Security & Privacy

Privacy is the default, not a setting.

Dopplr answers a fit question from a shopper's measurements, never from an image of her. There is no photo to upload, no camera to grant, and no likeness to store. Here's exactly what we handle, and how.

No photos No camera access No biometric identifiers No likeness stored Measurements only
Data minimization

What we use, and what we never touch.

The fit engine only needs enough to compute how a garment is likely to sit on a body. It is built to work with the least sensitive data possible.

What Dopplr uses

  • Shopper-provided measurements: underbust, overbust, and a bust-shape selection.
  • Garment specifications you supply: construction, wire, band, coverage, fabric behavior.
  • Anonymous interaction events: which questions were asked, which styles were viewed.

What Dopplr never uses

  • Photos or video of the shopper.
  • Camera or device sensor access.
  • Biometric identifiers or facial data.
  • Any recreated image or likeness of the shopper.
Data handling

How your data is handled.

Clear, stated policies: the ones your security and legal teams ask for on the first call.

Encryption

Data is encrypted in transit (TLS 1.2+) and at rest. Measurements are stored only as the values needed to compute fit.

Retention & deletion

Retention windows are agreed at kickoff. Shopper and brand data can be deleted on request, and on termination per your contract.

Access control

Least-privilege access, scoped to the people who operate your deployment. Actions are logged and auditable.

Data residency

US data can be hosted in US regions. Sub-processors and hosting locations are disclosed in your data-processing agreement.

Compliance posture

Built to pass your review.

Because Dopplr never handles photos or biometric data, the review surface is small by design. We support the obligations your team is accountable for:

GDPR & CCPA

Aligned with GDPR and CCPA principles: lawful basis, data-subject requests, and deletion supported. DPAs available.

Biometric-law friendly

No facial or biometric data means no exposure under BIPA-style biometric-privacy statutes, a question US intimate-apparel legal teams raise early.

Vendor security reviews

We complete security questionnaires and support your procurement and infosec process during evaluation.

Documentation on request

Our current security documentation, sub-processor list, and any formal certifications are shared under NDA during evaluation.

A note on certifications: we don't list badges we can't substantiate. Ask us where we are on SOC 2 and other standards, and we'll show you our current status and roadmap under NDA.

For the shopper

She never appears, because she never has to.

The 3D body a shopper sees is generated from the measurements she enters, not from a picture of her. Dopplr never captures, requests, or recreates an image of any shopper. That's not a privacy mode she has to find, it's the only way the product works.

Talk to our US team

Questions from security, legal, or procurement?

Tell us about your categories and goals, or send your security questionnaire, a member of our US team will follow up. Prefer to talk it through? Book a time that works for you.

US support & salesMon–Fri · 9:00am–6:00pm ET
PresenceUS HQ, Edison, NJ