Trust & Security

• Email + password and Google sign-in are supported.
• Sessions are stored in your browser and refresh automatically.
• Administrative actions are restricted to staff accounts with an explicit admin role.
• Roles (client, tailor, admin) are assigned at sign-up or by an admin — never self-granted from the app.

• Your profile, measurements, appointments, and messages are stored in our managed backend with row-level access rules.
• You can only read and edit your own data. Tailors only see clients who have shared with them or booked an appointment.
• File uploads (avatars, scan photos, chat attachments) are served via short-lived signed links.
• Sensitive profile fields (notification and privacy preferences, subscription status) are visible only to you and admins.

• Privacy settings let you choose who can find you, message you, and view your portfolio.
• Notification preferences let you turn off specific categories of alerts.
• You can delete your account from the profile page; this removes your sign-in and associated data.

We use trusted infrastructure providers to host the app, store data and files, send email, and (optionally) power AI features. We share with subprocessors only the data needed to deliver these services.

If you believe you have found a security vulnerability, please email support@tailorsmate.com with steps to reproduce. We aim to acknowledge reports within a few business days.