Privacy Policy

This Privacy Policy explains how DEEPIKA NAROLIYA (“we”, “us”, “our”) collects, uses, stores, and shares personal data when you use Darzi AI and Boutique OS (the “Service”). We process data fairly, lawfully, and only for the purposes described here.

Who we are

The Service is operated by DEEPIKA NAROLIYA in her individual capacity as the proprietor behind the Darzi AI brand. For privacy requests, use the contact details on our Contact page.

Data we collect

• Account & identity: email address, authentication identifiers, and basic profile fields you provide.
• Usage & device: IP address, approximate location derived from IP, browser or app version, log timestamps, pages or screens viewed, error diagnostics, and similar technical metadata.
• Content you submit: photos of people (with your responsibility to obtain consent where required), fabric or garment images, style preferences, prompts, and generated outputs stored in your account history where enabled.
• Boutique OS data: customer names, measurements, orders, job cards, and stylist inputs you enter for studio management.
• Transactions: purchase records, plan or credit balance metadata, and payment references as received from our payment partner (we do not store full card numbers on our servers).
• Support: messages you send us and correspondence necessary to resolve issues.

How we use data

• Provide, secure, personalise, and improve the Service (including AI inference and quality monitoring).
• Authenticate you, prevent fraud and abuse, and enforce our Terms.
• Send service-related notices (e.g. security, billing, policy updates) and, where permitted, product updates.
• Comply with law, respond to lawful requests, and protect rights and safety.
• Analyse aggregated or de-identified trends to guide product direction.

Legal bases (where applicable)

Depending on your region, we rely on performance of a contract, legitimate interests (balanced against your rights), consent where required (e.g. certain cookies or marketing), and legal obligation.

AI processing

To generate try-on visualizations and stylist recommendations, your inputs may be processed by our systems and by carefully vetted AI and infrastructure vendors. We configure providers to use data for service delivery and (where allowed) abuse prevention — not to train public models on your private content unless we notify you and, where required, obtain consent.

Sharing

We share data only as needed with:

• Hosting, database, authentication, email, analytics, and customer-support tooling providers.
• Payment processors (e.g. Razorpay) to complete transactions you initiate.
• Professional advisers (lawyers, accountants) under confidentiality.
• Authorities when required by law or to protect vital interests.

We do not sell personal data in the conventional sense of exchanging lists for money.

Retention

We keep data only as long as necessary for the purposes above, including legal, tax, and accounting requirements. You may request deletion of your account subject to limited exceptions (e.g. fraud prevention logs, legally mandated retention).

Security

We implement technical and organisational measures appropriate to the risk, including encrypted transport where standard, access controls, and monitoring. No method of transmission over the Internet is perfectly secure.

Your rights

Subject to Indian law or other legislation that applies to you, you may request access, correction, deletion, restriction, or portability where technically feasible. You may object to certain processing based on legitimate interests. To exercise rights, contact us via the Contact page; we verify requests to protect your account.

Children

The Service is not directed at children under 13 (or higher age where locally required). We do not knowingly collect personal data from children without verifiable parental consent.

International transfers

Our vendors may process data outside India with appropriate safeguards (contractual clauses, adequacy assessments, or other permitted mechanisms).

Changes

We update this Privacy Policy when our practices evolve. Continued use after the effective date means acceptance.