Privacy Policy

Vastram Studio ("we", "us", or "our") operates the Vastram Studio platform at vastramstudio.com (the "Service"), an AI-powered fashion catalog tool built for Indian D2C and wholesale fabric sellers. This Privacy Policy explains what personal data we collect, why we collect it, how we use and share it, and what rights you have over it.

By creating an account or using the Service, you agree to the collection and use of information in accordance with this Policy. If you do not agree, please do not use the Service.

1. Information We Collect

1.1 Account Information

When you sign up, we collect your email address, name, and password (securely hashed) via our authentication provider Clerk. If you use Google, Apple, or another OAuth provider, we receive your name and email from that provider.

1.2 Content You Upload

The core function of Vastram Studio is to transform fabric photos into model catalog images. To do this you upload fabric or garment photos ("Fabric Images"). These images are stored on Cloudinary, a cloud media platform, and are transmitted to OpenAI's image-editing API solely to generate your catalog output. We do not use your Fabric Images to train any AI model, including our own or OpenAI's.

1.3 Generated Images

AI-generated output images are stored on Cloudinary under your account. You can delete them at any time from your dashboard.

1.4 Branding and Business Data

You may optionally provide your company name, logo, phone number, address, and GST number for use in catalog generation (brand overlays, cover pages, back-cover contact details). This data is stored securely in our database (Convex) and only used to produce your catalogs.

1.5 Usage and Log Data

We automatically collect technical data when you use the Service: IP address, browser type, operating system, pages visited, timestamps, and error logs. This helps us maintain reliability and security.

1.6 Payment Data

Subscription payments are processed by our payment provider. We do not store your full card number, CVV, or bank account details. Our payment provider provides us with a transaction reference and subscription status only.

2. How We Use Your Information

• Service delivery: Generating AI catalog images from your fabric photos, building PDF catalogs, storing your assets.
• Account management: Authenticating you, managing your credit balance, sending billing receipts.
• Customer support: Responding to queries sent to hello@vastramstudio.com.
• Service improvement: Analysing aggregated, anonymised usage patterns to improve features. We never use your uploaded images for this purpose.
• Security and fraud prevention: Detecting abuse, rate-limiting, and protecting user accounts.
• Legal compliance: Complying with applicable Indian law, including the Information Technology Act, 2000, its rules and amendments, and any applicable data protection regulations.

We will never sell your personal data or your uploaded images to any third party for advertising or any other commercial purpose.

3. Third-Party Services We Use

Running Vastram Studio requires us to share certain data with trusted sub-processors. Each is contractually obligated to protect your data and use it only to provide their service to us.

Some of these providers may process data outside India. When this occurs, we ensure appropriate contractual safeguards are in place consistent with applicable law.

4. Data Retention

• Account data is retained while your account is active and for up to 30 days after account deletion to allow recovery if deletion was accidental.
• Fabric images and generated images are stored until you delete them or close your account. After account closure, images are purged from Cloudinary within 30 days.
• Transaction records are retained for 7 years as required by Indian tax law (GST Act).
• Usage logs (server logs, error logs) are retained for 90 days for security and debugging purposes.

5. Data Security

We implement industry-standard security measures: HTTPS/TLS encryption in transit, encrypted storage at rest, role-based access controls, and regular security reviews. However, no method of transmission or storage is 100% secure. You are responsible for keeping your account credentials confidential. Please notify us immediately at hello@vastramstudio.com if you suspect any unauthorised access to your account.

6. Your Rights

You have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of your account and associated personal data. You can also delete individual images directly from your dashboard.
• Portability: Request an export of your data in a machine-readable format.
• Objection: Object to certain processing, such as receiving marketing emails (where applicable).

To exercise any of these rights, email us at hello@vastramstudio.com with the subject line "Data Rights Request". We will respond within 30 days.

7. Cookies and Tracking

We use essential cookies required for authentication (session tokens managed by Clerk) and basic session management. We do not use third-party advertising or tracking cookies. You can disable cookies in your browser, but this may prevent you from logging in to the Service.

8. Children's Privacy

Vastram Studio is intended for use by persons aged 18 and above, or by minors aged 13 and above only under the supervision of a parent or guardian operating a legitimate business. We do not knowingly collect personal data from children under 13. If you believe a child under 13 has provided us with personal data, please contact us immediately so we can delete it.

9. Governing Law

This Policy is governed by the laws of India, including the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and any successor data-protection legislation. Any disputes arising from this Policy shall be subject to the jurisdiction of courts located in India.

10. Changes to This Policy

We may update this Policy from time to time. When we make material changes, we will notify you via email or a prominent notice on the Service at least 14 days before the change takes effect. The updated Policy will be posted on this page with a revised "Last updated" date. Your continued use of the Service after the effective date constitutes acceptance of the updated Policy.

11. Contact Us

For any privacy-related questions, requests, or complaints, please contact: