Home · Privacy Policy

Privacy Policy

Effective 15 September 2026 · Last updated 15 September 2026 · WearItOn Chrome extension and weariton.shop

WearItOn (“we”, “us”) operates the WearItOn Chrome extension and the website at weariton.shop. We help you preview clothing on product pages and on our site: colour and size notes, 2D virtual try-on, optional studio avatars, wardrobe/outfit tools, and Pro features such as side views and 3D looks. This Privacy Policy explains what personal data we process, why, where it goes, how long we keep it, and the choices you have.

Related documents: Terms and Conditions · Cancellation and Refund · Shipping and Exchange · Contact Us · Photo use.

1. Who we are and how to contact us

Controller for personal data processed for WearItOn: WearItOn, weariton.shop.
Privacy / data requests: support@weariton.shop
Please include “Privacy request” in the subject line and enough detail for us to find your account (email used to sign in).

2. Scope

This policy covers: (a) the Chrome extension; (b) weariton.shop and related APIs; (c) account, billing, wardrobe, wallet (India), and generation features. It does not cover retailer websites you visit (Amazon, Myntra, etc.) — those have their own policies.

3. Data we process

3.1 Account and authentication

• Email address and password (or auth tokens) if you create an account. Authentication is provided by Supabase Auth.
• You may use guest / local mode without an account for some extension features; cloud sync then will not apply.

3.2 Profile and body data

• Height, weight, optional measurements (chest/bust, waist, hips, shoulders), gender preference for avatar setup, and style notes you enter.
• Stored in browser local storage and, if signed in, in your private account storage.

3.3 Photos and biometric-adjacent imagery

• Full-body or face photos you upload for try-on or avatar generation.
• Derived images: studio avatars, try-on stills, optional side views.
• On-device face/pose helpers may run in the browser (e.g. WebAssembly models); those intermediates stay on your device unless a feature sends a compressed image for generation.
• Photo features require affirmative consent — see Photo use and /consent.

3.4 Product and browsing context (extension)

• Product image URLs, product page URLs, product titles/metadata needed to detect apparel and generate a try-on.
• We request broad host permission so the panel can work on fashion sites we have not listed by name. We do not operate a general browsing-history product; non-shop pages are ignored for try-on.

3.5 Wardrobe, outfits, and saves

• Garment records, look trays, rendered outfit covers, and similar library data you create while signed in.

3.6 Payments and subscriptions

• Checkout is handled by Razorpay. We receive and store order id, payment id, plan id, amount, currency, and a signed plan token / expiry so we can unlock Pro.
• We do not store full card numbers, CVV, or UPI PINs. Card/UPI entry happens on Razorpay’s checkout.
• Billing email you provide at checkout may be stored with the paid plan record.

3.7 Coins / wallet (India only)

• Where offered, coin balances, pending rewards, withdrawal requests, and a UPI ID you choose to save for payout (encrypted at rest). Wallet UI is limited to India-facing visitors.

3.8 Approximate location

• IP-based country / currency detection (e.g. India → INR packs; elsewhere → USD) via server geo lookup or edge headers. Used for pricing, plan catalogue, and whether wallet is shown — not for advertising profiles.

3.9 Technical and security logs

• IP address, user agent, timestamps, error codes, and rate-limit counters may be processed briefly to operate APIs, prevent abuse, and debug outages.

3.10 Consent records

• A local flag (version + timestamp) when you accept photo-use consent. We do not sell this record.

4. Why we process data (purposes)

• Provide try-on, avatar, wardrobe, colour/size guidance, and Pro features you request.
• Authenticate you and sync your library across devices when signed in.
• Process payments, prevent fraud/replay of receipts, and enforce plan quotas.
• Show region-appropriate pricing and India-only cashback where applicable.
• Affiliate attribution on supported shops (commission if you buy) — see Affiliate section.
• Secure the service (rate limits, signature checks, abuse prevention).
• Respond to support and legal requests.

