Privacy Policy

Last updated: 2026-05-11

This Privacy Policy describes how Drape collects, uses, stores, and shares your personal data. It is written to comply with India's Digital Personal Data Protection Act, 2023 (the "DPDP Act").

1. Who we are

Drape ("we", "us") operates the AI fashion platform at drape.app. We are the Data Fiduciary under the DPDP Act for personal data you provide in connection with the Service.

2. Data we collect

Account data

• Email address (required for sign-in)
• Display name (optional)
• Authentication identifiers from Google (if you use Google sign-in)

Usage data

• Images you upload to generate content
• Generated outputs (images, videos)
• Project metadata (titles, timestamps, settings)
• Credits, subscriptions, and payment records

Technical data

• IP address, user agent, device type
• Session timestamps
• Error logs

Payment data

We do not store your card details. Razorpay processes all payments and stores card data per their own privacy policy. We retain only the Razorpay payment / subscription IDs and the amount charged.

3. How we use your data

• To deliver the Service (generate AI content, process payments, authenticate sessions)
• To improve our infrastructure (debugging, performance monitoring, capacity planning)
• To send transactional emails (payment confirmations, renewal failures, subscription changes)
• To detect and prevent abuse
• To comply with legal obligations

We do NOT use your uploaded images or generated outputs to train AI models without your explicit, opt-in consent.

4. Who we share data with

• Fashn AI — for AI image / video generation. Images sent for processing are subject to Fashn's privacy policy.
• Supabase — for database hosting, authentication, and storage.
• Razorpay — for payment processing.
• Vercel — for application hosting and edge logging.

We do not sell your personal data to anyone. We do not share your data with advertisers.

We may share data with Indian authorities if required by a valid legal order.

5. Where your data is stored

Your data is stored on Supabase infrastructure in the Asia-Pacific region and Vercel infrastructure (multi-region). Image processing through Fashn may briefly traverse their infrastructure (region: USA at the time of writing).

6. How long we keep your data

• Account data: as long as your account exists
• Uploaded images: 30 days after upload (then auto-deleted from storage)
• Generated outputs: as long as you keep them in your gallery
• Payment records: 7 years (Indian tax law requires retention)
• Server logs: 90 days

When you delete your account, we delete or anonymize your personal data within 30 days, except where retention is legally required.

7. Your rights under the DPDP Act

You have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Erase data we no longer need
• Grievance redressal (raise a complaint to our Grievance Officer)
• Nominate another individual to exercise your rights if you are incapacitated or deceased

To exercise any of these rights, email privacy@drape.app. We will respond within 30 days.

8. Grievance Officer

Under the DPDP Act, we have appointed a Grievance Officer to handle privacy-related complaints:

• Name: [To be filled by user before launch]
• Email: grievance@drape.app
• Address: [Registered business address — to be filled]

9. Security

We use industry-standard practices: TLS for all traffic, encrypted storage, role-based access controls, server-side authentication verification on every request. No system is perfectly secure; we will notify affected users without undue delay if a breach affects your data, as required by the DPDP Act.

10. Children

Drape is not intended for users under 18. We do not knowingly collect personal data from minors.

11. Cookies

We use cookies only for authentication (Supabase session cookie) and locale preference (drape-locale). We do not use analytics or advertising cookies in this version.

12. Updates to this policy

Material changes are announced on this page and via email at least 14 days before they take effect.

13. Contact

• Privacy questions: privacy@drape.app
• Grievances: grievance@drape.app
• General support: support@drape.app

This policy is a starting point. Indian boutique founders should review with legal counsel before launching paid products to consumers.