing or profiling.

Analytics cookies on this website rely on your consent, given in the cookie banner. You can withdraw it at any time through Cookie settings in the footer. Otherwise, we ask for consent only when we say so at the time. We do not send marketing email, so there is no marketing list to opt out of.

Sharing and subprocessors

We do not sell personal information, and we do not share shopper measurements with advertisers or data brokers. We share data with the providers below only as needed to run Entersize, and when the law, a court, or a need to protect rights and security requires it. We may also share it in a merger or asset transfer, with appropriate safeguards.

Connecting a store exchanges product and credential data with that WooCommerce store or with Shopify. Disconnecting a store, uninstalling the Shopify app, or a Shopify shop-redact request removes the stored connection and the product index for that store. Size Finder snapshots stay with the organization until the account is deleted.

• A database hosting provider stores the database, including merchant configuration and Size Finder snapshots.
• Stripe handles payments, subscriptions, and Size Finder overage. It receives merchant billing identifiers, not shopper measurements.
• An email delivery provider sends verification, password-reset, and contact email.
• Google is used for optional sign-in, for Google Analytics on this website if you accept analytics cookies, and for Google Fonts in the storefront embed popup. Analytics is not loaded inside the storefront embed.
• Shopify and WooCommerce receive the calls needed to read products and to show the embed on the merchant's store.
• For stores that install Entersize from Shopify, Shopify bills the plan. We send Shopify a count of Size Finder overage predictions for the shop, not shopper measurements.

International transfers

We are established in Poland. Data may also be processed in the European Economic Area and in other countries where our providers operate, including the United States for Stripe, Google, our email delivery provider, and depending on region, our database hosting provider.

Where required, transfers use an adequacy decision, Standard Contractual Clauses, or another lawful safeguard. Email hello@entersize.com if you want the names of our providers or more detail on the safeguard used for a given provider.

Retention

Account, organization, chart, and Size Finder data is kept while the account is active. Deleting the account cancels billing and deletes the user, organization, charts, and Size Finder snapshots, subject to backups and records we must keep for tax, accounting, or disputes.

Size Finder snapshots remain on the merchant's organization until that account is deleted, so the merchant's usage and billing history stay complete. We use a snapshot to improve Size Finder only for 12 months after the prediction. The technical record of how the size was chosen is deleted 12 months after the prediction, or earlier if the account is deleted. Results of that work that cannot identify a shopper, such as accuracy statistics, may be kept longer.

The copy of answers in the shopper's browser stays there until the shopper uses Reset or clears the site data.

Store credentials and the product index are removed when you disconnect a store, delete the account, or when Shopify sends a shop-redact webhook. Verification codes expire in about ten minutes and are stored hashed. Password-reset links expire in about one hour. Sessions expire with the cookie. Rate-limit rows are short-lived counters. Contact messages are kept until the matter is closed.

Invoices and other billing records are kept for as long as Polish tax and accounting law requires. Data needed for a legal claim is kept while that claim is open and for as long as the claim can still be brought.

Security

Store credentials and Shopify tokens are encrypted at rest. Organizations are isolated from each other. Passwords are stored as hashes.

No online service can guarantee absolute security. You are responsible for keeping login details confidential and for controlling who can use your organization.

Your rights

If GDPR applies, you may ask to access, correct, erase, or restrict processing of your personal data, and to receive a portable copy where processing is based on contract or consent. You can update your profile in the app and delete your account there. You may withdraw consent at any time where processing is consent-based.

You may object to processing based on legitimate interests. We will stop unless we have a compelling reason that overrides your interests, or we need the data for a legal claim. There is no direct-marketing list to object to.

We do not sell personal information. If a US state privacy law applies to a request, email hello@entersize.com and we will handle what that law requires. We do not share personal information for cross-context advertising.

Shoppers who used Size Finder on a store should contact that store first. We do not hold their name or email, so we usually cannot find a snapshot from a Shopify or WooCommerce customer id alone.

A shopper can also object to the use of their Size Finder answers for improving recommendations by emailing hello@entersize.com. To let us find the right snapshot, include the store, the product, the approximate date and time, and the answers given. We will then stop using that snapshot for this purpose.

You can complain to the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warszawa, Poland, uodo.gov.pl.

Cookies and similar technologies

Signed-in app: we set cookies that are necessary to keep you signed in, finish email verification, and protect the service. The session cookie lasts about seven days. A short-lived signup cookie may be set while email verification is pending.

Storefront embed: the size chart and Size Finder do not set cookies. Size Finder saves the shopper's last answers and result in local storage so the recommendation can be shown again, as described above. The embed may request a chart or a size recommendation from our servers.

This website: Google Analytics loads only on our public pages and only after you accept analytics cookies in the cookie banner. Google may then set analytics cookies and receive technical data such as pages viewed, device, and approximate location. It is not loaded in the signed-in app or the storefront embed, and it is not required to use Entersize. We store your choice in a cookie_consent cookie for about six months. You can change it at any time through Cookie settings in the footer. We do not use advertising cookies.

Children

Accounts are for merchants and authorized business users. We do not knowingly collect account data from children.

A shopper may use Size Finder while buying for a child. We do not ask for that child's name. If you believe a child has given us account information, email hello@entersize.com and we will delete it.

Changes to this policy

We may update this Privacy Policy to reflect product, legal, or security changes. Material updates should be communicated in a reasonable way, such as through the app, email, or this website.

The date at the top of this page shows when the policy was last updated.