Legal
Privacy Policy
MakeFit AI · Effective 21 July 2026 · UK GDPR & Data Protection Act 2018
1. Who we are
MakeFit AI (“we”, “us”) provides an AI-assisted garment manufacturing readiness platform for apparel businesses. We are the data controller for the personal data described in this policy.
“MakeFit AI” is a trading name of Wegox Global Limited, a company registered in England and Wales under company number 16580618, registered office at 71–75 Shelton Street, Covent Garden, London, United Kingdom, WC2H 9JQ. When you sign up for or use MakeFit AI, you are contracting with Wegox Global Limited.
Contact: hello@makefitai.co.uk
2. Data we collect
| Category | What | Source |
|---|---|---|
| Account data | Email address, full name, company name, industry type | You, at signup and in Settings |
| Authentication data | Magic-link session tokens; if you use “Continue with Google”, your Google account identifier and the name/email Google shares with us | Supabase Auth, Google |
| Garment report data | The garment specifications you enter to generate a report — garment type, fabric and material composition, construction detail, measurements, wash/care instructions, and any optional commercial or reference notes | You, via the report wizard |
| Generated report data | The AI-generated analysis produced from the above (risk scores, fit predictions, compliance notes, etc.) | Generated by us using Google's Gemini model |
| Billing data | Your subscription tier and status, and a reference ID linking your account to your Stripe customer record. We never receive or store your card number, expiry, or CVC — see the Terms of Service. | Stripe |
| Usage data | Report creation timestamps (used to enforce your plan's report limits), notification history, and standard web server logs (IP address, browser type, pages requested) | Automatically, from your use of the service |
We use only the cookies necessary to keep you signed in and operate the service — see Cookies below. We do not currently use analytics or advertising cookies or trackers.
3. How we use your data
- To provide the service — create your account, generate and store your reports, enforce your plan's report limits, process payments and manage your subscription. Legal basis: performance of our contract with you.
- To communicate with you — service notifications (report ready, payment failed), responses to support requests. Legal basis: contract performance and our legitimate interest in running the service.
- To improve the service — understanding aggregate usage patterns to fix bugs and prioritise features. Legal basis: legitimate interest.
- To meet legal obligations — accounting records, responding to lawful requests from authorities. Legal basis: legal obligation.
We do not use your garment report data to train AI models, and we do not sell your personal data to third parties.
4. Who we share it with
We share personal data with the following processors, each acting under a data processing agreement:
| Processor | Purpose | What they see |
|---|---|---|
| Supabase | Database hosting, authentication | All account and report data described above |
| Stripe | Payment processing, subscription billing | Your name, email, and payment details — Stripe collects and stores your card details directly; we never receive them |
| Google (Gemini API) | Generating your garment report's analysis | The garment specification data you enter for that report |
| Google (OAuth) | “Continue with Google” sign-in, if you use it | Your Google account identifier and the name/email you authorise Google to share |
We do not otherwise share your personal data with third parties, except where required by law or to protect our legal rights.
Report share links
If you generate a share link for a report (Production Pro plan and above), anyone with that link can view a read-only copy of that report's content, without needing a MakeFit AI account. Treat share links like any other confidential document link — anyone who has the link can view the report until you revoke it or it expires. You control creation, expiry, and revocation of these links from the report view.
5. International transfers
Our database is hosted by Supabase in London, United Kingdom. Google's Gemini API and Google OAuth may process data on servers outside the UK, including in the United States. Where we transfer personal data outside the UK, we rely on the UK's International Data Transfer Addendum (or equivalent adequacy/standard contractual clause mechanisms) with our processors.
6. How long we keep it
- Account data — for as long as your account is active, plus a limited period afterwards for legal/accounting purposes (see the “Delete my account” process in Settings).
- Report data — for as long as your account is active, or until you delete a specific report or your account.
- Billing records — retained for 6 years after the tax year they relate to, to meet UK accounting and tax obligations, even after account deletion. Deleting your account cancels any active subscription but does not delete the underlying Stripe customer record, which Stripe itself retains for this purpose.
- Server logs — routinely rotated; not kept indefinitely.
7. Your rights
Under UK GDPR, you have the right to:
- Access the personal data we hold about you — use “Export my data” in Settings for a self-serve copy, or contact us.
- Rectify inaccurate data — most fields are editable directly in Settings.
- Erase your data — use “Delete my account” in Settings, subject to the legal retention described above.
- Restrict or object to certain processing.
- Port your data to another provider in a structured, machine-readable format.
- Withdraw consent at any time, where we rely on consent.
To exercise any of these rights beyond the self-serve tools in Settings, contact hello@makefitai.co.uk.
8. Security
We apply technical and organisational measures appropriate to the risk, including row-level database access controls scoped to each account, encrypted connections, and restricting billing-state changes to a single verified code path. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
9. Cookies
We use only the cookies necessary to keep you signed in and to operate the service (session and authentication cookies). We do not currently use analytics or advertising cookies.
10. Children
MakeFit AI is a business-to-business service intended for use by apparel industry professionals. It is not directed at, and we do not knowingly collect data from, children under 18.
11. Changes to this policy
We'll post any changes to this page and update the effective date above. For material changes, we'll also notify account holders directly.
12. Contact & complaints
Questions about this policy: hello@makefitai.co.uk
You also have the right to lodge a complaint with the UK's data protection regulator, the Information Commissioner's Office (ICO): ico.org.uk, 0303 123 1113. We are currently reviewing whether formal ICO registration applies to our processing activities, via the ICO's own self-assessment tool.