Privacy Policy
Last updated 27 October 2026
This product asks for unusually personal things: a photograph of your face, a photograph of your body, and from those it works out your skin tone and body shape. That is sensitive information, and this page tells you exactly what we collect, why, where it goes, and how to make us delete it.
In one paragraph
You can shop and design garments without giving us a single photograph. Photographs are only for the optional styling features, and only when you upload them. We do not sell your data, we do not use it for advertising, and we do not train models on your photographs. We never see your card details — your bank and the payment gateway handle those.
1. Who we are
[Legal name — NOT YET SET], trading as Leorve, of [Registered address — NOT YET SET], is the body responsible for the personal data described here. Contact: [Email address — NOT YET SET], [Phone number — NOT YET SET].
2. What we collect, and why
| What | Why | Kept for |
|---|---|---|
| Email address, password | To create and secure your account. Passwords are stored only as a salted PBKDF2 hash — we cannot read yours, and neither can anyone who obtains the database. | Until you close your account |
| Name, phone, email, shipping address, city, state, PIN code | To deliver your order, to raise the payment, and to put the correct place of supply on your invoice. | 8 years — tax and company records law |
| Your designs — uploaded logos and images, text, fonts, colours, garment and size choices | To render your preview and to print the garment. Your artwork is sent to the printer who makes your order. | 3 years, so you can reorder |
| Photographs of your face and/or body (optional) | Only to produce styling suggestions. Read once, at the moment you upload them, and not used for anything else. | Not kept — the file is deleted as soon as the reading is produced |
| Inferences drawn from those photographs — estimated skin tone (on the ITA and Monk scales), body shape, face shape | To choose which colours and cuts we suggest. | Until you delete them or close your account |
| Wardrobe items you add, and any photographs of them, and the small copies we make of them — a preview, and a cut-out of the garment with the background removed | To suggest outfits from clothes you already own, and to show your clothes on their own. The copies are private to your account, are never sent to anyone, and are deleted with the photo. | Until you delete them. Photos added without an account are deleted after 7 days unless you create one. |
| Your taste memory — the outfits we showed you and what you did about each one (paid plans only) | So the next set of suggestions starts from what you have already told us, instead of from scratch every time. | Until you delete it or turn it off — either one erases it — or you close your account |
| Order and payment metadata — amounts, status, the gateway's transaction reference, the payment method type (UPI, card, net banking) | To confirm payment, issue refunds, and keep accounts. | 8 years — tax records law |
The taste memory
On Leorve Plus and Leorve Premium we keep a record of the outfits we put in front of you and what you did about each one — chose it, passed on it, saved it, wore it, bought it, or asked to change it. On a free account, and for a visitor who has not signed up, nothing of this is recorded at all.
What that record is made of: colour families, a silhouette word and a formality band, all from our own fixed lists; the ids of your own pieces; the occasion; and the date. It does not contain the names you gave your clothes, anything else you typed, or any photograph. It is used for one thing — ordering what we suggest next — and it is never sent to anyone outside Leorve.
It is on from the start of a paid plan. You can have it switched off, or have what is recorded deleted, at any time: write to [Email address — NOT YET SET]. Switching it off deletes the history with it — there is no copy kept for later — and it is deleted with your account.
What we deliberately do not collect
- Card numbers, CVV, expiry dates, UPI PINs. These are entered on the payment gateway's own page and never reach our servers or our database. Storing them is prohibited for merchants under the RBI's card-tokenisation rules, and we do not.
- Your location, contacts, or anything from your device beyond what you type or upload.
- Advertising or cross-site tracking identifiers. There are no third-party advertising or analytics trackers on this site.
3. Sensitive personal data
Photographs of your face and body, and the skin-tone and body-shape estimates derived from them, are sensitive personal data or information under Rule 3 of the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011. Because of that:
- They are collected only with your consent, given when you choose to upload a photograph. Nothing on this site uploads a photograph automatically.
- They are used only for the styling suggestions you asked for.
