shoppin' privacy policy

who we are

shoppin' is an ai-powered fashion platform. we help you search for styles, view virtual try-ons, and design looks, and we produce and sell hand-stitched, made-to-order apparel that we craft individually for you. unlike a discovery-only service, shoppin' is the seller of the products offered through the platform: we accept your order, source the fabric, hand-stitch the product, process your payment through our payment providers, and arrange shipping, duties, customs clearance, and delivery.

shoppin' is owned and operated by SHOPPIN' COMMERCE TECHNOLOGIES PRIVATE LIMITED, a company incorporated and registered under the provisions of the companies act, 2013, with its registered office at 7th floor, JMG Towers, 870, near trident hotel, phase v, udyog vihar, sector 19, gurugram 122016, haryana, india.

collection of your personal information

our ai fashion platform enhances your experience by offering intelligent recommendations and a personalized discovery and ordering journey. we collect, analyze, and store data on our servers to refine recommendations, fulfil your orders, improve interactions, train our ai models (subject to the limits described below), and optimize platform performance. this policy explains the data we collect, how we collect it, how we use and store it, and how we comply with privacy regulations like india's digital personal data protection act (DPDP) 2023.

methods of data collection

to provide a personalized experience and to fulfil your orders, we gather data through multiple channels, which is then processed and stored securely on our servers:

a) user-provided data

we collect and store data that you voluntarily provide when interacting with the platform, including:

• account information: name, email address, phone number, and other details provided during registration or profile setup. note that an account is not required to place an order; you may also provide this information as a guest at checkout.
• order and transaction data: the products you order, your size and design selections, order history, and the shipping/delivery address and contact details you provide for an order.
• payment information: payments are processed by our third-party payment providers (paypal, google pay, apple pay, and stripe). we receive limited transaction information (such as confirmation of payment and partial details for reference), but we do not store or receive your full payment card details.
• demographic information: age, gender, and other demographic details you choose to provide to help personalize your experience.
• preference data: information about your style, "vibe", or other preferences you explicitly share to help tailor recommendations.
• search queries & text inputs: keywords entered, questions asked, or any text you type into search bars, design tools, or chat interfaces.
• images (optional): photographs you choose to upload for features like virtual try-on and visual search. using these features is optional.
• likes, wardrobes, bag, and saved items: products you like, organize into your wardrobe(s), add to your bag, or save for future reference.
• feedback and ratings: reviews or ratings on products and overall user experience.
• contacts information (optional): if you grant us permission via your device's operating system settings, we may access and securely store the contacts list from your device on our servers, solely to help you find and connect with contacts who may also use shoppin', suggest profiles, and enable features like invitations or shared experiences. we do not use your contacts' information for marketing unless they independently sign up and consent themselves. providing access is optional and can be enabled or disabled at any time through your device settings.

b) behavioral data collection

we analyze how users interact with the platform to improve recommendations, user experience, and our models. this stored data includes:

• clickstream data: clicks on products, pages visited, features used, and time spent on various parts of the platform.
• browsing history: navigation patterns within the platform, including searches performed and items viewed or interacted with.
• engagement metrics: frequency of use, session durations, interactions with ai-generated suggestions, and responses to communications.
• shopping interests: frequently viewed categories, styles, and product types inferred from your activity.

c) device & technical data

to enhance performance, ensure compatibility, and for security purposes, we collect and store technical data such as:

• device information: device type, operating system version, hardware model, browser type and version, language settings, and screen resolution.
• identifiers: device identifiers (where permitted and controllable via your device settings), ip address (often anonymized or used for general location such as city/country), and internal user ids.
• performance metrics: data on crashes, performance errors, response times, and load speeds to diagnose issues and optimize the experience.
• location data (optional): if you enable location services for shoppin' via your device settings, we may collect coarse or precise location data to enhance discovery and to display prices in your local currency. this is optional.

d) automated data collection via ai & machine learning

our platform uses ai algorithms, operating on the data stored on our servers, to analyze behavior, understand intent, and refine recommendations:

• pattern recognition: identifies style preferences and behavioral patterns based on past interactions and provided data.
• natural language processing (nlp): interprets search queries, understands chat and design inputs, and generates relevant results.
• image analysis (if images uploaded): analyzes the content of images you upload (for example, for virtual try-on or visual search) to identify products or styles and generate previews. this does not involve biometric identification or facial recognition.
• predictive analytics: forecasts trends and suggests products or content based on individual and collective preferences.

we process the photographs you optionally upload solely to provide the requested feature (such as virtual try-on or visual search). we do not use your uploaded photographs to train our ai/ml models, or for marketing, without your separate, explicit consent. we do not perform biometric identification or facial recognition on these images.

