Privacy Policy

Last Updated: November 27, 2025

Welcome to Vastraa! This Privacy Policy explains how we collect, use, disclose, and protect your information when you use our mobile application ("App"). We are committed to protecting your privacy and ensuring transparency about our data practices.

1. Information We Collect

1.1 Information You Provide Directly

When you create an account and use Vastraa, we collect:

• Account Information: Name, email address, password, and profile information
• Wardrobe Content: Photos of clothing items, descriptions, categories, tags, and metadata
• Outfit Combinations: Saved outfit ideas and preferences
• Communications: Messages you send to customer support or feedback
• User Preferences: Style preferences, favorite items, and customization settings

1.2 Information Automatically Collected

When you use the App, we automatically collect:

• Device Information: Device type, operating system, device identifiers, mobile network information
• Usage Data: Features used, time spent in app, interaction patterns, navigation paths
• Log Data: IP address, access times, app crashes, error reports
• Camera and Photo Access: When you grant permission to upload wardrobe items
• Storage Access: To save and retrieve your wardrobe photos

1.3 Information from Third Parties

• Authentication Services: If you sign up using Google or other third-party services, we receive basic profile information
• Analytics Providers: Aggregated usage statistics to improve app performance

2. How We Use Your Information

2.1 To Provide and Improve Services

• Create and manage your account
• Store and organize your wardrobe items
• Generate AI-powered outfit recommendations
• Provide styling suggestions based on your wardrobe
• Enable you to create and save outfit combinations
• Sync your data across devices

2.2 To Enhance User Experience

• Personalize content and recommendations
• Remember your preferences and settings
• Analyze usage patterns to improve features
• Develop new features and services
• Conduct research and analytics

2.3 For Communication

• Send service-related notifications and updates
• Respond to your inquiries and support requests
• Send promotional content (with your consent)
• Notify you of changes to our Terms or Privacy Policy

2.4 For Security and Legal Compliance

• Detect and prevent fraud, abuse, and security incidents
• Monitor and analyze security threats
• Comply with legal obligations and regulations
• Enforce our Terms and Conditions
• Protect our rights and the rights of others

3. AI and Machine Learning

4. How We Share Your Information

4.1 We Do NOT Sell Your Personal Information

We do not sell, rent, or trade your personal information to third parties for their marketing purposes.

4.2 Service Providers

We may share your information with trusted service providers who assist us in operating the App:

• Cloud Storage Providers: To securely store your wardrobe photos and data
• Analytics Services: To understand app usage and improve performance
• Authentication Services: To verify your identity during login
• Customer Support Tools: To respond to your inquiries

These providers are contractually obligated to protect your data and use it only for specified purposes.

4.3 Legal Requirements

We may disclose your information if required to:

• Comply with legal obligations, court orders, or government requests
• Protect the safety and security of our users
• Investigate potential violations of our Terms
• Defend against legal claims

4.4 Business Transfers

If Vastraa is involved in a merger, acquisition, or sale of assets, your information may be transferred. We will notify you before your information becomes subject to a different privacy policy.

4.5 With Your Consent

We may share your information with third parties when you provide explicit consent.

5. Data Storage and Security

5.1 Data Storage

• Your data is stored on secure cloud servers with encryption
• Wardrobe photos are stored with access controls and authentication
• Data is backed up regularly to prevent loss
• We use industry-standard security measures to protect your data

5.2 Security Measures

We implement comprehensive security measures including:

• Encryption: Data is encrypted in transit (TLS/SSL) and at rest
• Authentication: Secure login with password hashing
• Access Controls: Limited employee access to personal data
• Regular Security Audits: Ongoing monitoring and testing
• Incident Response: Procedures to address security breaches

5.3 Data Retention

• We retain your data as long as your account is active
• After account deletion, data is removed within 30 days
• Some data may be retained longer for legal or security purposes
• Backup copies are deleted according to our retention schedule

6. Your Rights and Choices

6.1 Access and Control

You have the right to:

• Access: View and download your personal data
• Correct: Update or correct inaccurate information
• Delete: Request deletion of your account and data
• Export: Download your wardrobe data in a portable format
• Object: Object to certain data processing activities

6.2 Communication Preferences

• Opt-out of promotional emails via unsubscribe links
• Control push notifications in your device settings
• You cannot opt-out of essential service communications

6.3 Account Deletion

To delete your account:

1. Go to Profile Settings in the App
2. Select "Delete Account"
3. Confirm your decision
4. Your account and data will be permanently deleted within 30 days

6.4 Data Portability

You can request a copy of your data in a machine-readable format by contacting us at support@vastraa.app.

