Privacy Policy

• Account information: email address, display name, and password (stored hashed, never in plain text) if you register directly, or your name, email, and profile photo if you sign in with Google.
• Content you upload or generate: garment photos you upload, reference images used for identity or background swaps, the prompts and controls you set (pose, framing, styling), and the resulting AI-generated images and edit history.
• Payment information: when you purchase tokens, payment is processed by Razorpay. We receive confirmation of payment, an order/payment ID, and the amount charged — we never receive or store your card, UPI, or bank account details.
• Usage data: token balance and consumption per generation, generation history, sign-in timestamps, and basic device/browser information used for session security (e.g. detecting anomalous logins).

We use the information above to:

• Provide, operate, and maintain the Service, including generating the images you request.
• Process payments, credit tokens to your account, and maintain a record of your purchases.
• Send account-related email — verification, payment receipts, and service notices.
• Detect, investigate, and prevent abuse, fraud, or security issues.
• Respond to support requests you send us.

We do not use your uploaded images or prompts for advertising, and we do not sell them.

Account and usage data is stored in our primary database. Uploaded and generated images are stored in access-controlled object storage — not publicly browsable or indexable. Both are hosted on infrastructure we operate and secure directly.

• Razorpay — payment processing (RBI-regulated payment aggregator).
• Google — if you choose Google sign-in, for authentication only.
• Email delivery provider — to send verification and transactional email.

We do not sell your personal information to anyone, under any circumstances.

We use a single, essential, httpOnly session cookie to keep you signed in — it cannot be read by client-side scripts and is marked secure in production. We do not use third-party advertising or tracking cookies, and we do not run cross-site analytics pixels.

We retain your account and content for as long as your account is active. You may request deletion of your account and associated data at any time by emailing contact@deepsoch.ai. We aim to complete deletion requests within 30 days. Some records — such as payment records — may be retained longer where required by law (e.g. tax and accounting regulations).

Subject to applicable law, you may request access to, correction of, export of, or deletion of your personal data by contacting us at the email above. We will verify your identity and respond within a reasonable time, generally within 30 days.

• All traffic to the Service is encrypted in transit via HTTPS/TLS.
• Passwords are stored using a one-way salted hash — we cannot see or recover your password.
• API credentials and other secrets are encrypted at rest.
• Session cookies are httpOnly and scoped to prevent access from client-side scripts.
• Access to production data is restricted to authorized personnel on a need-to-know basis.

The Service is not directed to, and should not be used by, individuals under 18 years of age. We do not knowingly collect personal information from children.

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal reasons. Material changes will be reflected by updating the “Last updated” date above, and significant changes may be notified by email.

Deepsoch AI Private Limited
3rd floor, 40, 14th Main Rd, beside Mc Donald's, 7th Sector, HSR Layout, Bengaluru, Karnataka 560102, India
Email: contact@deepsoch.ai · Phone: +91 9137950233