Privacy Policy

Last Updated: February 14, 2025

Effective Date: February 14, 2025

            ⚠️ Important: This Privacy Policy applies to users worldwide, including India, USA (California), Canada, UK, and the European Union. We comply with GDPR, CCPA, PIPEDA, UK GDPR, and India's Digital Personal Data Protection Act 2023.
        

1. Introduction

Welcome to Style My Bride ("we," "us," "our"). We are committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your information when you use our AI-powered virtual try-on service.

Our Service: Style My Bride is a virtual try-on platform that uses artificial intelligence to show you how traditional Indian bridal wear would look on you.

Data Controller Information:

Service Name: Style My Bride
Website: wedding-tryon.vercel.app
Contact Email: shipfast.pvt@gmail.com

2. Information We Collect

2.1 Information You Provide

Photos: You upload photos of yourself for virtual try-on processing
Email Address: When you sign up or create an account
Google Account Information: Name, email, and profile picture (if you sign in with Google)

2.2 Automatically Collected Information

Usage Data: Pages visited, features used, time spent on the service
Device Information: Browser type, device type, operating system
IP Address: For security, fraud prevention, and analytics
Cookies: Essential cookies for functionality (see Cookie Policy below)

2.3 Generated Content

AI-Generated Images: Virtual try-on results created by our AI

3. How We Use Your Information

3.1 Legal Basis for Processing (GDPR/UK GDPR)

We process your data based on:

Consent: You explicitly agree to upload photos and process them
Contract: To provide the virtual try-on service you requested
Legitimate Interest: To improve our service and prevent fraud

3.2 Purposes

✅ AI Processing: To generate virtual try-on images
✅ Service Delivery: To show you how outfits look on you
✅ Caching: To provide instant results for repeat try-ons
✅ Communication: To send service updates (with your consent)
✅ Analytics: To understand usage and improve the service
✅ Security: To prevent abuse and fraud
❌ We DO NOT: Sell your data, use it for advertising, or share with third parties for marketing

4. Data Storage and Retention

            ⏰ Important - Automatic Deletion:
            Original Photos: Deleted immediately after AI processing (within seconds)
Generated Images: Stored for 7 days, then automatically deleted
Email Addresses: Stored until you unsubscribe or request deletion
Analytics Data: Aggregated and anonymized after 90 days

        

4.1 Data Storage Location

Your data is stored on secure servers provided by:

Supabase: USA (AWS) - with encryption at rest and in transit
Vercel: Global CDN for website delivery
Railway: USA for backend processing

4.2 Data Security

✅ HTTPS/TLS encryption for all data transmission
✅ Encrypted storage (AES-256)
✅ Access controls and authentication
✅ Regular security audits
✅ Automatic deletion of expired data

5. Data Sharing and Third Parties

5.1 AI Processing Partners

Replicate: AI model hosting (USA) - processes your photos to generate try-on images
Data Shared: Your photo and selected outfit image only
Retention: Replicate does not store your images

5.2 Essential Service Providers

Google OAuth: For secure login (if you choose Google sign-in)
Supabase: Database and file storage
Vercel: Website hosting

5.3 We DO NOT Share Data With

❌ Advertisers or marketing companies
❌ Data brokers
❌ Social media platforms (except Google OAuth)
❌ Any third party for purposes other than providing the service

6. Third-Party Product Images & Brand Content

All product images, brand names, logos, and trademarks displayed on Style My Bride are the property of their respective owners.

We display product images from various bridal wear brands and retailers for the sole purpose of enabling virtual try-on visualization. Please note:

We are not affiliated with, endorsed by, or sponsored by any of the brands featured on our platform.
Product images are sourced from publicly available brand websites and catalogs.
All product listings link directly to the respective brand or retailer website for purchase.
We do not sell physical products — all purchases happen on the brand's own website.
We do not use brand images for AI model training or any purpose other than virtual try-on visualization.

Brand Owners: If you are a brand owner or authorized representative and wish to have your products or images removed from our platform, please contact us at shipfast.pvt@gmail.com. We will promptly comply with all removal requests.

7. Your Rights

🇪🇺 EU/UK Users (GDPR/UK GDPR Rights)

Right to Access: Request a copy of your data
Right to Rectification: Correct inaccurate data
Right to Erasure: Delete your data ("right to be forgotten")
Right to Restrict Processing: Limit how we use your data
Right to Data Portability: Receive your data in a portable format
Right to Object: Object to processing based on legitimate interests
Right to Withdraw Consent: At any time, without affecting prior processing
Right to Lodge a Complaint: With your local data protection authority

🇺🇸 California Users (CCPA Rights)

Right to Know: What personal information we collect and how we use it
Right to Delete: Request deletion of your personal information
Right to Opt-Out: We do not sell personal information
Right to Non-Discrimination: We will not discriminate for exercising your rights

🇨🇦 Canadian Users (PIPEDA Rights)

Right to Access: Request your personal information
Right to Correct: Update inaccurate information
Right to Withdraw Consent: At any time
Right to Complain: To the Privacy Commissioner of Canada

🇮🇳 Indian Users (DPDP Act 2023 Rights)

Right to Access: Information about personal data processing
Right to Correction: Correct or update your data
Right to Erasure: Delete your personal data
Right to Nominate: Nominate another person to exercise rights in case of death/incapacity
Right to Grievance Redressal: File complaints with Data Protection Board of India

How to Exercise Your Rights

To exercise any of these rights, contact us at:

Email: shipfast.pvt@gmail.com
In-App: Use "Delete My Data" link in the footer

Response Time: We will respond within 30 days (EU/UK: 1 month, California: 45 days, India: as per DPDP Act)

8. Children's Privacy

Age Requirement: Our service is intended for users aged 18 and above. We do not knowingly collect data from children under 18 (or 16 in EU).

If you are a parent/guardian and believe your child has provided us with personal information, please contact us immediately at shipfast.pvt@gmail.com

9. International Data Transfers

Your data may be transferred to and processed in countries outside your residence, including the United States.

For EU/UK Users:

We use Standard Contractual Clauses (SCCs) approved by the European Commission
Our service providers comply with GDPR requirements
We ensure adequate safeguards for your data

10. Cookies and Tracking

Essential Cookies Only

Authentication: To keep you logged in
We DO NOT use: Advertising cookies, social media trackers, or analytics cookies without consent

11. Data Breach Notification

In the event of a data breach affecting your personal data, we will:

🇪🇺 EU/UK: Notify authorities within 72 hours and affected users without undue delay
🇺🇸 California: Notify affected users without unreasonable delay
🇨🇦 Canada: Report to Privacy Commissioner if serious harm possible
🇮🇳 India: Notify Data Protection Board and affected users as required by DPDP Act

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by:

Posting the new Privacy Policy on this page
Updating the "Last Updated" date
Sending an email notification for significant changes

Continued use of the service after changes constitutes acceptance of the updated policy.

13. Contact Us

For any questions, concerns, or requests regarding this Privacy Policy, your personal data, or brand image removal:

Email: shipfast.pvt@gmail.com
Response Time: Within 48 hours

Supervisory Authorities

You have the right to lodge a complaint with:

🇪🇺 EU: Your local Data Protection Authority
🇬🇧 UK: Information Commissioner's Office (ICO)
🇺🇸 California: California Attorney General
🇨🇦 Canada: Privacy Commissioner of Canada
🇮🇳 India: Data Protection Board of India

📧 Data Protection Contact:

For GDPR/UK GDPR inquiries: shipfast.pvt@gmail.com

← Back to Style My Bride