Data Policy

1. Overview

This Data Policy explains how Torziva handles data, including customer photos, store data, and analytics information. We are committed to transparency and protecting the privacy of both store owners and their customers.

2. Customer Photo Handling

2.1 Photo Processing

When an end-user uploads a photo for virtual try-on:

• The photo is uploaded securely via encrypted connection (HTTPS)
• It is processed by our AI system to generate the try-on result
• The original photo and result are stored temporarily during processing
• Both images are automatically deleted after processing completes

2.2 Automatic Deletion

Customer photos are automatically deleted according to these rules:

• Successful try-ons: Deleted within 1 hour of processing
• Failed processing attempts: Deleted within 24 hours
• No photos are retained for training, analysis, or any other purpose

2.3 No Photo Reuse

We do not use customer photos to train AI models, improve our algorithms, or for any purpose other than generating the immediate try-on result requested.

3. Product Image Handling

Product images from your store are accessed to generate try-on results:

• Images are fetched from your store when a try-on is requested
• We may cache product images temporarily to improve performance
• Cached images are refreshed periodically and deleted when no longer needed

4. Analytics Data

4.1 What We Track

For analytics purposes, we collect:

• Try-on button clicks (count only, no user identification)
• Try-on completions and success rates
• Product categories tried on
• General device and browser information

4.2 What We Don't Track

• Personal information of end-users
• Browsing behavior outside of try-on interactions
• Purchase history or cart contents
• Any data not directly related to try-on functionality

5. Data Storage and Security

5.1 Infrastructure

Our services are hosted on secure cloud infrastructure with:

• Encryption at rest and in transit
• Regular security audits and updates
• Access controls and authentication
• Monitoring and logging for security purposes

5.2 Data Location

Data may be processed in data centers located in India and Europe. We use reputable cloud providers that maintain appropriate security certifications.

6. GDPR Compliance

For users in the European Economic Area (EEA), we comply with GDPR requirements:

• Lawful basis for processing (consent or legitimate interest)
• Data minimization (we only collect what's necessary)
• Purpose limitation (data used only for stated purposes)
• Storage limitation (automatic deletion policies)
• Rights of data subjects (access, correction, deletion)

7. Third-Party Services

We use the following categories of third-party services:

• Cloud hosting: For infrastructure and data storage
• Payment processing: For secure payment handling
• AI processing: For generating try-on results

All third-party providers are selected for their security practices and compliance with relevant regulations.

8. Data Breach Notification

In the event of a data breach that affects your information, we will notify you within 72 hours of becoming aware of the breach, in accordance with applicable laws.

9. Contact Us

For questions about our data practices, please contact our Data Protection Officer at support@torziva.site.