Privacy Policy

1. Who We Are (Controller) and Contact

DRAPAI (“we”, “us”) is responsible for deciding how and why we process personal data for the Service. If you have questions or requests, contact us at [email protected]. For account and data deletion requests, you can also use our public form at drapai.com/delete-account.

2. Information We Collect

• Account and profile data: Such as email address and basic account details you provide when you create or manage an account.
• User content: Photos or images you upload for virtual try-on and the images generated as outputs. These files are processed on our systems (including service providers that run generation workflows) to produce results. We keep visual assets only for a limited retention window: by default about 21 minutes after a job finishes, with outputs sometimes kept for up to 14 days; unfinished provisional uploads may be removed sooner (typically within about 1 hour). Files are transmitted over TLS, stored in private access-controlled storage scoped to your account, and we do not use uploaded photos to train AI models.
• Usage and diagnostics: Information about how you use the Service (e.g. feature usage) and limited logs needed for reliability, security, and troubleshooting.
• Device and app data (mobile): Device identifiers and app events where needed for security, functionality, and analytics. For example, the mobile app may log product events (like opening Studio or exporting) associated with your account user ID to improve the product and prevent abuse.
• Website data (cookies/local storage): On the website, we may use cookies or local storage for essential functionality and, if you consent, analytics (for example, Google Analytics with IP anonymization enabled where supported). See our Cookie Policy for details.
• Communications: Messages you send us (support requests, contact forms, deletion requests).
• Payments: If you purchase a subscription, we receive records needed to provide the purchase (for example, transaction identifiers and subscription status). Payment processing may be handled by the relevant platform (e.g. Apple App Store / Google Play) or our payment providers depending on where you purchase.

3. How We Use Your Information

We use personal data to provide and operate the Service (including generating outputs), maintain your account, process subscriptions and entitlements, communicate with you (including service and security notices), provide support, analyse and improve the Service, prevent fraud and abuse, and comply with legal obligations. We do not use uploaded photos for model training.

4. Legal Bases (EEA/UK and Similar Laws)

Where required, we rely on legal bases such as: (a) performance of a contract (providing the Service you request), (b) legitimate interests (e.g. security, abuse prevention, service improvement), (c) consent (e.g. optional website analytics cookies), and (d) compliance with legal obligations.

5. Sharing and Disclosure

We share personal data with service providers that help us operate the Service (for example, hosting, storage, analytics, email delivery, and payment processing), under contracts that require appropriate data protection. We may also disclose information if required by law, to protect rights and safety, or in connection with a merger, acquisition, or sale of assets. We do not sell personal information to third parties for their own marketing.

6. International Transfers

Your information may be processed in countries other than your own. Where required by law, we use appropriate safeguards for transfers (for example, standard contractual clauses or other approved mechanisms).

7. Data Retention

We retain account data for as long as your account is active and as needed to provide the Service and comply with legal obligations. Visual assets (uploaded images, garment images, and generated images) are deleted from storage on an automated schedule—by default within about 21 minutes after a job reaches a finished state, with outputs sometimes retained for up to 14 days. Unfinished provisional uploads may be removed sooner (typically within about 1 hour). Job metadata (such as status and timestamps) may be kept longer for operations, billing, security, and legal compliance. Analytics and logs may be retained in anonymised or aggregated form.

8. Data Security

We use technical and organisational measures including TLS in transit, private storage with account-scoped access controls, least-privilege access for operations, and regular security reviews. Image processing requires our systems to read file content to generate outputs; we do not claim end-to-end encryption where we cannot decrypt stored files. No method of transmission or storage is 100% secure; we cannot guarantee absolute security.

9. Your Rights and Choices

Depending on your location, you may have rights to access, correct, delete, or port your personal data, or to object to or restrict certain processing. You can update some account details in the Service, use our deletion form at drapai.com/delete-account, or contact us. Where we rely on consent (for example, optional analytics cookies on the website), you can withdraw consent at any time by changing your preferences. In the EEA/UK, you may have the right to lodge a complaint with a supervisory authority. We will respond to requests in accordance with applicable law.

10. Children

The Service is not directed at children under 13 (or the applicable age in your jurisdiction). We do not knowingly collect personal information from children. If you believe we have collected such information, please contact us and we will delete it.

11. Changes and Contact

We may update this Privacy Policy from time to time. We will post the updated version on the website and in the app and update the “Last updated” date. Material changes may be communicated by email or in-app notice.

12. Privacy Contact

For privacy-related inquiries or to exercise your rights, contact us at [email protected].