Privacy Policy

1. Who we are

VYBE provides an in-store styling tool that generates photoreal looks on a retailer's customers from that retailer's own product catalogue. In this policy "we", "us" and "VYBE" mean the company that operates the VYBE service.

For information a retail store enters about its own walk-in customers (customer name, phone, photos, generated looks, try-on outcomes), the store is the data controller and VYBE acts as its processor, handling that data only to provide the service and on the store's instructions. For account, billing and website data, VYBE is the controller.

2. Information we collect

• •Account and onboarding details: your name, work email, phone number, business and legal-entity name, tax ID, billing email and address, store name and location, and the names, emails, phone numbers and roles of the team members you invite.
• •Store operational data: your product catalogue (names, images, prices, attributes) and the user accounts of your staff.
• •Customer data your staff enter: a customer's name, phone or email where provided, the photo(s) captured for a session, the looks generated, and the outcomes recorded (what was tried, what was purchased).
• •Usage and technical data: IP address, browser and device information, pages viewed, actions taken, timestamps, and diagnostic logs.
• •Cookies and local storage: a session cookie to keep you signed in, and browser storage for preferences such as light/dark theme and interface language. We do not use third-party advertising or cross-site tracking cookies.
• •Messages you send us: the contents of the contact form, support emails and any attachments.

3. How we use information

• •To provide, operate and secure the service, including generating looks, storing sessions and producing shareable customer links.
• •To set up your workspace after you request a trial, and to communicate with you about your account, trial and support requests.
• •To calculate usage, apply your plan's included volume and bill any overage after a paid plan begins.
• •To monitor for abuse, fraud and security incidents, and to enforce our Terms.
• •To improve the service — for example, aggregate and de-identified analytics on feature usage and generation quality.
• •To comply with legal obligations and respond to lawful requests.

4. Customer photos and generated looks

Customer photos are the most sensitive data in the service and are treated accordingly. A photo may only be captured after the store confirms it has the customer's consent. Photos and generated looks are served over private, non-cached URLs and are not publicly listed.

To generate a look, a customer photo and selected product images are sent to third-party AI image providers for processing (see "Sub-processors" below). We select providers and configure account settings to disable use of submitted images for model training wherever that option is offered. We do not sell customer photos or use them for advertising.

Photos, looks and session data are retained according to the store's settings and our routine retention cleanup, and are deleted when a store deletes a session or closes its account, subject to short backup-retention windows and any legal hold.

5. Sub-processors

We use a small number of vendors to run the service. Each is bound by contract to protect the data they process for us:

• •Cloud hosting and content delivery (application hosting and edge network).
• •Managed database (storage of account, catalogue, session and usage records).
• •Object storage (customer photos, product images and generated look images).
• •AI image generation providers (processing of customer and product images to produce looks).
• •Email delivery (transactional email such as trial, resume and notification messages).

6. Sharing and disclosure

We do not sell personal information. We share it only with the sub-processors above, with your own organisation's authorised users, where you ask us to (for example, a shareable customer look link you choose to send), to professional advisers, in connection with a merger or acquisition, or where required by law or to protect rights and safety.

7. International transfers

Some sub-processors operate outside India. Where personal information is transferred across borders, we rely on contractual protections and appropriate safeguards consistent with applicable law.

8. Data retention

Account, billing and legal-entity records are kept for as long as your account is active and then for the period required to meet tax, accounting and legal obligations. Customer session data, photos and looks follow the retention rules described above. Contact-form messages are kept for up to 24 months. Diagnostic logs are kept for a short rolling period.

9. Security

We protect information with encryption in transit, access controls and least-privilege internal access, private storage for customer images, session tokens stored only as hashes, and audit logging of administrative actions. No system is perfectly secure; if a breach affects your data we will notify you and the relevant authorities as required by law.

10. Your rights

Depending on your location and role, you may have the right to access, correct, delete or export personal information, to withdraw consent, and to object to or restrict certain processing. Store staff and account owners can manage most data directly in the app. For anything else, or for requests about a store's customer data, contact us at the address below — we will route customer-data requests to the responsible store where we act only as processor.

11. Children

The service is a business tool and is not directed to children. Stores must not capture photos of, or enter data about, individuals who cannot lawfully consent without the consent of a parent or guardian.

12. Changes to this policy

We may update this policy from time to time. Material changes will be notified through the service or by email. The "last updated" date at the top of this page always reflects the current version.

13. Contact and grievances

Questions, requests or complaints about privacy can be sent to hello@vybefs.com. We will acknowledge grievances promptly and respond within the timelines required by applicable law, including India's Digital Personal Data Protection Act, 2023.