Privacy Policy for Clothsy for Chrome

1. The Short Version

• Your photo is kept in your browser. It leaves your computer only when you press Try it on, and we never store it on our servers.
• The extension does not collect your browsing history. It reads a page only when you ask it to, and what it finds there stays on your computer.
• We do not sell your data, show you ads, or use your photos to train AI models.
• Signing out removes your photo and recent try-ons from your computer. You can ask us to delete your account at any time.

2. What Stays on Your Computer

The extension keeps the following in your browser's own extension storage. None of it is sent to us except as described in section 3.

• Your photo and the confirmation you gave that it is a photo of you and that you are 18 or older.
• Your recent try-ons: the generated images, the product photo and title, and the address of the page each product came from, so you can return to it.
• Your settings and the sign-in tokens that keep you signed in.

Reading pages: when you click the Clothsy icon, right-click a photo, drag one into the panel, or snip part of a page, the extension looks at that page to find the product's photos and title. If you choose to turn on product detection on every site, it does the same on the shopping pages you open. This happens on your computer. The extension may ask the shop itself for its public product details, but nothing about the pages you visit is sent to us.

Removing it: “Remove my photo from this computer” in the menu deletes your photo, and “Clear” next to Recent deletes your recent try-ons. Signing out deletes both. Uninstalling the extension deletes everything it stored on your computer.

3. What We Receive and How Long We Keep It

• Your Google account details: when you sign in with Google we receive your name, email address, profile picture and Google account ID. We keep them for as long as you have an account.
• Your photo: sent only when you press Try it on. It passes through the automated safety checks in section 4 and is sent to our AI image-processing provider to generate the result. It is never written to a Clothsy AI database or disk.
• The product image and title: the product photo you chose, or the part of the page you snipped, and the product's title. We keep the image in our cloud storage so the generator can read it, and it is deleted automatically within 35 days.
• The generated image: delivered to your browser from our AI provider and not stored by us. The copy you keep in Recent stays on your computer.
• A record of each try-on: when it happened, the product's title and whether it succeeded, so we can count your try-ons and refund a failed one. Deleted after 13 months.
• A record of each safety check: its outcome, the estimated age range, the number of faces and people seen, and content labels. It holds no image and no face template, and is deleted after 180 days.
• Your credits and plan: your balance, the free try-ons you received, and your subscription's plan, status, price and dates. Kept while you have an account. Payment records are kept for as long as tax and accounting law requires. A checkout you started but never paid is deleted after 7 days.
• Sign-in sessions: a scrambled (hashed) copy of your sign-in token, the time you signed in and when the session was last used. A session ends when you sign out or after 30 days unused, and its record is deleted 30 days after that.
• Your IP address, at checkout: used when you choose a plan to decide which checkout you see: Razorpay in rupees if it belongs to a network registered in India, PayPal in US dollars otherwise. It is looked up against a list kept on our own servers, is not sent to anyone for this, and is not stored with your plan.

4. Automated Safety Checks

To keep the service from being misused, every photo is checked automatically before a try-on is generated, and the product image and result are checked too. The checks estimate whether the person appears to be under 18, count the people in the photo, look for nudity and other unsuitable content, and check whether the photo appears to show a well-known public figure. A photo that fails a check is not used, and you are told why.

These checks are not used to identify you, we do not create or keep a template of your face, and only the outcome described in section 3 is recorded. The checks run on our own systems and on image-analysis services from our cloud providers, which process the photo only to perform the check.

5. How We Use Your Data

• To generate the try-on images you ask for.
• To run your account, your free try-ons and your plan, including payments and refunds.
• To keep the service safe and prevent abuse, including limits on free try-ons per network.
• To answer you when you contact us, and to tell you about changes to your plan or this policy.

We do not use your data for advertising, we do not sell it, we do not use your photos or results to train AI models, and we do not use your data to decide creditworthiness or for lending.

Our use of information received from Google, including your Google account details, follows the Chrome Web Store User Data Policy, including its Limited Use requirements.

6. Who Receives Your Data

• Our AI image-processing provider: receives your photo and the product image to generate the try-on. It processes them transiently, is contractually bound to protect them, and does not use them for model training.
• Our cloud hosting and storage provider: runs our servers and database and holds the product image until it is deleted.
• Google: handles signing in. Google's own privacy policy covers what it does when you sign in.
• Razorpay (plans bought in India) and PayPal (plans bought elsewhere): process payments for paid plans. You enter your payment details on their own checkout pages, and they never reach us. We receive the payment's status, and the provider receives our account reference and the plan you chose. Each provider's own privacy policy covers what it does with the details you give it.
• Authorities: only where the law requires it, or where it is needed to protect someone from serious harm.

We do not share your data with advertisers or data brokers.

7. Your Rights and Choices

Under laws such as the GDPR, the CCPA and India's Digital Personal Data Protection Act, 2023, you have rights over your data:

• Access and correction: email us at contact@fabricvton.com from the address you sign in with, and we will send you what we hold about you or correct it.
• Deletion: email us and we will delete your account and everything linked to it, except payment records the law requires us to keep. Cancel a paid plan first, from the extension, so you are not charged again.
• Withdrawing consent: you can stop at any time by removing your photo, signing out or uninstalling the extension, and you can ask us to delete your account. Try-ons you already received are not undone.
• Response time: we answer every request within 30 days.

8. If You Are in India

Under India's Digital Personal Data Protection Act, 2023, FabricVTON is the Data Fiduciary for your data in the extension. We process your photo only on the consent you give before your first try-on, and your account details to provide the service you signed up for.

• Grievances: write to us at contact@fabricvton.com. We acknowledge every grievance within 7 days and resolve it within 30 days.
• The Data Protection Board: if you are not satisfied with how we handled your grievance, you may complain to the Data Protection Board of India.
• Language: you can ask us for this notice in English or in any language listed in the Eighth Schedule to the Constitution of India.

9. Children

The extension is not for anyone under 18. Before your first try-on you confirm that the photo is of you and that you are 18 or older, and the safety checks refuse photos that appear to show someone under 18. If you believe a child's photo has been used, tell us and we will delete every record of it.

10. Security and Where Your Data Is Kept

All data is encrypted in transit (TLS) and at rest. Sign-in uses short-lived tokens, and we store only scrambled copies of the long-lived ones. Our servers are in the United States, so your data is processed there, under the safeguards described in this policy.

11. Changes to This Policy

If we change this policy, we will update the date at the top. If a change affects what we collect or how we use it, we will tell you in the extension before it applies.

12. Contact

For privacy questions, requests or grievances, email contact@fabricvton.com.

Publisher: FabricVTON
Address: Near Shiv Mandir, Kendua Bazar Hatia Patti, Kenduadih, Dhanbad, Jharkhand 828116, India.
Hosting: Amazon Web Services, Inc., Seattle, WA, USA (servers in the United States).