Privacy Policy

Kaftan AI is a product operated by Zerosoft Technologies Ltd ("Zerosoft", "we", "us", or "our"). We operate the Kaftan AI customer mobile app, the Kaftan AI Tailor mobile app, the kaftanai.com website, and related online services (collectively, the "Services").

This Privacy Policy explains what personal information we collect, why we collect it, how we use and share it, and the choices available to you. By using the Services, you acknowledge that you have read this Privacy Policy.

For the purposes of applicable data protection laws, including the Nigeria Data Protection Regulation (NDPR), Zerosoft Technologies Ltd is the data controller responsible for personal information processed in connection with Kaftan AI and the Services.

Contact: [email protected]

• Customers — individuals who browse tailors and shop listings, use Studio design tools, save collections, and place custom kaftan orders.
• Tailors — business users who register a shop, submit onboarding information, manage orders, publish listings, and interact with customers through the platform.
• Website visitors — individuals who visit kaftanai.com without creating an account.

We collect information you provide directly, information generated through your use of the Services, and limited technical data from your device.

4.1 Account and profile information

• Name and email address when you register or sign in.
• Authentication credentials. Passwords are stored using industry-standard one-way hashing; we do not store plain-text passwords.
• If you use Google Sign-In (web or customer app) or Sign in with Apple (customer app on iOS), we receive identifiers and profile information permitted by those providers (such as your name and email address).
• Profile settings, preferences, and optional budget limits you configure.

4.2 Tailor business information

• Shop or business name, bio, specialties, and availability notes.
• Business address, city, state, phone number, and map coordinates you provide during onboarding.
• Portfolio images, shop listing photos, and related business content.
• Order acceptance settings and shop status information.

4.3 Orders, designs, and measurements

• Delivery address and contact details for fulfillment.
• Body measurements, garment preferences, and design instructions.
• Uploaded fabric photos, generated design images, and Studio session history.
• Order status, timestamps, and communications necessary to fulfill orders.

4.4 Wallet and credit top-ups (customers)

• When you create a dedicated bank-transfer wallet for credit top-ups, we collect information required to verify your identity under applicable regulations, such as National Identification Number (NIN), date of birth, and account holder name.
• Sensitive identity data is verified through our identity verification partner and stored in hashed or minimized form where possible. We do not display your full NIN in the app or on the website.
• Credit balance, top-up history, usage ledger entries, and Paystack transaction references.

4.5 Device permissions (customer app)

• Location — with your permission, approximate device location is used to show tailors near you. We do not continuously track your location in the background.
• Camera and photo library — used when you choose to upload fabric photos or portfolio images.
• Microphone — with your permission, used for optional Hausa voice prompts in Studio. Audio is processed to fulfill your request and is not sold to third parties.

4.6 Technical and usage data

• IP address, browser or app version, device type, and operating system.
• Server logs, security events, and diagnostic information used to maintain and protect the Services.
• Feature usage related to credits, generations, and account activity.

We use personal information to:

• Provide, operate, maintain, and improve the Services.
• Create and secure your account, authenticate sign-in, and prevent fraud or abuse.
• Connect customers with tailors and facilitate custom orders and shop purchases.
• Review tailor applications and manage shop approval, suspension, or removal.
• Generate AI design previews, manage credits, and record usage.
• Provision wallet accounts, process bank-transfer top-ups, and credit your balance.
• Send transactional communications such as email verification, password reset, and order updates.
• Respond to support requests and enforce our Terms of Service.
• Comply with legal obligations and protect the rights, safety, and security of users and Zerosoft.

Where applicable under the NDPR and similar laws, we rely on one or more of the following legal bases:

• Contract — processing necessary to provide the Services you request, such as account creation, order fulfillment, and credit top-ups.
• Consent — for optional features such as location access, microphone access, and marketing communications where required.
• Legitimate interests — to secure the platform, prevent abuse, improve features, and support users, balanced against your rights.
• Legal obligation — where we must retain or disclose information to comply with law, regulation, or valid legal process.

