Privacy policy
This policy covers Roopastra Enterprise: the try-on API, the storefront SDK, the merchant dashboard and the Roopastra apps and plugins for Shopify and WooCommerce. It is provided by ROOPASTRA FASHTECH PRIVATE LIMITED (CIN U74101TS2025PTC200770), registered office 22-1/16, Rallaguda, Shamshabad, Rangareddy, Telangana 501218, India; office: DSL Abacus IT Park, Uppal X Road, Hyderabad 500039 (“Roopastra”, “we”).
Merchants (our customers) decide to offer try-on to their shoppers. For shopper photos, the merchant is the controller and Roopastra processes them on the merchant's behalf.
What we collect
Merchant accounts: name, email, phone number, password (stored only as a one-way hash) or Google sign-in identity, organisation details (name, website, country, business type), billing details and GSTIN, API keys (secret keys are stored only as a hash), and settings such as your widget design and logo.
Payments: processed by Razorpay. We receive the payment status, amount and reference; we never see or store card or bank details.
Try-ons:the shopper's photo and the product image sent to create a try-on, the generated image, and request records (time, model, credits, status, the product reference the merchant sends). We do not ask shoppers for their name, email or account.
Technical data:IP addresses and request identifiers, used for security and rate limiting (for example, the per-shopper hourly limit), and anonymous widget counts (button shown, opened, uploaded, result, added to cart) for the merchant's funnel.
Shopify stores:when a merchant installs our Shopify app we store the shop's domain, name and primary domain, and an access token, encrypted at rest. The app asks for no access scopes and receives no Shopify customer or order data.
How we use it
- To create try-on images and return them to the merchant or the shopper who asked for them.
- To run merchant accounts: sign-in, API keys, credits, invoices, usage reports and support.
- To keep the service secure and fair: rate limits, abuse prevention and spending caps.
- To send service emails (sign-in codes, invoices, low-balance notices). We do not send marketing email without consent.
We do not sell personal data, and Roopastra does not use shopper photos to train models.
How long we keep it
- Shopper photos and product images sent for a try-on: deleted automatically within 24 hours.
- Generated try-on images: deleted automatically after 30 days.
- Server logs: 30 days.
- Merchant account data: while the account is open, and deleted on request after it is closed, except invoices and payment records, which we keep for as long as Indian tax law requires.
- Shopify store data: the access token is deleted when the app is uninstalled; everything else is erased when Shopify asks us to (shop redaction, sent 48 hours after uninstall).
Where it is processed
Our servers and storage are on Amazon Web Services in Mumbai, India (ap-south-1). Generated images are delivered through Amazon CloudFront with links that expire. Try-on images are generated by AI infrastructure providers we contract with, who process the images only to return the result. Email is sent through Resend; payments go through Razorpay. Data may be processed outside India by these providers under contractual safeguards.
Security
Traffic is encrypted with TLS. Passwords and secret keys are hashed; Shopify tokens are encrypted. Access to production systems is limited to Roopastra staff who need it, and staff actions in our admin tools are recorded in an audit log.
Your choices and rights
You can ask to access, correct or delete your personal data, or withdraw consent, under India's Digital Personal Data Protection Act, 2023 and, where it applies, the GDPR. Merchants can delete API keys and close their account from the dashboard or by emailing us. Shoppers should contact the store first; we will help the store answer. We reply within 30 days.
Contact
Email info@roopastra.com or write to ROOPASTRA FASHTECH PRIVATE LIMITED at the address above. We will post changes to this policy on this page and update the date at the top.