1. What We Collect
TryKaro ("we", "us") collects the minimum data needed to provide AI virtual try-on services:
- Merchant account data: Email address, business name, and billing information provided during signup.
- Consumer images: Selfie photos uploaded for virtual try-on. These are processed in real-time and deleted within 1 hour of generation.
- Usage analytics: Try-on counts, conversion events, and performance metrics (aggregated, non-identifying).
- Technical data: IP addresses, browser type, and device information for security and service delivery.
2. How We Use Your Data
- Process virtual try-on requests (selfie + garment → result image)
- Provide merchant dashboards with usage analytics
- Process billing and payments via Stripe
- Send transactional emails (welcome, usage reports)
- Protect against abuse and fraud (rate limiting, bot protection)
3. Image Handling
Consumer selfies and generated try-on results are:
- Processed in-memory during inference and stored temporarily (max 1 hour)
- Never used for model training or improvement without explicit consent
- Never shared with third parties beyond the inference pipeline
- Automatically purged after the configurable TTL expires
4. Data Sharing
We share data only with:
- Replicate: GPU inference — consumer selfies are sent transiently to generate the try-on render; we delete the prediction (including the photo) from Replicate's systems immediately after the result is produced
- Stripe: Payment processing (PCI-DSS compliant)
- Clerk: Authentication and identity management
- Cloud infrastructure: Railway (hosting), for service delivery only
We never sell personal data to advertisers or data brokers.
5. Data Retention
- Consumer images: Deleted within 1 hour of processing
- Merchant accounts: Retained while account is active; deleted 30 days after account closure
- Usage logs: Retained for 90 days for analytics, then aggregated
6. Your Rights
You may:
- Request a copy of your data
- Request deletion of your account and associated data
- Opt out of marketing communications
- Object to data processing
Contact us at privacy@trykaro.ai for any privacy-related requests.
7. Security
We employ industry-standard measures: TLS encryption in transit, encrypted storage at rest, API key authentication, rate limiting, and Cloudflare bot protection. We do not store payment card details — all billing is handled by Stripe.
8. Changes
We may update this policy periodically. Material changes will be communicated via email to registered merchants. Continued use of the service after changes constitutes acceptance.