We do not sell your personal information. We share information only as described below:

• Between customers and tailors — order details, measurements, delivery information, and design assets needed to fulfill an order or listing purchase.
• Public tailor profiles — information tailors choose to publish (such as shop name, location, portfolio, listings, ratings, and availability) may be visible to other users and visitors.
• Service providers — vendors that help us host infrastructure, deliver email, process payments, verify identity, run AI inference, and operate the platform under contractual confidentiality and security obligations.
• Legal and safety — when required by law, regulation, court order, or government request, or when we believe disclosure is necessary to protect rights, safety, or security.
• Business transfers — in connection with a merger, acquisition, financing, or sale of assets, subject to appropriate confidentiality protections.

We use trusted third parties to operate parts of the Services. These may include providers for:

• Cloud hosting and file storage.
• Email delivery and authentication.
• Google Sign-In and Sign in with Apple.
• Paystack for dedicated virtual accounts and payment notifications.
• Identity verification partners for wallet KYC checks.
• AI model providers used to generate design previews from your prompts and uploads.

Each provider processes data according to its own privacy practices and our agreements with them. We encourage you to review the privacy policies of sign-in providers you choose to use.

Studio features use automated systems, including AI models, to interpret text or voice prompts and generate design previews from images and descriptions you provide. Inputs may be transmitted to AI service providers for processing.

AI outputs are illustrative and may be inaccurate or incomplete. We use generation history and related metadata to operate credits, improve reliability, and prevent abuse. We do not use your private order or measurement data to train public models without a separate, explicit basis.

Credit top-ups through a dedicated bank account are processed via Paystack. When you initiate wallet creation, we verify identity information to comply with financial and anti-fraud requirements. Payment confirmations are received through Paystack webhooks and credited to your account.

Zerosoft does not store full bank account credentials for your personal bank. Dedicated account details displayed in the app are issued for inbound transfers to fund your Kaftan AI credit balance.

On the website, we use cookies and similar technologies to keep you signed in, remember preferences, and protect against abuse. Session cookies are essential for authentication. You can control non-essential cookies through your browser settings; disabling essential cookies may limit website functionality.

Mobile apps do not use advertising cookies. Local storage on device may cache session tokens and app preferences.

We implement administrative, technical, and organizational measures designed to protect personal information, including encryption in transit (HTTPS/TLS), hashed password storage, access controls, and monitoring for suspicious activity. No method of transmission or storage is completely secure; we cannot guarantee absolute security.

We retain personal information for as long as your account is active or as needed to provide the Services, comply with legal obligations, resolve disputes, and enforce agreements. When you delete your account, we delete or anonymize personal information within a reasonable period, except where retention is required by law or for legitimate business purposes such as fraud prevention, financial record-keeping, or backup integrity.

Depending on your location and applicable law, you may have the right to:

• Access personal information we hold about you.
• Request correction of inaccurate or incomplete information.
• Withdraw consent where processing is based on consent.
• Object to or restrict certain processing.
• Request deletion of your account and associated personal information.
• Lodge a complaint with a relevant data protection authority.

You can update much of your profile information in the app or on the website. You may revoke device permissions (location, microphone, camera) in your device settings at any time.

To exercise your rights, contact [email protected]. We may need to verify your identity before fulfilling a request.

You may delete your account in the Kaftan AI customer app under Account → Danger zone → Delete account, in the Kaftan AI Tailor app under Profile, or by contacting [email protected]. Google and Apple sign-in accounts confirm deletion by typing DELETE; email accounts require your password.

Account deletion is subject to completion of outstanding obligations (such as open orders where applicable) and legal retention requirements. Where a Paystack wallet exists, we will take reasonable steps to deactivate associated dedicated accounts as part of the deletion process.

The Services are not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us personal information, contact us and we will take appropriate steps to delete it.

Zerosoft Technologies Ltd is based in Federal Republic of Nigeria. Your information may be processed in Nigeria and in other countries where our service providers operate. Where required, we implement appropriate safeguards for cross-border transfers consistent with applicable law.

We may update this Privacy Policy from time to time. When we make material changes, we will post the updated policy on this page and revise the "Last updated" date. Continued use of the Services after changes become effective constitutes acknowledgment of the updated policy. We encourage you to review this page periodically.

For privacy questions, requests, or complaints, contact us at [email protected].