e) third-party and catalog data

we may use data from external sources to enrich discovery and platform functionality:

• inspiration and catalog content: we may surface inspiration images and styles, including content sourced from across the web, to power search, virtual try-on, and design features.
• market insights & trends: we may use aggregated, anonymized behavior data or publicly available trend information to identify emerging styles or popular products.

data collected through these methods is stored securely on our servers. the next section explains how we use it.

purposes of collecting, storing, and using your personal information

we collect, store, and process your personal information for specific, legitimate purposes, primarily to operate the platform and fulfil your orders. our platform relies on data stored on our servers to:

• provide and personalize the service: operate the platform, authenticate users, deliver personalized recommendations, and customize features based on your stated or inferred preferences, demographics, and interaction history.
• process and fulfil your orders: accept and confirm orders, process payments through our payment providers, source materials and produce your made-to-order product, arrange shipping, duties, customs clearance, and delivery through our delivery partner, send order and delivery updates, and handle cancellations, damaged-item claims, and refunds.
• power discovery and ai features: enable ai search, virtual try-on, and design tools (including processing images you upload for these features).
• improve platform performance & develop features: analyze how users interact with the platform (using tools like posthog) to identify bugs, improve usability, optimize performance, and develop new functionality.
• train and refine our ai/ml models: use data we collect (such as text inputs, interaction data, and preferences) to train, validate, and improve our internal ai/ml models. we do not use the photographs you upload for virtual try-on for model training or marketing without your separate, explicit consent.
• communicate with you: send service-related updates, security alerts, order and account notifications (using tools like webengage), respond to support inquiries, and deliver marketing communications based on your preferences (with opt-out options).
• maintain security & prevent fraud: monitor for suspicious activity, detect and prevent fraudulent or unauthorized use, and protect our systems and users.
• enable social & collaborative features: if you grant contacts access, suggest connections, allow invites, or enable shared experiences.
• comply with legal obligations & enforce terms: meet legal and regulatory requirements, respond to lawful requests, enforce our terms of use, and protect our rights and those of others.
• analytics and reporting: generate aggregated and anonymized statistics about trends, platform usage, and market insights for internal analysis.

at shoppin', we are committed to transparency and giving you control over your data, as outlined in the 'your rights and choices' section.

sharing of personal information

we value your trust and limit how we share your personal information. we may share data with selected third parties only when necessary to provide and fulfil our services, comply with legal obligations, or conduct our business. these parties are bound by data protection agreements and may only use your data for the purposes we define. categories include:

• service providers & operational partners: companies that help us operate the platform, such as cloud hosting providers, analytics providers (e.g., posthog), customer support platforms, communication tools (e.g., webengage), security vendors, and ai/ml infrastructure providers. they process data on our behalf based on our instructions.
• payment providers: to process your payment, we share necessary transaction information with our payment providers (paypal, google pay, apple pay, and stripe). these providers handle your payment details under their own privacy policies; we do not store your full card details.
• delivery & logistics partner: to ship your order and handle duties and customs clearance, we share your name, shipping address, contact details, and order information with our global delivery partner.
• specialized ai partners (for specific features): for features like virtual try-on and visual search, we may securely share the images you upload with specialized third-party ai service providers (potentially located in regions such as the us or singapore) solely to analyze the image content and return results. these partners are contractually obligated to protect the data, use it only for the requested service, and adhere to privacy standards compliant with laws like DPDP.
• legal & regulatory authorities: when required by law, valid legal process, or government request, we may disclose information to comply with legal obligations, protect rights and safety, or investigate potential violations.
• parties involved in business transfers: in the event of a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, your information may be transferred to the successor entity, subject to confidentiality agreements and notice where required by law.
• other users (with your consent/action): for collaborative features, information you choose to share within that feature may be visible to participants you invite or connect with.

we do not sell your personal information to third parties for their own independent marketing purposes.

cross-border data transfers

because we ship worldwide and use global infrastructure and partners, your personal information may be transferred to, processed, and stored in countries outside your residential jurisdiction (including india) for the purposes outlined in this policy, including order fulfilment, payment processing, shipping, cloud hosting, and ai processing. these countries may have different data protection laws than india. where we transfer your data internationally, particularly outside india, shoppin' ensures that such transfers comply with applicable laws, such as the DPDP act 2023, and are carried out with appropriate safeguards.

use of children's information

at shoppin', we prioritize the privacy and safety of all users, especially children. in compliance with india's digital personal data protection act (DPDP) 2023and its associated rules, we implement strict measures regarding the collection, processing, and storage of children's personal data.

