Privacy Policy
This Privacy Policy explains how AttireSnap ("Company", "we", "us") collects, uses, stores, and shares your personal data when you use AttireSnap.com and associated services. We are committed to protecting your privacy and complying with India's Digital Personal Data Protection Act, 2023 (DPDPA) and applicable international data protection standards.
1. Data we collect
Account data
- Name (required for account setup).
- Email address or phone number (used for authentication).
- Password hash. We never store passwords in plain text.
- Brand name (optional, for personalisation).
- Profile photo (optional, if provided via OAuth).
Content data
- Product images you upload for AI generation ("Input Content").
- AI-generated images produced from your uploads ("Output Content").
- Generation settings, prompts, and configuration you submit.
Billing data
- Plan name, subscription status, billing cycle, and transaction history.
- Payment processing is handled entirely by Razorpay. We never receive or store credit card numbers, UPI credentials, or bank account details.
Usage data
- Pages visited, features used, and generation counts.
- Device type, browser, and approximate geographic region (country/state level only).
- Session duration and navigation patterns.
2. How we use your data
- Service delivery: To process your uploads, generate AI images, and deliver results to you.
- Account management: To authenticate you, manage your subscription, and send transactional emails (receipts, generation completion notifications).
- Product improvement: To understand how users interact with the platform so we can improve features. Analytics data is aggregated and does not identify individuals.
- Customer support: To respond to your enquiries and resolve issues.
- Legal compliance: To comply with applicable laws, respond to legal process, and enforce our Terms.
3. Lawful basis for processing
We process your personal data on the following lawful bases under India's Digital Personal Data Protection Act, 2023 (and, where applicable, equivalent international data protection laws):
| Processing activity | Lawful basis |
|---|---|
| Account creation and authentication | Contract: necessary to provide the Service you have requested |
| Processing your uploads and generating AI images | Contract: core Service delivery |
| Billing and payment processing | Contract + Legal obligation (tax records) |
| Sending transactional emails (receipts, alerts) | Contract: necessary to operate your account |
| Aggregated analytics and product improvement | Legitimate interest: improving the Service for all users |
| Responding to support enquiries | Legitimate interest: resolving your requests |
| AI model training (opt-in programme only) | Consent: explicit, revocable, opt-in |
| Legal compliance and law enforcement requests | Legal obligation |
| Marketing emails (if subscribed) | Consent: you may unsubscribe at any time |
4. What we do not do
- We do not sell your personal data to third parties. Ever.
- We do not train our AI models on your Input Content or Output Content without your explicit, opt-in consent.
- We do not use your data for targeted advertising or share it with advertising networks.
- We do not share your data with social media platforms.
5. Data sharing and sub-processors
We share your data only with trusted third-party service providers ("sub-processors") who assist us in operating the Service, under strict data processing agreements. Key sub-processors include:
- Cloud infrastructure: Hosting and storage (servers in India / within compliant jurisdictions).
- Payment processing: Razorpay (India).
- AI processing: Google Cloud (for AI model inference), subject to data processing agreements.
- Email delivery: Transactional email provider for notifications and receipts.
A full list of sub-processors is available on request at privacy@AttireSnap.com.
6. International data transfers
AttireSnap is based in India and primarily stores and processes data on servers located in India. However, some of our sub-processors (such as Google Cloud for AI inference and our email delivery provider) may process data outside India. Where data is transferred internationally, we ensure that appropriate safeguards are in place, including:
- Data processing agreements (DPAs) that include standard contractual clauses equivalent to those required under applicable law.
- Transfer only to jurisdictions that provide an adequate level of protection for personal data, or under specific derogations permitted by the DPDPA 2023.
- Our AI inference sub-processor (Google Cloud) processes data under Google's Data Processing Addendum, which is available at cloud.google.com/terms/data-processing-addendum.
7. Data retention
- Account data is retained for the duration of your account plus 30 days after deletion.
- Generated images are stored for the duration of your account. When you delete an image or close your account, we delete the file within 30 days.
- Billing and transaction records are retained for 7 years as required by Indian tax and accounting law.
- Aggregated, anonymised analytics data may be retained indefinitely.
8. Your rights under DPDPA
Under India's Digital Personal Data Protection Act, 2023, you have the following rights:
- Right of access: Request a copy of the personal data we hold about you.
- Right to correction: Request correction of inaccurate or incomplete data.
- Right to erasure: Request deletion of your personal data (subject to legal retention obligations).
- Right to withdraw consent: Withdraw consent for discretionary data processing at any time.