7. Permissions and Access

Permission	Purpose	Required/Optional
Camera	To photograph clothing items for your wardrobe	Optional (required for photo features)
Photo Library	To select existing photos from your device	Optional (required for photo features)
Storage	To save and cache wardrobe images locally	Required
Internet	To sync data and access AI features	Required
Notifications	To send outfit suggestions and reminders	Optional

8. Children's Privacy

Vastraa is not intended for children under 13 years of age (or 16 in certain jurisdictions). We do not knowingly collect personal information from children. If we discover that we have collected information from a child, we will delete it immediately. If you believe a child has provided us with personal information, please contact us.

9. International Data Transfers

Your information may be transferred to and stored on servers located outside your country of residence. We ensure that such transfers comply with applicable data protection laws and that your data receives adequate protection.

9.1 For EEA/UK Users

If you are in the European Economic Area or United Kingdom, we comply with GDPR requirements:

• Data transfers use Standard Contractual Clauses or other approved mechanisms
• You have additional rights under GDPR (see Section 10)
• We have a legal basis for processing your data

9.2 For California Users

If you are a California resident, you have additional rights under CCPA (see Section 11).

10. Rights for EEA/UK Users (GDPR)

If you are located in the European Economic Area or United Kingdom, you have additional rights:

• Right to Access: Confirm whether we process your data and obtain a copy
• Right to Rectification: Correct inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data
• Right to Restriction: Limit how we use your data
• Right to Data Portability: Receive your data in a structured format
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent at any time
• Right to Lodge a Complaint: File a complaint with your supervisory authority

Legal Basis for Processing

We process your data based on:

• Contract: To provide services you've requested
• Consent: When you've given explicit consent
• Legitimate Interests: To improve and secure our services
• Legal Obligation: To comply with applicable laws

11. California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have the following rights:

• Right to Know: What personal information we collect, use, and share
• Right to Delete: Request deletion of your personal information
• Right to Opt-Out: Opt-out of the sale of personal information (we don't sell data)
• Right to Non-Discrimination: Equal service regardless of privacy rights exercise
• Right to Correct: Request correction of inaccurate information
• Right to Limit: Limit use of sensitive personal information

Categories of Personal Information Collected

In the past 12 months, we have collected the following categories:

• Identifiers (name, email, device ID)
• Commercial information (wardrobe items, preferences)
• Internet activity (usage data, interactions)
• Visual information (clothing photos)
• Inferences (style preferences, recommendations)

12. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to:

• Maintain your login session
• Remember your preferences
• Analyze app performance and usage
• Improve user experience

Types of Tracking Technologies:

• Essential: Required for app functionality
• Analytics: To understand usage patterns (can be disabled)
• Preference: To remember your settings

13. Third-Party Links

The App may contain links to third-party websites or services (e.g., fashion retailers, style blogs). We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in:

• Our data practices
• Legal requirements
• App features and functionality
• User feedback and best practices

We will notify you of significant changes by:

• Posting the updated policy in the App
• Sending an email notification
• Displaying an in-app notice

Your continued use of the App after changes become effective constitutes acceptance of the revised Privacy Policy.

15. Data Breach Notification

In the unlikely event of a data breach that affects your personal information, we will:

• Notify affected users without undue delay
• Report the breach to relevant authorities as required
• Take immediate steps to contain and remediate the breach
• Provide information about the nature of the breach and protective measures

16. Your Responsibilities

To protect your privacy, you should:

• Keep your password secure and confidential
• Use a strong, unique password
• Log out of shared devices
• Review your account activity regularly
• Report suspicious activity immediately
• Keep your app updated to the latest version

---

---

© 2025 Vastraa. All rights reserved.