- They are disclosed to no third party except the single case set out in section 4: with your consent, asked for in the moment and asked again every time, the one photograph for that reading is sent to Google's Gemini API, and nothing else goes anywhere. Never to printers, never to couriers. The file is deleted as soon as the reading is produced — we do not keep a copy.
- They are never visible to our staff through the admin console. That system cannot return them; the restriction is in the software, not merely in a policy.
- They are not used to train machine-learning models.
- You may withdraw consent at any time, and we will delete them. We may then be unable to offer the styling features, which is the only consequence.
- Wardrobe photographs are of clothes, but a photo of a garment being worn can show a person. If automatic garment detection is switched on, only a cut-out of the garment, with the background removed, is ever sent to suggest its type, cut and pattern, and a photo in which we detect a person's face is not sent at all. Face detection is not perfect, so for photos of clothes being worn we recommend a flat-lay or a hanger instead.
- When you add a photo, we may read its file name (for example "red_anarkali_kurta.jpg") to suggest what the garment is. The file name is read once, on our own server, and is not stored or sent anywhere.
- We count how often our suggestions are corrected — only which garment we suggested and which one you chose, and the day — never who you are, the name you gave the piece, or your photo.
4. Who else processes your data
Named, because a list of "trusted partners" tells you nothing:
| Who | What they receive | Where |
|---|---|---|
| Hetzner Online GmbH — our hosting provider | Everything stored by the service, as the operator of the server it runs on. Hetzner does not access it in the ordinary course. | Finland (European Union) |
| Our payment gateway (Cashfree Payments India Pvt. Ltd. or Razorpay Software Pvt. Ltd. — whichever is shown at checkout) | Your name, email, phone and the order amount. They handle the payment instrument; we do not see it. | India |
| Our printing and fulfilment partners | Your artwork, garment and size, and your delivery address. Never your photographs or any inference from them. | India |
| Courier partners | Your name, delivery address and phone number. | India |
| Serper.dev — shopping search, only when you use the shopping feature | The search terms generated from your styling profile. Not your photographs, not your identity. | Outside India |
| Anthropic PBC — only if the AI styling assistant or automatic garment detection is enabled | The text of your conversation with the assistant and your garment design choices, and, only if automatic garment detection is switched on, a cut-out of a garment photo you add to your wardrobe, with the background removed, to suggest its type, cut and pattern. A photo in which we detect a person's face is not sent. The cut-out we keep to show your clothes on their own is never sent. | Outside India |
| Google LLC (the Gemini API) — only if the AI styling features or the Studio's AI artwork are enabled | Words — and, only when you agree to it at the moment you ask for a reading, the styling photograph you uploaded for that reading. Our account is a paid one, so your photograph is not used to train Google's models; they hold it briefly to check for abuse and then delete it. We delete our own copy as soon as the reading is produced. No photograph of a garment in your wardrobe is ever sent. For styling advice: each piece you own as an id, a category, a colour family and a pattern from our own fixed lists, the occasions it is tagged for, and the day's occasion and weather — and, kept separate and treated as your words rather than as fact, the names you gave those pieces and anything you typed in the box. For a visualised look: a description built only from those fixed lists, with nothing you typed in it. For the Studio: what you type into the artwork box. No photograph is sent — not of you, not of your body, not of a garment — and nothing inferred from a photograph of you. | Outside India |
| Google LLC — Google Fonts, which serves the typefaces this site is set in | Your IP address and browser user-agent, sent automatically by your browser when it requests the font files. Nothing you type, and nothing about your account. | Outside India |
The AI styling features, and what leaves
The AI styling features are optional and are only running when we have switched them on. When they are, the model that answers is Google's, through the Gemini API, and it is reached over an encrypted connection from our own server — your browser never talks to it. What it receives is words:
- Styling advice in words is part of Leorve Plus and Leorve Premium. What is sent is the list above: your pieces described from our own fixed lists, the occasion and the weather, and — as your own words, marked as yours — the names you gave your pieces and whatever you asked for.
- A look drawn for you is part of Leorve Premium, and every account may try one, once. The picture is drawn from a description built only from our fixed lists; nothing you typed is in it.
