Privacy policy

We never ask for a photograph, an identity document, a receipt or a parcel. There is no upload field anywhere in this product.

There are 2 reasons and we state both. Holding passport scans beside women’s measurements is a liability no $19 sale can justify. And we have no address, so nothing can be sent to us anyway.

We never ask for a photo. We cannot see you.

This is the whole list.

• Your 2 to 4 body measurements, in the unit you chose.
• The bra size printed on the label of the bra you wear now.
• The fit complaints you picked from the chips.
• Your answers to the shape questions.
• The Looks you chose.
• Your email address, if you bought something.
• Payment records: what you bought, when, and for how much.

No photographs. No government identity documents. No home address. No date of birth. No card numbers.

The measurements and the answers exist to write your report. Without your ribs and your bust there is no verdict, only a guess.

Your email exists so we can send your report, open your Fit file by magic link, and send the 4 emails listed below.

Payment records exist because we took money and we have to be able to account for it, including for a refund.

We do not sell your data. We do not rent it, trade it or share it for advertising. There is no data broker in this business.

Typing a measurement into the Size check is your consent to use it for your verdict. Nothing is collected before you type it.

Your email is asked for at checkout, or in exchange for a code if you take the 3-question survey. It is never a gate before value.

You can withdraw consent at any time by deleting your Fit file or by emailing to-the-point@nanocorp.app. See withdrawing consent.

There are 4 triggers for an email, and no others.

• A brand in your Brand map redraws its size chart.
• A style on your shortlist is discontinued.
• Once, 21 days after purchase, to ask whether it fitted.
• Once after 90 days of silence, and then we stop.

No newsletter. No retargeting. No review requests, ever. The full rules are on the anti-spam page.

Payments are processed by Stripe on Stripe’s own hosted page. We never see or store a full card number.

NanoCorp is the merchant of record and NanoCorp is what appears on your card statement.

Stripe holds your card details under its own terms and its own privacy policy. We hold only the record of the charge.

We count page visits and which buttons are pressed. That is the whole of it.

It is not tied to your name, your email or your measurements. We use it to see which page loses people, nothing else.

No advertising pixels. No cross-site tracking. No profiles sold on.

Your Fit file is kept for as long as you want it. It is the point of the product, and it is the one thing only we hold.

After 90 days of silence we send one email. If you ignore it we stop emailing you, and your Fit file stays where it is until you delete it.

Payment records are kept because tax and accounting rules require a record of money taken. They hold the charge, not your body.

Your Fit file is your access request, answered in advance. It opens by magic link and shows everything we hold about you.

If something in it is wrong, change it in the Fit file or email to-the-point@nanocorp.app and a person will correct it.

If you want it in a plain file to keep, ask at to-the-point@nanocorp.app and we will send it.

“Delete my Fit file” sits in your own Fit file. One confirmation, immediate and permanent, and we keep no copy.

There is no offer to stay and no exit survey. Measurements are the most intimate number a company can hold, and letting go of them cleanly is part of the promise.

To stop the email but keep the file, unsubscribe from any email we send. One click, honoured immediately.

The strongest thing we do is collect almost nothing. There is no photograph, no identity document and no address to lose.

Traffic to this site is encrypted. Your Fit file opens by a link sent to your email, never by a password we could leak.

We hold no certification and we claim no security standard we have not earned. What we can tell you truthfully is the size of the target: 2 to 4 numbers and an email.

If data we hold is ever exposed in a way that could harm you, we will email you and tell you what happened.

To The Point operates from Alberta, Canada. Alberta’s Personal Information Protection Act governs what we do with your information inside the province. PIPEDA governs it once it crosses a border. Both apply to us, and we hold ourselves to both.

Your data is stored outside Canada, in the United States. PIPA requires us to say so plainly, and to tell you who to ask about it. Here is the whole picture.

• Where. The United States. Our database is run by Neon and the site is run by Vercel, both US companies on US infrastructure.
• What goes there. Your four measurements, the answers you chose, anything you typed in a free-text box, and the email address you gave at checkout. No photograph, no identity document, no card number. We never receive a card number at all.
• Why. To store your Fit file so your secret link keeps working, and to serve you the pages. That is the only reason.
• What it means for you. While your data is in the United States, US courts and US law enforcement can reach it under US law. We cannot prevent that. You are entitled to know before you decide to give us anything.

Our written policy on that transfer is this page. You can also have it by email if you would rather keep a copy.

The person to ask, as PIPA requires us to name: the Privacy Officer of To The Point, reachable at to-the-point@nanocorp.app. That is a person, not a robot, and questions about the transfer, about access, or about a complaint all go there.

If we ever have a breach. Alberta law requires us to report a loss or unauthorised access to the Office of the Information and Privacy Commissioner of Alberta. We must do it without unreasonable delay, whenever there is a real risk of significant harm to you. That holds even if only one person is affected. We will also email you, whether or not we are ordered to.

You must be 18 or older to buy from us. If you are under 18, a parent or guardian has to do it.

The Mother and Daughter report exists because a first bra is usually bought by a mother. When you buy one, you are the customer. You enter both sets of measurements and the report comes back to you. You decide what your daughter sees. We never contact her and we never hold her email address.

Alberta law sets no fixed age at which a young person can consent for herself, so we take the cautious route. For anyone under 18, the parent or guardian consents. That parent or guardian can delete the whole file with one email.

We will not knowingly take measurements for a child under 12. If we learn we hold any, we delete them without being asked.

If you are in Canada, the Personal Information Protection and Electronic Documents Act applies to what we hold about you. We follow it. Its 10 fair information principles, in plain words, are below.

• Accountability. The founder of To The Point is answerable for your data. Email to-the-point@nanocorp.app and that is who you reach.
• Identifying purposes. We collect measurements to write your report and an email to deliver it. Those purposes are written above, not buried.
• Consent. You give it by typing your numbers and by buying. You can take it back at any time.
• Limiting collection. We ask for 2 to 4 measurements and stop. No photograph, no identity document, no address.
• Limiting use and disclosure. Your data writes your report. We do not sell it or share it for advertising.
• Accuracy. Your Fit file shows what we hold so you can see whether it is right, and correct it when it is not.
• Safeguards. Encrypted traffic, no passwords to leak, and almost nothing worth stealing.
• Openness. This page is the whole policy. There is no second document held back.
• Individual access. Your Fit file is open to you by magic link, and we will send it as a file if you ask.
• Challenging compliance. Email to-the-point@nanocorp.app. A person answers, and the next section says what to do if that answer is not enough.

Nothing on this page or in our terms reduces your rights under PIPEDA.

Email to-the-point@nanocorp.app first. Tell us what happened. A person reads it and answers, and we say plainly what we will do.

If our answer does not satisfy you, take it to the Office of the Privacy Commissioner of Canada. The Commissioner accepts complaints about any organisation covered by PIPEDA, including us.

You do not need our permission to complain, and we will not treat you differently for doing it.

If we change this policy we change the date at the top of the page.

If a change means we would hold something new about you, we will ask before we collect it.