Data Processing Agreement

Purpose and scope

This Data Processing Agreement (“DPA”) applies to the content your organization sends to Kibbe.ai — product images, catalogs, SKUs and queries (“customer data”). It sits alongside our Terms of Service and Privacy Policy.

For customer data, your organization is the “Controller” and Kibbe.ai is the “Processor”. We process it only on your instructions and only to provide the API to you.

Duration

Processing lasts for as long as your organization uses the service and ends once customer data has been deleted or returned as described below.

Nature and purpose of processing

Images and catalog rows are analysed to return attributes, embeddings for search, similar items and fit scores. Uploaded catalogs are indexed so you can search them. We do not mix your catalog into another customer’s results, and we do not use your content to train models shared with other customers without your written opt-in.

Categories of data

Customer data is usually product data — images, titles, descriptions, prices and SKUs. Product imagery may contain models’ faces or bodies; we process these only to describe the garment, never to identify the person.

Sub-processors

We use cloud infrastructure and model-hosting providers to run the service. A current list is available on request at hello@kibbe.ai, and we will give notice before adding a new sub-processor.

Security

See our Security page for the technical and organizational measures we apply.

Data subject requests

If someone exercises a data-protection right over personal data contained in your content, we will reasonably help your organization respond.

Breach notification

If we become aware of a breach affecting customer data, we will notify you without undue delay and share details as we learn them.

Deletion or return of data

Images sent to /tag and /search are processed and not stored beyond 24 hours. Uploaded catalogs are deleted within 30 days of termination, or sooner on request, unless we are legally required to keep them.

Liability

Liability under this DPA follows the limits in our Terms of Service or your order form.

Requesting a countersigned copy

This page is our standard DPA for self-serve customers. If your procurement process needs a signed copy, email hello@kibbe.ai.