Privacy Policy

1. Who We Are (Controller) and Contact

DRAPAI (“we”, “us”) is responsible for deciding how and why we process personal data for the Service. If you have questions or requests, contact us at [email protected]. For account and data deletion requests, you can also use our public form at drapai.com/delete-account.

2. Information We Collect

• Account and profile data: Such as email address and basic account details you provide when you create or manage an account.
• User content: Photos or images you upload to use virtual try-on and the images generated as outputs. To let you view results, we keep visual assets (uploaded images, garment images, and generated images) for about 1 hour, then delete them from our storage. These files are encrypted in transit and at rest, access is strictly controlled, and we do not use uploaded photos to train our AI models.
• Usage and diagnostics: Information about how you use the Service (e.g. feature usage) and limited logs needed for reliability, security, and troubleshooting.
• Device and app data (mobile): Device identifiers and app events where needed for security, functionality, and analytics. For example, the mobile app may log product events (like opening Studio or exporting) associated with your account user ID to improve the product and prevent abuse.
• Website data (cookies/local storage): On the website, we may use cookies or local storage for essential functionality and, if you consent, analytics (for example, Google Analytics with IP anonymization enabled where supported). See our Cookie Policy for details.
• Communications: Messages you send us (support requests, contact forms, deletion requests).
• Payments: If you purchase a subscription, we receive records needed to provide the purchase (for example, transaction identifiers and subscription status). Payment processing may be handled by the relevant platform (e.g. Apple App Store / Google Play) or our payment providers depending on where you purchase.

3. How We Use Your Information

We use personal data to provide and operate the Service (including generating outputs), maintain your account, process subscriptions and entitlements, communicate with you (including service and security notices), provide support, analyse and improve the Service, prevent fraud and abuse, and comply with legal obligations. We do not use uploaded photos for model training.

4. Legal Bases (EEA/UK and Similar Laws)

Where required, we rely on legal bases such as: (a) performance of a contract (providing the Service you request), (b) legitimate interests (e.g. security, abuse prevention, service improvement), (c) consent (e.g. optional website analytics cookies), and (d) compliance with legal obligations.

5. Sharing and Disclosure

We share personal data with service providers that help us operate the Service (for example, hosting, storage, analytics, email delivery, and payment processing), under contracts that require appropriate data protection. We may also disclose information if required by law, to protect rights and safety, or in connection with a merger, acquisition, or sale of assets. We do not sell personal information to third parties for their own marketing.

6. International Transfers

Your information may be processed in countries other than your own. Where required by law, we use appropriate safeguards for transfers (for example, standard contractual clauses or other approved mechanisms).

7. Data Retention

We retain account data for as long as your account is active and as needed to provide the Service and comply with legal obligations. Visual assets (uploaded images, garment images, and generated images) are kept for about 1 hour so you can view them, then deleted from our storage. We may retain limited data for legal, security, fraud prevention, billing, or dispute-handling reasons where required. Analytics and logs may be retained in anonymised or aggregated form.

8. Data Security

We implement industry-standard security measures including encryption in transit and at rest, in-memory processing for uploaded try-on photos, strict access controls, and regular security reviews to protect your personal information. No method of transmission or storage is 100% secure; we cannot guarantee absolute security.

9. Your Rights and Choices

Depending on your location, you may have rights to access, correct, delete, or port your personal data, or to object to or restrict certain processing. You can update some account details in the Service, use our deletion form at drapai.com/delete-account, or contact us. Where we rely on consent (for example, optional analytics cookies on the website), you can withdraw consent at any time by changing your preferences. In the EEA/UK, you may have the right to lodge a complaint with a supervisory authority. We will respond to requests in accordance with applicable law.

10. Children

The Service is not directed at children under 13 (or the applicable age in your jurisdiction). We do not knowingly collect personal information from children. If you believe we have collected such information, please contact us and we will delete it.

11. Changes and Contact

We may update this Privacy Policy from time to time. We will post the updated version on the website and in the app and update the “Last updated” date. Material changes may be communicated by email or in-app notice.

12. Privacy Contact

For privacy-related inquiries or to exercise your rights, contact us at [email protected].