Privacy Policy
Draft version 1 — not yet reviewed
HalloweenDress, India ("we") is the controller of your personal data when you use Costume Closet. Contact: [email protected]. This is a plain-language summary of what we collect and why.
What we store and for how long
| Data | Purpose | Where | Retention |
|---|---|---|---|
| Uploaded selfie | Create your personalized preview | Private storage bucket "uploads" | Deleted immediately after the job ends (success, failure or rejection); hard sweep at 1 hour |
| Generated image | Show and download to you | Private storage bucket "outputs" | 14 days, or earlier if you delete it |
| Customer record (random ID, hashed IP and user agent, campaign/UTM source) | Session and anti-abuse | Database | Deleted after 90 days of inactivity if no purchase; otherwise anonymized on request |
| Recovery token (hash only on our side) | Keep your identity and credits when cookies are cleared | Database (hash); raw token in your browser localStorage and IndexedDB | 400 days since last use; revoked when you delete your data |
| Email (optional, from the Razorpay checkout) | Receipt and credit restore | Database | Until you ask for deletion or 24 months after your last purchase |
| Purchases and credit ledger | Accounting and credit balance | Database | As required by tax law (link to you is anonymized on deletion) |
| Events (product analytics) | Improve the product | Database | 12 months |
| Recommendation text and feedback | Improve matching | Database | 12 months |
Lawful basis
- Photo processing: your explicit consent (the consent box). We record that you accepted, with the policy version.
- Payments and credits: performance of the contract.
- Session, anti-abuse and analytics: our legitimate interest in running and securing a free service.
Photos and AI
Photos are used only to generate your preview. We do not use face recognition, do not keep photos beyond 1 hour, and do not use them to train models. The photo is sent to Google (Gemini API) as our AI processor; we rely on the paid API terms that exclude training on customer data.
Photo previews are for adults (18+). Photos that appear to show a minor are rejected.
Processors and sub-processors
- Google (Gemini): image and text AI
- Supabase: database and storage (EU region)
- Vercel: hosting (EU region)
- Razorpay: payments
- Resend: transactional email
- Upstash: rate limiting
- Sentry: error monitoring
- Plausible: cookieless analytics
- Cloudflare Turnstile: bot protection
Your rights
You can access, correct, export or delete your data. You can delete your data yourself with the "Delete my data" button below, or by emailing [email protected].
Deleting your data removes your photos, previews, feedback, recommendations and email, revokes your recovery token, and detaches this browser from your account. Remaining credits are forfeited. Purchase and ledger records required for accounting are kept without a link to you.
You can also complain to your local data protection authority.
Cookies and local storage
See the Cookies page for the full list. We use no advertising pixels or third-party trackers.
Children
The Service is not directed at minors and photo previews are for adults only.