- Your styling photograph is sent, and only with your say-so each time. To show you a result on your own reading rather than on a generic body, the photograph you upload for a styling reading is sent to Google's Gemini API. We ask you every time, in the moment, and the reading works without it — decline and you get the same advice, drawn on a figure rather than on you. Nothing is sent for a customer who has not agreed.
- We do not keep it, and neither does Google train on it. Our copy is deleted as soon as the reading is produced, exactly as the table above says. Our Gemini account is a paid one, and under Google's paid terms your photograph is not used to train or improve their models; Google holds it briefly to check for abuse and then deletes it. On Google's free tier that is not true, which is why we do not use it.
- What is still never sent: a photograph of a garment from your wardrobe, and any photograph in which we have detected a face that is not part of a reading you asked for. A drawn look is still drawn from a description built from our own fixed lists, not from your clothes.
- What we keep is a cost record with nothing in it: how many calls were made, which model, how many words in and out, and an estimate of what it cost us in paise. No part of what was asked or answered is stored in it. It is deleted when you close your account.
What you type into the Studio's artwork box is sent to Google twice: once to check the words before anything is drawn, and once to draw it. The picture that comes back is checked again on our own server before it is stored, and one that fails either check is deleted and never reaches you. Images you upload to the Studio are not sent to Google — an uploaded image goes to our own disk and through our own check, and nowhere else. A person checks every custom design before it is printed.
The pictures we draw of your looks are stored on our own server, beside your wardrobe photographs and reachable only by your own signed-in account, and they are deleted with your account.
Transfer outside India
Our servers are located in Finland, so your personal data — including any photographs you upload — is stored outside India. Rule 7 of the SPDI Rules permits this where the receiving party maintains the same level of data protection; Finland is in the European Union and is subject to the GDPR, which meets that standard. By using the service you consent to this transfer. If that is not acceptable to you, please do not upload photographs.
5. Your rights
- See what we hold. Ask, and we will send you a copy.
- Correct it. Most details you can edit yourself; for the rest, ask.
- Withdraw consent. For photographs and the inferences drawn from them, at any time.
- Delete your account and everything personal in it — including every photograph and every inference drawn from one. We must keep order and tax records for 8 years, so those alone are retained in a minimal form — order number, amount, date, and the invoice, which by law carries the delivery name and address. Nothing else survives: photographs, styling inferences, wardrobe items and designs are deleted outright.
Write to [Email address — NOT YET SET]. We act within 30 days, and acknowledge within 48 hours. If we do not, use Grievance redressal.
6. How we protect it
- All traffic between your browser and our servers is encrypted with TLS.
- Passwords are stored as salted PBKDF2-SHA256 hashes, never in plain text or reversibly.
- Access to our servers requires an SSH key; the application runs as an unprivileged user in an isolated container.
- Every staff action that touches customer data is recorded in an audit log — who, what, and when.
- Your orders, designs, and photographs are only ever reachable by your own signed-in account.
No system is perfectly secure. If a breach occurs that is likely to affect you, we will tell you and report it to CERT-In as required.
7. Cookies and similar technologies
There is one cookie, and it is the one that keeps you signed in: cc_session, set
when you sign in, readable only by our server (it is HttpOnly, so no script on the
page can read it), and expiring after 30 days or when you sign out, whichever comes first. We also
use browser localStorage to remember your work in the Design Studio, which never
leaves your device. That is all. There are no advertising cookies, no analytics cookies, and no
third-party trackers, so there is no consent banner to click through.
8. Children
This service is not intended for anyone under 18, and we do not knowingly collect data from children. If you believe a child has given us personal data, write to [Email address — NOT YET SET] and we will delete it.
9. Changes
If we change this policy in a way that materially affects you, we will email you before it takes effect. The date at the top of this page is when it was last revised.
10. Grievance Officer
Appointed under Rule 5(9) of the SPDI Rules, 2011: [Grievance officer name — NOT YET SET], [Email address — NOT YET SET], [Phone number — NOT YET SET], [Registered address — NOT YET SET]. Full details and deadlines: Grievance redressal.