Privacy Policy

1. Who is responsible

When a shop takes a customer's photograph for a try-on, the shop decides why it is collected and how long it is kept. The shop is the data fiduciary for that customer, and inaivu IT processes the photo on the shop's behalf to provide UduthiPaar™. For shop staff accounts, this website and business enquiries, inaivu IT is responsible.

2. Data we process

• Shop customers: photographs taken for a try-on, an optional partner photo for a couple preview, optional measurements, the garments chosen, the AI previews made, and the consent record (wording, version, time and any withdrawal). Shops may also note a customer name or phone number on a session or order.
• Website shoppers (widget): the photo uploaded for a try-on, the product chosen, a random visitor identifier stored in the browser, and a hashed form of the IP address used to stop abuse.
• Shop staff and platform administrators: name, email, roles, sign-in times, actions taken in the app, and which version of the terms they accepted and when.
• Shops: business name, branches, address, billing contact, plan, usage, invoices and payments.
• Enquiries: details you give us when you ask for a demo or contact us.
• Technical: security events, error logs and rate-limit records.

We do not collect card or bank account details; invoices are paid outside the app.

3. Why we use it

To make the previews a shop or shopper asks for; to run, secure and support the service; to keep each shop's data separate; to apply budgets, limits and charges; to issue invoices; to keep records of consent; and to meet legal obligations. We do not sell personal data, use customer photographs for advertising, or use them to train AI models.

4. Photographs and AI processing

A customer's photograph is processed only after their consent is recorded. The photo, the garment images and instructions are sent to the AI provider set up for the shop (OpenAI, Google Gemini or FASHN AI) to make the preview. These providers may process data outside India. We use their business APIs and, where they offer the choice, settings under which the data is not used to train their models. AI previews are illustrations and may be inaccurate.

5. Where data is stored

The application runs on Google Cloud. The database, sign-in and file storage are provided by Supabase. Data is encrypted in transit (HTTPS) and at rest by these providers. Photos are stored privately and shown only through short-lived links. Access is limited to the shop's own staff, by role, and to a small number of authorised platform administrators.

6. How long we keep it

• Customer and partner photographs and AI previews: deleted after the shop's retention period (30 days unless agreed otherwise with the shop), or earlier when consent is withdrawn or the shop removes them.
• Try-on, consent and charge records, without the photos: kept for as long as the shop uses the service and as needed for billing, disputes and the law.
• Invoices and billing records: up to 8 years, as accounting and tax laws may require.
• Staff accounts: until the shop or we remove them; the record of terms accepted is kept as proof of consent.
• Security and rate-limit records: only as long as needed to protect the service.

7. Your rights

Under the DPDP Act you may ask for a summary of your personal data and how it is used, ask us to correct or erase it, withdraw consent, nominate someone to act for you, and raise a grievance. Withdrawing consent stops further processing; it does not undo processing already done lawfully.

A shop's customer should first ask the shop that took the photo: the shop can withdraw the consent in the app, which deletes that customer's photos and previews. You can also contact us directly. If you are not satisfied with our reply, you may complain to the Data Protection Board of India.

8. Children

A photograph of anyone under 18 must not be submitted without verifiable consent from a parent or lawful guardian. We do not knowingly track or target children.

9. Cookies and browser storage

We use only what the app needs to work: sign-in tokens, the shop and role you chose, and on the website widget a random visitor identifier. We do not use advertising or tracking cookies.

10. Contact and grievances

Privacy requests: privacy@inaivuit.com
Grievance Officer: Priyaraja Asokan, grievance@inaivuit.com
inaivu IT, 101 Periyakollappatti - Block 5, Periyakollappatti, Salem District, Tamil Nadu 636 808, India.

Please include the shop name, the approximate date and any session or request number. Do not email the customer's photograph. See Grievance Redressal for how and when we respond.

11. Changes

We may update this policy as the product, our providers or the law change. The effective date above shows the current version. When it changes materially, every user is asked to read and accept it again in the app.