Privacy Policy

We use the information we collect for the following purposes:

• Service Delivery: To create and manage your account, process payments, allocate credits, and generate AI virtual try-on results.
• AI Model Processing: Images you upload are processed by our AI inference pipeline to produce virtual try-on outputs. Images may be temporarily cached on secure cloud infrastructure during processing and are subject to the retention policies in Section 6.
• Billing & Subscriptions: To charge subscription fees, process credit top-ups, issue invoices, handle refunds, and enforce plan limits.
• Platform Improvement: To analyse usage patterns, identify bugs, improve model accuracy, and develop new features. Aggregated and anonymised data may be used for research purposes in collaboration with NTU.
• Communications: To send transactional emails (account creation, payment receipts, plan changes), product update announcements, and security alerts. You may opt out of marketing emails at any time.
• Security & Fraud Prevention: To detect, investigate, and prevent abuse, unauthorised access, and fraudulent transactions.
• Legal Compliance: To comply with applicable laws, regulations, and enforceable government requests in Singapore and other jurisdictions where we operate.

Our core Service involves processing photographs using artificial intelligence. We want to be transparent about this:

• Image Processing: Customer photographs and fabric images you upload are sent to our AI inference servers to generate composite try-on images. These images are processed for the purpose specified by you (virtual try-on) and for no other purpose.
• Biometric Data: Body shape estimations are derived from uploaded photographs to power the try-on feature. We do not create persistent biometric profiles tied to individuals.
• Watermarked Output: On free-tier and PAYG plans, generated images carry a TrialRoomStudio watermark. Paid subscribers may remove the watermark as described in their plan.
• You Remain Responsible: You are responsible for obtaining appropriate consent from individuals whose photographs you upload to our platform. You must ensure such individuals are aware that their images will be processed by AI systems.
• No Training on Customer Data: We do not use the images or content you upload to train our general AI models without your explicit written consent.

We do not sell your personal information. We may share data in the following limited circumstances:

• Service Providers: We engage trusted third-party vendors to operate our infrastructure, including cloud hosting (Amazon Web Services / Google Cloud), payment processing (Stripe), database services (Supabase), and email delivery (Resend). These vendors are contractually bound to process data only as instructed by us.
• Research Partners: Anonymised, aggregated usage statistics may be shared with NTU for academic research purposes. No personally identifiable information is shared.
• Legal Requirements: We may disclose information if required to do so by law, court order, or legitimate governmental authority in Singapore or applicable jurisdictions.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of our business, your information may be transferred as part of that transaction. We will notify you via email and/or a prominent notice on the Service before your data is transferred.
• Protection of Rights: We may disclose information to enforce our Terms and Conditions, protect the rights, property, or safety of TrialRoomStudio, our users, or the public.

Your data may be stored on servers located in India, the United States, or other countries where our cloud infrastructure providers operate. By using the Service, you consent to the transfer of your information to these countries, which may have different data protection laws than your country of residence.

We rely on reputable cloud providers (including Amazon Web Services and Supabase) that maintain their own data-transfer safeguards. We choose providers that offer appropriate protections for personal data.

• Account Data: Retained for as long as your account is active, plus 90 days after account deletion to allow for dispute resolution.
• Try-On History: Retained for the period specified by your plan (15 days for PAYG/free, 30 days for Starter, 90 days for Pro, 1 year for Business) from the date of creation. After this period, try-on images are permanently deleted.
• Payment Records: Retained for 7 years to comply with Singapore financial regulations (Income Tax Act, GST Act).
• Support Communications: Retained for 2 years from the date of the last interaction.
• Anonymised Analytics: May be retained indefinitely in aggregated form.

We use the following types of cookies and local storage:

• Strictly Necessary: Authentication tokens (managed via Supabase Auth) that keep you logged in. These cannot be disabled without breaking core functionality.
• Preference: We store your selected currency (e.g., SGD, INR, AED, USD) in localStorage so you do not need to re-select it on each visit.
• Analytics: If enabled, aggregated page-view analytics to help us understand usage patterns. We do not use Google Analytics or other third-party tracking pixels by default.

You can clear cookies and local storage at any time through your browser settings. Note that doing so will log you out of the Service.

We implement industry-standard technical and organisational measures to protect your data, including:

• TLS/HTTPS encryption for all data in transit.
• AES-256 encryption for sensitive data at rest.
• Role-based access controls (RBAC) limiting employee access to production data.
• Regular security audits and penetration testing.
• Passwords are hashed using bcrypt and are never stored in plaintext.
• Payment card data is handled exclusively by PCI-DSS compliant processors and never touches our servers.

Despite our measures, no system is completely secure. We cannot guarantee absolute security, and you use the Service at your own risk.

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of your account and associated personal data, subject to legal retention obligations.
• Portability: Request your data in a machine-readable format.
• Objection / Restriction: Object to or request restriction of certain processing activities.
• Withdraw Consent: Where processing is based on consent (e.g., marketing emails), withdraw that consent at any time.

To exercise any of these rights, please contact us at privacy@trialroomstudio.com or via WhatsApp at +91 98847 44296. We will respond within 30 days.

The Service is intended for business use by professionals aged 18 and above. We do not knowingly collect personal information from individuals under the age of 18. If you believe a minor has provided us with personal information, please contact us immediately and we will delete such data.

Our website may contain links to third-party websites (e.g., WhatsApp, Stripe). We are not responsible for the privacy practices of those websites and encourage you to review their privacy policies. This Privacy Policy applies only to the TrialRoomStudio Service.

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email (to the address on your account) and update the "Last updated" date at the top of this page. Your continued use of the Service after notification constitutes acceptance of the updated policy.

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• Email: privacy@trialroomstudio.com
• WhatsApp: +91 98847 44296

We will respond to all data-related requests within 30 days.