Privacy Policy

Reef Digital Services GmbH, Friedrichstraße 207, 10969 Berlin, Germany, is the controller within the meaning of the GDPR (Datenschutz-Grundverordnung).

We collect personal data in the following contexts:

• Account & sign-in — email address, name, and any identity data shared by your federated identity provider (Google, Microsoft, Apple) via Amazon Cognito.
• Uploaded content — garment images, model images, and any associated metadata (file names, dimensions) you upload to the platform.
• Generated content — rendered images produced by our pipeline from your uploads, together with quality-judging metadata (scores, defect notes).
• Billing data — credit purchases, transaction records, and invoice details processed via Stripe.
• Operational telemetry — request logs, error traces, and usage metrics required to operate and secure the platform.

Data is processed to provide, operate, secure, improve, and bill our catalog rendering service.

Data is only shared with third parties where legally required or necessary for contract fulfilment. See section 11 for our list of named processors.

You have the right to access, rectify, delete, restrict, transfer your data, and object to processing under Articles 15–21 GDPR.

Data is stored only as long as necessary for the stated purposes or as required by statutory retention obligations (e.g. invoicing records under § 257 HGB). On account closure, uploaded and generated images are deleted within 30 days unless we are legally required to retain them.

For privacy concerns, contact us at: privacy@reef-digital.com.

We process data under Art. 6(1) lit. a (consent), lit. b (contract), and lit. f (legitimate interests), as applicable.

We use strictly necessary cookies for operation (authentication session). Non-essential cookies (e.g. analytics) are only used with your consent. See section 14 for details on our analytics usage and how to withdraw consent.

Where data is transferred to third countries, we implement appropriate safeguards under Art. 44 et seq. GDPR (in particular, EU Standard Contractual Clauses). Several of our processors (listed in section 11) are based in the United States.

We use the following processors under data processing agreements in accordance with Art. 28 GDPR:

• Amazon Web Services, Inc. (United States / EU regions) — identity (Cognito), object storage (S3), message queues (SQS), and supporting infrastructure.
• Stripe, Inc. (United States) — payment processing for credit purchases.
• FASHN AI Inc. (United States) — AI image rendering of uploaded garment + model imagery.
• Anthropic PBC (United States) — AI quality assessment of rendered images.

Data protection contact: privacy@reef-digital.com.

You have the right to lodge a complaint with a supervisory authority, in particular in your Member State of residence, place of work, or place of the alleged infringement.

On our public marketing pages (welcome, FAQ, imprint, privacy, terms) we use Google Analytics 4, provided by Google Ireland Limited / Google LLC, to understand which content helps designers and brands find us. The analytics scripts are loaded only after you click Accept on the cookie banner — never by default.

We do not sell or share personal data with third parties for advertising purposes, and we do not run profiling or cross-site tracking. Google Analytics is configured for aggregate audience and content analytics only.

You can withdraw your consent at any time via the Cookie settings link in the page footer. Doing so clears the consent flag and the analytics scripts will not load on subsequent visits unless you re-consent.

For Google's own privacy notice and opt-out options, see: policies.google.com/privacy and the browser add-on at tools.google.com/dlpage/gaoptout. We do not load any other analytics, advertising, or session-replay tooling.