age restrictions & parental consent

• minimum age: you must be at least 13 years of age to use the platform. the platform is not intended for, and may not be used by, anyone under 13.
• definition of child: under the DPDP act, a "child" is an individual who has not completed eighteen years of age. accordingly, while our minimum age is 13, users between 13 and 17 years of age are treated as children under indian law.
• prohibition on harmful processing: we do not undertake processing of personal data that is likely to cause detriment to a child, as defined under the act.
• no tracking or behavioral monitoring of children: we do not engage in tracking or behavioral monitoring of children or targeted advertising directed specifically at children.
• verifiable parental consent required: for users between 13 and 17 years of age, shoppin' requires explicit, verifiable parental or legal guardian consent obtained before any collection or processing of the child's personal data occurs, and before any order is placed on the child's behalf.

if you are a parent or guardian and believe that your child under 18 has provided personal data to shoppin' without your verifiable consent, please contact us immediately using the grievance officer details below, and we will take the necessary steps to address the issue, including deleting the data.

data security

we take the security of your personal information very seriously. we implement and maintain reasonable administrative, physical, and technical safeguards designed to protect the personal data stored on our servers from unauthorized access, use, modification, disclosure, loss, or deletion. these measures include encryption (in transit and at rest where appropriate), access controls, network security protocols, vulnerability management, regular security assessments, and employee training. however, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

data retention & disposal

we retain your personal information, including account details, demographic data, preference data, interaction history, order and delivery information (excluding full payment card details, which we do not store), and optionally provided contacts or images, only for as long as necessary to fulfil the purposes for which it was collected, to provide and support your orders, and as permitted or required by law (including for tax, accounting, and warranty/consumer-protection purposes). generally, your core account data is retained while your account is active. once your information is no longer needed for these purposes, or upon a verified deletion request subject to legal exceptions, we take appropriate steps to securely delete or permanently anonymize it.

links to other websites & third-party services

shoppin' integrates with third-party services (such as analytics tools like posthog, communication platforms like webengage, payment providers, our delivery partner, and ai partners) and may display inspiration content or links that lead to third-party websites. this privacy policy applies only to the data processing conducted directly by shoppin'. it does not cover the data practices of these external services, which are operated by other organizations with their own privacy policies and terms.

consent

by accessing, signing up for, placing an order through, or actively using the shoppin' platform and its features, you acknowledge that you have read and understood this privacy policy, and you provide your consent to the collection, use, storage, processing, transfer (including cross-border transfers), and disclosure of your personal information as described herein and as required to provide the service and fulfil your orders.

withdrawing consent:you have the right to withdraw your consent for future processing where consent is the basis for processing (such as optional features or marketing emails). you can do this through device settings (for contacts/location), unsubscribe links (for emails), or by contacting us (see 'grievance officer' / 'contact us'). withdrawing consent does not affect processing necessary to complete an order you have already placed or to comply with legal obligations.

your rights and choices

need to know - security reminder

your account security and privacy are paramount. we will never ask for sensitive security credentials such as your account password, otps, credit/debit card numbers (except potentially the last 4 digits for verification by a support agent if you initiate contact), cvv, or full personal identification numbers (like aadhaar or pan) through unsolicited phone calls, emails, sms, or social media. if you receive any communication claiming to be from shoppin' requesting such details, do not share them and report it to us immediately, as these are likely fraudulent phishing attempts.

as an ai-powered platform, shoppin' uses automated systems. while we strive for accuracy, ai-generated recommendations, previews, and virtual try-on or design outputs are visual approximations and may not perfectly reflect the final hand-stitched product. please review your size and selections carefully before placing an order.

grievance officer

in accordance with india's information technology act, 2000 (and associated rules like the intermediary guidelines), the consumer protection (e-commerce) rules, 2020, and the digital personal data protection act, 2023, the name and contact details of the grievance officer are provided below.

we aim to acknowledge receipt of your grievance promptly and resolve it within the timeframes stipulated by applicable law.

contact us

for general queries about the platform, assistance with using shoppin', help with an order, feedback, or non-grievance privacy questions, you can reach our support team:

updates to our privacy policy

technology, data protection laws (like the DPDP act and its rules), and our business practices evolve. we may update this privacy policy periodically to reflect changes in how we collect, use, store, protect, or share your personal information, or to comply with new legal requirements. when we make changes, especially material ones, we will notify you by posting the updated version on this page, revising the "last updated" date, and potentially using other methods such as an in-app notification or email. we encourage you to review this policy regularly.