Privacy Policy

Effective Date: August 17, 2026 • Last Updated: August 17, 2026

About CotonAI

CotonAI Inc. (“CotonAI,” “we,” “us,” or “our”) provides a collaborative visual workspace for fashion and product teams. Depending on the features available, users may create visual boards, upload sketches and product information, explore variations, generate or edit images, collaborate through comments and annotations, manage product context, develop technical information, generate documents, and connect external business systems. CotonAI may act as a controller or business, or as a processor or service provider on behalf of an organizational customer. This Policy does not apply to third-party services with their own privacy policies.

Information We Collect

We may collect account information such as your name, email address, username, profile photograph, authentication credentials, company, job title, team, preferences, and workspace membership. We also process Customer Content that users upload, create, edit, generate, organize, or share, including sketches, garment and product photographs, references, technical drawings, design files, comments, creative briefs, product specifications, spreadsheets, documents, prompts, AI conversations, feedback, and attachments. You are responsible for ensuring that you have the rights and permissions needed to upload Customer Content.

AI Inputs and Outputs

When you use AI features, we may process prompts, selected canvas objects, uploaded images, sketches, masks, annotations, product information, conversation history, requested edits, generated images or video, and related metadata. This information may be processed by CotonAI and third-party AI infrastructure or model providers as necessary to provide the requested feature. Different features may use different providers. Applicable product terms, customer agreements, settings, and enterprise commitments govern any additional restrictions.

Model Training and Product Improvement

We may analyze technical and usage information, including feature usage, performance, latency, errors, aggregated interaction patterns, feedback, and model performance information, to improve safety, reliability, and usability. We may use deidentified or aggregated information for analytics, product development, research, and other lawful purposes. Identifiable Customer Content will be used for model training only as governed by applicable terms, agreements, settings, and commitments, including any optional program and related notice or controls.

Collaboration, Integrations, Payments, and Communications

Shared workspace members may see your profile, comments, annotations, activity, files, designs, generations, edits, and other content you intentionally share. Administrators may manage users, permissions, access, retention, exports, and workspace content. If you connect cloud storage, ecommerce, ERP, PLM, spreadsheet, DAM, communication, or other services, CotonAI may receive information according to the permissions you grant. If paid services are offered, we or payment providers may process billing, subscription, invoice, tax, and transaction information. If you contact us, request a demo, join a waitlist, attend an event, or contact support, we may retain your correspondence and related contact information.

Automatically Collected Information and Cookies

We may automatically collect IP address, browser and operating system, device type and identifiers, referring pages, pages visited, session and login activity, feature interactions, timestamps, approximate location, performance and crash information, security logs, and cookie or similar technology identifiers. Cookies, local storage, pixels, SDKs, and similar technologies may support authentication, security, sessions, fraud prevention, workspace features, privacy preferences, analytics, and marketing. Where required, we request consent before using nonessential technologies.

How We Use and Disclose Personal Information

We use personal information to provide and operate CotonAI; manage accounts and workspaces; authenticate users; process Customer Content and AI requests; provide support; improve performance; develop features; prevent abuse, fraud, and unauthorized access; enforce agreements; administer subscriptions and payments; provide integrations; communicate service announcements and permitted marketing; conduct analytics; comply with law; defend legal claims; and support corporate transactions. We may disclose information to hosting, database, authentication, delivery, analytics, support, communications, payment, cybersecurity, monitoring, file-processing, AI, and other service providers; your organization and authorized workspace members; professional advisers; authorities where legally required; and parties involved in financing, merger, acquisition, reorganization, asset sale, or similar transactions.

Legal Bases, Rights, and California Privacy

Where applicable, we process information based on contract performance, legitimate interests, consent, and legal obligations. Depending on your location, you may request access, correction, deletion, restriction, portability, objection, withdrawal of consent, marketing opt-out, or opt-out of sale or sharing where applicable. California residents may have rights regarding access, deletion, correction, disclosure, sale or sharing, sensitive personal information, and recognized opt-out preference signals such as Global Privacy Control. Requests may be sent to privacy@cotonai.com, and we may verify identity or work with an authorized agent.

Security, Retention, Transfers, and Account Termination

We use administrative, organizational, technical, and physical safeguards such as access control, authentication, encryption, network security, monitoring, logging, incident response, permissions, backups, and vendor management. No method is completely secure. We retain information only as reasonably necessary for service delivery, contracts, security, legal compliance, dispute resolution, and enforcement. CotonAI is based in the United States and may process information in other countries using appropriate transfer safeguards. Access to or export of Customer Content after termination depends on the applicable subscription, agreement, workspace settings, and law; backup and disaster-recovery copies may persist according to retention schedules.

Sensitive Information, Children, Marketing, and Public Content

CotonAI is not designed for unnecessary submission of highly sensitive information such as government identifiers, financial passwords, precise medical records, biometric templates, or authentication credentials. The service is not directed to children under 13. You may unsubscribe from marketing communications, but account, security, billing, legal, and service messages may continue. Content you intentionally publish or share publicly may be visible outside your organization and may be indexed, copied, downloaded, or shared. Third-party links and social platforms are governed by their own policies.