This policy explains what personal data Shopdresser (“we”) handles when you visit https://shopdresser.com/, use Shopdresser as a business, apply as a creator, or receive a message that a business sent through Shopdresser — and what your rights are.
1. Two different roles
For our own customers and visitors we are the controller. This covers the account of a business owner, a creator's profile, people who write to us, and visitors of this website.
For the customers of a business we are a processor. A café, a salon or a shop that uses Shopdresser adds its own customers' contact details and decides what is sent to them. That business is the controller; we handle the data on its instructions under the Data processing agreement. If you are a customer of such a business and have a question or a request about your data, you can ask that business — or write to us at zyagency20@gmail.com and we pass it on and help it answer.
2. What we handle, why, and for how long
| Who | What | Why (legal basis) | How long |
|---|---|---|---|
| Business owners | Email, password (stored only as a hash), business name and details, survey answers, language, plan and payment status, the version of the terms accepted and when | To provide the service (contract) | While the account exists; deleted when you delete the account, or automatically 12 months after your plan or trial ended (we warn you by email 30 days before) |
| Business owners | Invoices and payment records (handled by Stripe; we store no card numbers) | Legal obligation (accounting and tax law) | As long as the law requires, usually 10 years |
| Creators | Name, email, city, country, social media names, follower count, price, topics; offers accepted and posts delivered | To match you with businesses and pay you (steps before a contract, and contract) | While your profile is active; deleted on request |
| People who contact us or report a problem | Name, email, your message | To answer you and to handle the report (legitimate interest; for reports also legal obligation) | Reports: 2 years after the matter is closed, then deleted automatically. Messages sent through the contact form reach our mailbox and are deleted there within 2 years |
| Visitors of this website and of business pages | The address of your device is used by the server to deliver the page, to stop abuse (rate limits) and to count a person who gets in touch with a business once and not several times. For the last two, only a keyed one-way mark of the address is kept; it cannot be turned back into the address and is not stored in a profile. Counts of page views and taps are kept per day without any identifier. | To run and protect the site, and to count fairly (legitimate interest) | Rate-limit marks: at most one hour. The mark that counts a person once: at most 24 hours. Daily counts hold no personal data. |
| People who use the question box (“Ask”) | The question you type. It is not stored. Where an AI model words the answer, the question is sent to that provider. | To answer your question (legitimate interest) | Not kept by us |
| Customers of a business (we act as processor) | Name, email or phone, language, date of last visit, whether you agreed to receive news, messages sent to you and whether you opened the link, feedback you gave | Decided by the business: usually its legitimate interest in asking its own customers for feedback, and your consent for news and offers | Until the business deletes it or closes its account |
3. Cookies
We set only cookies that are needed for the site to work, such as the one that keeps you logged in. We use no advertising cookies and no third-party analytics. Details: Cookie policy.
4. Who receives data
We do not sell personal data and do not share it for advertising. We use a small number of companies to run the service — hosting, payments, text generation and, where a business switches them on, messaging channels. They are listed, with what each one does and where, on the Subprocessors page. We may also disclose data where the law obliges us to.
5. Where data is stored and transfers abroad
The service runs on servers in France (European Union). Some of the companies we use are based in, or use servers in, countries outside the European Economic Area, in particular the United States. For such transfers we rely on an adequacy decision of the European Commission where one applies (such as the EU–US Data Privacy Framework for certified companies) and otherwise on the Commission's standard contractual clauses.
6. Artificial intelligence and automated decisions
An AI model drafts marketing texts from the facts a business provides. A person at that business approves them before they are public. We make no decisions about people by automated means that have a legal or similarly significant effect on them. More: How we use AI.
7. Security
How we protect accounts and data is described on the Security page. If a breach affects your data in a way that puts you at risk, we tell you and the authority as the law requires.
8. Your rights
You have the right to see the personal data we hold about you, to have it corrected or deleted, to restrict or object to its use, to receive it in a portable form, and to withdraw a consent you gave. Where the law of your country gives you further rights, you have those too.
- Business owners: in your dashboard under Settings you can download everything stored for your business and delete your account yourself.
- Customers of a business: every message has an unsubscribe link that works with one tap. For anything else, ask the business or write to us.
- Everyone: write to zyagency20@gmail.com. We answer within one month.
You may also complain to the data protection authority of the country where you live or work, or of Luxembourg.
9. Children
The service is for businesses. It is not directed at children, and we do not knowingly collect data about them.
10. Changes
When we change this policy we change the date at the top. If a change matters to you as an account holder, we also tell you by email.
11. Who is responsible
Shopdresser. Email for all privacy questions: zyagency20@gmail.com.