Legal

Privacy Policy

Effective from 1 January 2026

We try to keep this clear and free of legal-speak. If anything is unclear, write to us at contact@styola.com.

1. What this policy covers

This policy explains what information Styola (“we”, “us”) collects when you browse styola.com, create an account, complete the body scan or style quiz, place an order, save a wardrobe, or contact support — and how we use, share, store, and protect it. It applies to the Styola storefront and the Styola mobile app. By using Styola you agree to this policy. If you do not agree, please do not use the service.

2. Information we collect

Account & contact details — your name, email address, mobile number, gender, date of birth, and a securely hashed password. We never store your password in readable form.

Body & image data — the photos you choose to capture for the AI fit experience (front, side, and a face selfie), and the data we derive from them: approximate body measurements, a 3D body model, and general visual-style attributes (skin-tone range, face/body shape category, hair and eye colour, colour palette). See section 3 for full detail — this is the most sensitive data we handle and we treat it accordingly.

Orders, addresses & payments — your delivery addresses, order, return and refund history, Styola wallet balance, and your chosen payment mode. Card / UPI / netbanking details are entered with and held by our PCI-DSS-compliant payment partner — Styola never sees or stores your full payment-instrument number.

Location — with your permission, your device location to auto-fill and verify delivery addresses and check serviceability; otherwise an approximate location derived from your IP address.

Usage & device data — pages viewed, items clicked, searches (including the text transcribed from voice search), device type and identifiers, and push-notification tokens. Used mostly in aggregate to improve the service.

Communications — the content of support tickets, emails, and chats you send us.

3. Body scan, photos & camera — what we do and don't do

Why we ask for photos. Styola's core feature is accurate fit and personalised style. With your explicit permission, you capture front, side, and face photos. From these we compute approximate body measurements and a 3D body model to recommend the right size and show how items fit, and we derive general visual-style attributes (skin tone, face/body shape, colour palette) to suggest colours, silhouettes, and outfits that suit you.

On-device pose guidance. While you line up a body photo, the app runs pose detection (Google ML Kit / MediaPipe) on your device to guide you into the correct T-pose. This live camera analysis happens locally on your phone — those preview frames are not uploaded. Only the still photos you choose to confirm are sent to us.

What we do NOT do. We do not create a faceprint, facial-geometry mesh, or any biometric template; we do not use your photos to identify, authenticate, or recognise you; and we do not use them for advertising, profiling, or to train third-party AI models. Photos and derived attributes are used only to power your fit and style recommendations.

How they're processed & stored. Confirmed photos are transmitted over TLS to our own cloud infrastructure (AWS), processed by our own AI models, and encrypted at rest. They are not passed to external advertising networks, analytics providers, or data brokers.

Retention & deletion. Source photos are retained for a maximum of 30 days and then automatically and permanently deleted (including from backups). The non-identifying derived attributes (e.g. “cool-toned palette”, a measurement set) are kept only while your account is active so your saved recommendations keep working. You can delete everything any time by deleting your account or emailing us, and you can revoke camera access in your device settings at any point.

4. Location & device permissions

Styola only asks for a device permission when a feature needs it, and you can decline or revoke any of them from your device / browser settings:

Camera — to capture the body-scan and face photos for fit and style analysis (section 3).
Microphone — only when you tap voice search; we convert your speech to a text query and do not keep the audio.
Location — to auto-fill and verify delivery addresses, check delivery serviceability, and speed up checkout.
Photos / storage — only if you pick an existing photo instead of taking a new one.
Notifications — to send order, delivery, and (if you opt in) promotional updates.

Declining a permission only disables the related feature — the rest of Styola keeps working.

5. Orders, payments & wallet

When you place an order we process your delivery address, contact number, the items and amount, and your chosen payment mode to fulfil and ship it, handle returns and refunds, and maintain your order history and Styola wallet.

Payments are processed by our PCI-DSS-compliant payment partner (Razorpay). You enter card / UPI / netbanking details with them, not with Styola — we receive only a payment status and a non-sensitive reference, never your full card or UPI credentials. Refunds are returned to your original payment method or Styola wallet per our Returns & Refunds policy.

6. How we use your information

To create and secure your account and authenticate you.
To compute measurements, fit, colour, and style recommendations from your scan and preferences.
To process and deliver orders, payments, returns, refunds, and wallet transactions.
To provide customer support and respond to your tickets and messages.
To send transactional messages (orders, returns, account) and — only if you opt in — marketing about new arrivals and offers, which you can stop any time.
To detect, prevent, and investigate fraud, abuse, and security incidents.
To improve and build features, using aggregated or anonymised data wherever possible.
To comply with tax, accounting, and other legal obligations.

7. How we share information

Merchants / sellers see only what they need to fulfil your order — your name, delivery address, mobile number, and the items you bought from them. They do not see your full order history, payment details, measurements, or photos.
Service providers process data on our behalf under contract: payments (Razorpay), shipping & logistics (Shiprocket / courier partners), cloud hosting (AWS), and notifications. They may use it only to provide their service to us.
AI processing of your photos and measurements runs on our own infrastructure — it is not handed to external AI vendors.
Legal & safety — we may disclose information where required by law or to protect the rights, safety, or property of Styola, our users, or the public.
We never sell your personal information.

8. How long we keep it

Body-scan / face photos — maximum 30 days, then automatically deleted (see section 3).
Derived measurements & style attributes — while your account is active, deletable on request.
Order & invoice records — as long as required by Indian tax and consumer-protection law (typically up to 8 years), even after account deletion (then de-identified where possible).
Marketing preferences & usage logs — up to 24 months.

9. Security

We protect data in transit with TLS and at rest with industry-standard encryption. Access to customer data within Styola is restricted to staff who need it for support or engineering and is logged. No system is perfectly secure, so please use a strong, unique password and keep your account credentials private.

10. Your rights & choices

Access & correct your profile from Account → Profile.
Delete your account from Account → Settings → Delete account — this erases your profile, photos, derived attributes, wardrobe, wishlist, and saved addresses. Records the law requires us to keep are retained but de-identified where possible.
Delete your photos / scan data any time, independently of your account, by emailing us.
Revoke permissions (camera, microphone, location, notifications) from your device / browser settings.
Export a copy of your data, and withdraw consent to marketing, any time — with no impact on the rest of the service.

11. Cookies

We use essential cookies to keep you signed in, remember your cart, and protect against fraud. Optional analytics cookies help us understand how the site is used. Your browser settings let you block cookies, but core features (sign-in, checkout) may stop working.

12. Children

Styola is intended for adults aged 18 and older. We do not knowingly collect data from anyone under 18. If you believe a minor has created an account, please write to us and we will delete it.

13. Changes to this policy

We may update this policy as our service evolves. We will post the new version here with a fresh effective date, and notify you of material changes by email or in the app.

14. Contact

For privacy questions, to exercise any right above, or to reach our grievance officer, write to contact@styola.com.