- Right to grievance redressal: Lodge a complaint with our Data Protection Officer.
To exercise any of these rights, email privacy@AttireSnap.com. We will respond within 30 days.
9. Security
See our Security page for a full description of our technical and organisational security measures.
10. Cookies
We use a minimal set of cookies. See our Cookie Policy for full details.
11. Children
The Service is not directed at individuals under 18 years of age. We do not knowingly collect personal data from minors. If you believe we have inadvertently collected data from a minor, please contact privacy@AttireSnap.com and we will delete it promptly.
12. AI & Responsible Use
AttireSnap uses generative AI to help fashion and textile businesses create professional product visuals. This section explains our commitments to transparency, safety, and responsible AI use.
What our AI does
Our AI takes your uploaded product images (garments, fabrics, accessories) and generates new visuals, placing them on virtual models, in curated backgrounds, or in alternate styling contexts. We use state-of-the-art diffusion-based models fine-tuned for textile and apparel photography.
What our AI does not do
- We do not train our AI models on your uploaded images or generated outputs without your explicit, written consent.
- We do not generate images of identifiable real people without documented consent from those individuals.
- We do not generate content that is deceptive, misleading, harmful, sexually explicit, or that violates the rights of any third party.
- We do not use AI to make automated legal, financial, or hiring decisions about users.
AI output accuracy and limitations
AI-generated imagery may contain artefacts, inaccuracies, or unexpected results. Outputs may not perfectly represent fabric texture, colour, or drape. All AI-generated images require human review before commercial use. You are responsible for verifying that outputs accurately represent your products before publishing them.
Prohibited AI uses
You must not use AttireSnap's AI tools to:
- Generate deepfakes or manipulate images of real, identifiable people without their explicit consent.
- Create misleading product imagery that misrepresents material, quality, or origin to consumers.
- Produce images that infringe third-party intellectual property, including brand logos, trademarked designs, or copyrighted artwork.
- Generate content involving minors in any inappropriate context.
- Automate or scale the generation of disinformation or fraudulent product listings.
Human oversight
AttireSnap maintains human review processes for flagged content. Our trust and safety team reviews reports of policy violations within 72 hours. We operate a content moderation pipeline with automated filters and human review escalation.
Model transparency
We disclose that outputs are AI-generated. We do not allow users to remove AI-generation watermarks or metadata from outputs for the purpose of deceiving end consumers. We are committed to participating in emerging AI content provenance standards (e.g., C2PA).
Bias and fairness
We actively work to reduce demographic bias in our virtual model outputs. We offer diverse model representations across skin tones, body types, and regional aesthetics. Users may report bias concerns to ai-safety@AttireSnap.com.
Data and model training
By default, your uploaded images and generated outputs are used solely to provide the service. We may offer an opt-in programme where users voluntarily contribute anonymised data to improve model quality in exchange for additional credits. Opt-in is always explicit and revocable.
Your AI responsibilities
When using AttireSnap's AI features, you confirm that:
- You own or have commercial rights to all uploaded product images.
- Any identifiable people depicted in uploaded images have provided written consent for AI manipulation and commercial use.
- You will review all AI-generated outputs before using them commercially.
- You will not use outputs to deceive or defraud consumers.
Regulatory frameworks
Our AI governance practices are informed by the following frameworks and regulations:
- EU AI Act (Regulation (EU) 2024/1689): AttireSnap classifies its image generation tools as limited-risk AI systems under the EU AI Act. We maintain transparency obligations and provide users with clear disclosures that outputs are AI-generated.
- NIST AI Risk Management Framework (AI RMF 1.0): We align our internal AI governance with the NIST AI RMF's four core functions (Govern, Map, Measure, and Manage) to identify, categorise, and mitigate AI risks on an ongoing basis.
- MeitY Guidelines on Generative AI: We monitor and commit to complying with applicable guidance issued by India's Ministry of Electronics and Information Technology regarding generative AI platforms.
13. Changes to this policy
We may update this Privacy Policy from time to time. We will notify you of material changes by email at least 14 days before they take effect. The "Effective" date at the top of this page reflects the most recent update.
14. Data Protection Officer
Our Data Protection Officer can be contacted at dpo@AttireSnap.com. If you are not satisfied with how we have handled a complaint, you have the right to lodge a complaint with the Data Protection Board of India once it is constituted under the DPDPA 2023.
Questions about this policy?
Email our legal team at legal@attiresnap.com. We respond within 5 business days.