5. Legal bases

Depending on where you live, we rely on one or more of:

• Consent — photo upload and AI generation of avatars / try-ons; you may withdraw as described below.
• Contract / performance of a service — account, paid packs, wardrobe sync, checkout fulfilment.
• Legitimate interests — securing APIs, preventing payment abuse, basic product analytics that do not require selling your data, affiliate attribution necessary to fund a free tier — balanced against your rights.
• Legal obligation — tax, accounting, or lawful requests where applicable.

If you are in India, we process personal data in line with the Digital Personal Data Protection Act, 2023 (DPDP) and applicable rules, including purpose limitation and your rights to access and erasure where required.

6. Where processing happens and who helps us

• Your device — UI, local storage, on-device vision helpers.
• weariton.shop servers — APIs for plans, wardrobe, media, try-on orchestration.
• Supabase — authentication and related account infrastructure.
• Razorpay — payment processing.
• AI / image processors — e.g. Google Gemini image models and other try-on processors we configure, solely to return the generation you requested.
• Optional 3D providers — e.g. public reconstruction endpoints (such as Hugging Face–hosted models) for Pro mesh conversion; we do not attach your name to that request.
• Affiliate networks / shops — tagged links (e.g. Amazon Associates, Cuelinks) so commissions can be attributed.

Some processors may be located outside your country. Where we transfer personal data internationally, we do so to provide the service you requested and with appropriate contractual and technical safeguards available to us.

7. Cookies and similar technologies

weariton.shop uses essential storage (localStorage / sessionStorage) for session, currency preference, consent flags, and product state. We do not run third-party advertising cookies on the marketing site. Razorpay checkout may set its own cookies/storage on its domain during payment. The Chrome extension uses chrome.storage for local preferences and photos.

8. Affiliate disclosure

WearItOn may earn a commission if you buy through tagged product links. Affiliate tags do not change the price you pay the retailer. We are a participant in applicable associate programmes (including Amazon Associates where tagged). This is advertising disclosure, not a sale of your personal photo data.

9. Chrome extension permissions

The extension may request access to websites (<all_urls> or host permissions) so it can read the product image on the fashion page you have open. That access is used for detection and try-on while the tab is relevant — not to build a dossier of your general browsing. You can revoke site access or uninstall at any time in Chrome settings.

10. Retention

• Local photos / profile — until you delete them, clear site data, or uninstall.
• Cloud wardrobe / avatar sync — until you delete items or request account erasure.
• Paid plan & order redemption records — for the subscription period plus a reasonable accounting / anti-fraud window (typically up to several years where payment records must be retained).
• Generation traffic — not kept as a permanent public gallery; short-lived operational logs may exist for security.
• Rate-limit counters — short windows (minutes to hours).

11. Security

We use HTTPS, signed plan tokens, Razorpay payment signature verification, rate limiting on sensitive endpoints, and access controls on account media paths. No method of transmission or storage is 100% secure; please use a strong unique password and contact us if you suspect account abuse.

12. Children

WearItOn is not directed at children under 13 (or the higher age required in your region). You must be old enough to consent to digital services where you live. Do not upload photos of anyone under 18 for try-on or avatar features. Do not create an account for a minor.

13. Your rights and choices

• Use guest mode without creating an account.
• Decline or withdraw photo consent; colour/size tools may still work from page content.
• Delete photos and wardrobe items in-product.
• Request access, correction, or deletion of account data by emailing support@weariton.shop.
• Uninstall the extension to remove local extension storage.
• Object to processing based on legitimate interests where applicable law allows.
• Lodge a complaint with your local data protection authority if you believe we have mishandled your data.

We will respond to verifiable requests within a reasonable period (and within timelines required by law).

14. Do not sell / share

We do not sell your personal information for money. We do not share your photos with data brokers or ad networks for cross-context behavioural advertising. Disclosures to processors listed above are to operate WearItOn.

15. Automated decision-making

Try-on and avatar outputs are AI-generated previews. They are not used to determine credit, employment, or similar legal effects. Quota enforcement (e.g. try-on limits on a pack) is automated based on your plan.

16. Changes

We may update this policy. The “Last updated” date will change when we do. For material changes to photo processing, we may ask you to renew consent. Continued use after an update constitutes acceptance of the revised policy where permitted by law; if you disagree, stop using the service and request deletion.

17. Contact

WearItOn · https://weariton.shop
support@weariton.shop