Privacy Policy

1. Introduction & POPIA Commitment

At ThreadNode ("we", "us", or "our"), safeguarding your personal information is paramount. This Privacy Policy details how we collect, process, protect, and dispose of your data in strict compliance with South Africa's Protection of Personal Information Act 4 of 2013 (POPIA), the Electronic Communications and Transactions Act 25 of 2002 (ECTA), and the General Data Protection Regulation (GDPR) where applicable.

2. Information We Collect

To provide digital wardrobe organization, Personal Style Guide recommendations, and Virtual Fitting Room experiences, we collect:

• Account Credentials: Full name, email address, password hash, and provincial/city location.
• Wardrobe Assets: Digital garment photographs, brand tags, categories, purchase prices, and wear frequency.
• Fit Profile & Measurement Scalars: Voluntary body measurements (height, chest, waist, hips, inseam) used exclusively for Virtual Try-On proportion calibration.
• Usage Analytics: Anonymous interaction logs to improve outfit matching and wardrobe value reports.

3. Zero Raw Biometrics Storage Standard

We operate under an industry-leading Zero Raw Biometrics Storage architecture:

• Ephemeral Ingestion: User photos uploaded for Virtual Fitting Room previews are processed in an isolated sandbox and purged from storage immediately after proportion extraction.
• No Raw Biometrics Saved: We do not store unencrypted full-body photos in public storage buckets. We store only derived mathematical measurement scalars in encrypted user storage.
• No External Sharing: Your private wardrobe photos and measurements are never sold or shared with external advertising networks.

4. Purpose of Processing Personal Information

Personal information is processed strictly for legitimate operational purposes:

• To curate personalized outfit pairings and calculate Cost-Per-Wear (CPW) metrics in Rands (ZAR).
• To render realistic virtual try-on previews proportioned to your calibrated Fit Profile.
• To enable live product extraction and price comparisons inside the Store Browser.
• To deliver essential security notices, account verifications, and customer assistance.

5. Technical & Organizational Security Measures

We enforce end-to-end database Row Level Security (RLS) guaranteeing that users can only ever access their own authenticated records. All database volumes are secured with AES-256 encryption at rest.

6. Your Statutory Rights Under POPIA

Under Sections 23 and 24 of POPIA, you hold the following statutory rights:

• Right of Access: Request a full portable export of your personal data archive at any time.
• Right to Rectification: Instantly edit, update, or correct inaccurate measurements and wardrobe items.
• Right to Erasure ("Right to Be Forgotten"): Request complete, permanent account deletion and cryptographic scrubbing of all associated data.
• Right to Object: Object at any time to specific automated processing workflows.
• Right to Lodge a Complaint: Contact the Information Regulator (South Africa) at inforeg@justice.gov.za.

7. Contacting the Information Officer

For privacy inquiries, data export requests, or exercising your statutory rights under POPIA, please contact our designated Information Officer directly: