Privacy is the default, not a setting.
Dopplr answers a fit question from a shopper's measurements, never from an image of her. There is no photo to upload, no camera to grant, and no likeness to store. Here's exactly what we handle, and how.
What we use, and what we never touch.
The fit engine only needs enough to compute how a garment is likely to sit on a body. It is built to work with the least sensitive data possible.
What Dopplr uses
- Shopper-provided measurements: underbust, overbust, and a bust-shape selection.
- Garment specifications you supply: construction, wire, band, coverage, fabric behavior.
- Anonymous interaction events: which questions were asked, which styles were viewed.
What Dopplr never uses
- Photos or video of the shopper.
- Camera or device sensor access.
- Biometric identifiers or facial data.
- Any recreated image or likeness of the shopper.
How your data is handled.
Clear, stated policies: the ones your security and legal teams ask for on the first call.
Encryption
Data is encrypted in transit (TLS 1.2+) and at rest. Measurements are stored only as the values needed to compute fit.
Retention & deletion
Retention windows are agreed at kickoff. Shopper and brand data can be deleted on request, and on termination per your contract.
Access control
Least-privilege access, scoped to the people who operate your deployment. Actions are logged and auditable.
Data residency
US data can be hosted in US regions. Sub-processors and hosting locations are disclosed in your data-processing agreement.
Built to pass your review.
Because Dopplr never handles photos or biometric data, the review surface is small by design. We support the obligations your team is accountable for:
GDPR & CCPA
Aligned with GDPR and CCPA principles: lawful basis, data-subject requests, and deletion supported. DPAs available.
Biometric-law friendly
No facial or biometric data means no exposure under BIPA-style biometric-privacy statutes, a question US intimate-apparel legal teams raise early.
Vendor security reviews
We complete security questionnaires and support your procurement and infosec process during evaluation.
Documentation on request
Our current security documentation, sub-processor list, and any formal certifications are shared under NDA during evaluation.
A note on certifications: we don't list badges we can't substantiate. Ask us where we are on SOC 2 and other standards, and we'll show you our current status and roadmap under NDA.
She never appears, because she never has to.
The 3D body a shopper sees is generated from the measurements she enters, not from a picture of her. Dopplr never captures, requests, or recreates an image of any shopper. That's not a privacy mode she has to find, it's the only way the product works.
Questions from security, legal, or procurement?
Tell us about your categories and goals, or send your security questionnaire, a member of our US team will follow up. Prefer to talk it through? Book a time that works for you.