Privacy Policy

Account information. When you sign in via Google or Facebook, we receive your name, email address, and profile image from the identity provider. We do not receive your password.

Photos you upload. Full-body photos and headshots submitted for analysis. These are stored privately alongside your blueprint so you can reference them when reviewing your results, accessible only to you via short-lived signed URLs. Photos are automatically deleted seven (7) days after upload (see Retention below); your blueprint itself is retained for the lifetime of your account.

Blueprint data. The analysis output generated for your account, retained so that you can return to it.

Payment metadata. Transaction identifiers, amount, and status are received from Razorpay. We do not collect or store your card, UPI, or banking credentials — these are handled directly by Razorpay.

Usage data. Anonymised analytics about how the site is used — pages visited, device type, approximate location at the country level. We do not track you across other websites.

We use the information we collect to:

• Generate and deliver your style blueprint
• Authenticate you and secure your account
• Process payments and issue receipts
• Communicate about your account, purchases, and service updates
• Improve the Service and prevent abuse
• Comply with legal obligations

We share information only with:

• AI providers (Anthropic, Google) — your photos are sent to the model that generates your blueprint. These providers do not retain your photos for training.
• Razorpay — for payment processing.
• Hosting and infrastructure providers (Vercel, Google Cloud, Supabase) — that store and serve the Service on our behalf.
• Authorities — when required by law, regulation, or valid legal process.

We do not sell your personal information.

Uploaded photos are automatically deleted seven (7) days after upload. Your blueprint and account information are retained for as long as your account is active. You may delete your account at any time, which removes all remaining data within [30] days, except where retention is required by law (for example, financial records for tax purposes).

Under the DPDP Act, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete data
• Erase your personal data
• Withdraw consent for processing
• Nominate a person to exercise your rights in case of incapacity
• Lodge a complaint with the Data Protection Board of India

To exercise any of these rights, email privacy@adorna.me.

We use industry-standard technical and organisational measures to protect your information — encryption in transit (TLS), encryption at rest, restricted access, and audit logging. No method of transmission over the internet is fully secure; we cannot guarantee absolute security.

The Service is not directed to children under 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal information, contact us and we will delete it.

We may update this policy from time to time. We will notify you of material changes by email or via a notice on the Service.

As required under Indian law, our designated Grievance Officer is:

[Grievance Officer Name]
Email: grievance@adorna.me
Address: [Registered office address]

We respond to grievances within 30 days of receipt.