Privacy Policy

1. Who We Are (Controller) and Contact

DRAPAI (“we”, “us”) is responsible for deciding how and why we process personal data for the Service. If you have questions or requests, contact us at [email protected]. For account and data deletion requests, you can also use our public form at drapai.com/delete-account.

2. Information We Collect

• Account and profile data: Such as email address and basic account details you provide when you create or manage an account.
• User content: Photos or images you upload for virtual try-on and the images generated as outputs. These files are processed on our systems (including service providers that run generation workflows, such as our cloud database/storage provider and automation pipeline) to produce results. We keep cloud-held visual assets only for a limited retention window: generated outputs are typically retained for about 14 days after a job finishes; failed or aborted jobs are typically eligible for cleanup within about 72 hours; unfinished provisional uploads are typically removed within about 1 hour. Files are transmitted over TLS, stored in private access-controlled storage scoped to your account, and we do not use uploaded photos to train AI models. Optional wardrobe or pose libraries you create in the mobile app are stored on your device, not as a browsing library we host in the cloud.
• Usage and diagnostics: Information about how you use the Service (e.g. feature usage) and limited logs needed for reliability, security, and troubleshooting.
• Device and app data (mobile): Device identifiers and app events where needed for security, functionality, and analytics. For example, the mobile app may log product events (like opening Studio or exporting) associated with your account user ID to improve the product and prevent abuse.
• Website data (cookies/local storage): On the website, we may use cookies or local storage for essential functionality and, if you consent, analytics (for example, Google Analytics with IP anonymization enabled where supported). See our Cookie Policy for details.
• Communications: Messages you send us (support requests, contact forms, deletion requests).
• Payments: If you purchase a subscription, we receive records needed to provide the purchase (for example, transaction identifiers and subscription status). Payment processing may be handled by the relevant platform (e.g. Apple App Store / Google Play) or our payment providers depending on where you purchase.

3. How We Use Your Information

We use personal data to provide and operate the Service (including generating outputs), maintain your account, process subscriptions and entitlements, communicate with you (including service and security notices), provide support, analyse and improve the Service, prevent fraud and abuse, and comply with legal obligations. We do not use uploaded photos for model training.

4. Legal Bases (EEA/UK and Similar Laws)

Where required, we rely on legal bases such as: (a) performance of a contract (providing the Service you request), (b) legitimate interests (e.g. security, abuse prevention, service improvement), (c) consent (e.g. optional website analytics cookies), and (d) compliance with legal obligations.

5. Sharing and Disclosure

We share personal data with service providers that help us operate the Service under contracts that require appropriate data protection. Depending on the feature, this may include: cloud hosting, authentication, and object storage (currently Supabase); workflow automation used in generation pipelines (currently n8n); website analytics if you consent (for example, Google Analytics); email delivery for support forms; and payment/subscription processing by Apple App Store and/or Google Play when you purchase in the apps. We may also disclose information if required by law, to protect rights and safety, or in connection with a merger, acquisition, or sale of assets. We do not sell personal information to third parties for their own marketing.

6. International Transfers

Your information may be processed in countries other than your own. Where required by law, we use appropriate safeguards for transfers (for example, standard contractual clauses or other approved mechanisms).

7. Data Retention

We retain account data for as long as your account is active and as needed to provide the Service and comply with legal obligations. Cloud-held visual assets (uploaded images, garment images, and generated images) are deleted from our storage on an automated schedule: generated outputs are typically removed about 14 days after a job finishes; failed or aborted jobs are typically cleaned within about 72 hours; unfinished provisional uploads are typically removed within about 1 hour. Job metadata (such as status and timestamps) may be kept longer for operations, billing, security, and legal compliance. Device-local wardrobe or pose files remain on your device until you delete them or uninstall the app. Analytics and logs may be retained in anonymised or aggregated form.

8. Data Security

We use technical and organisational measures including TLS in transit, private storage with account-scoped access controls, least-privilege access for operations, and regular security reviews. Image processing requires our systems to read file content to generate outputs; we do not claim end-to-end encryption where we cannot decrypt stored files. No method of transmission or storage is 100% secure; we cannot guarantee absolute security.

9. Your Rights and Choices

Depending on your location, you may have rights to access, correct, delete, or port your personal data, or to object to or restrict certain processing. You can update some account details in the Service, use our deletion form at drapai.com/delete-account, or contact us. Where we rely on consent (for example, optional analytics cookies on the website), you can withdraw consent at any time by changing your preferences. In the EEA/UK, you may have the right to lodge a complaint with a supervisory authority. We will respond to requests in accordance with applicable law.

10. Children

The Service is not directed at children under 13 (or the applicable age in your jurisdiction). We do not knowingly collect personal information from children. If you believe we have collected such information, please contact us and we will delete it.

11. Changes and Contact

We may update this Privacy Policy from time to time. We will post the updated version on the website and in the app and update the “Last updated” date. Material changes may be communicated by email or in-app notice.

12. Privacy Contact

For privacy-related inquiries or to exercise your rights, contact us at [email protected].