Privacy Policy

2. Information Collected During Google Authentication

OccasionAI utilizes Google OAuth exclusively for user authentication. When you sign in using your Google Account, we receive and store:

• Basic Profile Information: Your full name, email address, and Google account avatar URL.
• Authentication Identifiers: Your unique Google OAuth User ID mapped to a secure Supabase Auth user record.

We do not request, access, or store your Google account password or contacts.

3. Uploaded Photos & Private Storage Safeguards

To generate personalized occasion outfit recommendations, you may upload a facial portrait or full-body photo.

• Private Storage Location: Uploaded images are stored in a private cloud storage bucket (user-photos) hosted on Supabase Storage.
• Strict User Isolation: Every photo is stored under an isolated user path ({userId}/filename.jpg). Storage access policies strictly enforce that users can only upload, view, or process photos belonging to their own authenticated account ID.
• No Public Publishing: Your uploaded portraits are never exposed publicly, made searchable on search engines, or published in public marketing galleries without your explicit written consent.

4. AI Styling Processing & Look Generation

Uploaded photos are processed by server-side Artificial Intelligence models (including Google Gemini API) to extract body-neutral visual features:

• Body-Neutral Extraction: We analyze undertones, contrast ratios, and drape context for styling science. We do not evaluate beauty ratings, weight, skin conditions, or physical attractiveness.
• Persisted Styling Parameters: Generated Look DNA blueprints, occasion preferences, budget tiers, and styled look visual references are stored in database records (public.looks) linked strictly to your account ID.
• Transient API Processing: Photos and prompts sent to the Google Gemini API are processed strictly server-side for real-time inference under secure enterprise service terms.

5. Product Interaction & Referral Analytics

When you click on recommended fashion items to view retailer product pages (e.g. Myntra, Amazon, Fabindia, Ajio), we log:

• Product identifier, category match role, look ID, timestamp, and anonymized user ID.

This data is stored in public.product_clicks to verify catalog availability, track referral performance, and refine recommendation relevance. We do not track your subsequent browsing history on third-party merchant sites.

6. Payment Information & Razorpay Processing

All commercial transactions (₹99 Look Packs, ₹299/mo Style subscriptions, ₹499/mo Style Plus subscriptions) are processed through Razorpay Payment Gateway.

• Zero Card Data Retention: OccasionAI never collects, stores, or processes credit card numbers, debit card details, CVVs, UPI PINs, or net-banking credentials on our servers.
• Merchant Transaction Records: We only store transaction metadata returned by Razorpay webhooks (Razorpay Payment ID, Order ID, Subscription ID, plan tier, amount in INR, and payment status) in public.payments for credit fulfillment and accounting compliance.

7. Cookies, Session Storage & Browser Storage

OccasionAI uses essential browser storage to provide platform functionality:

• Essential Auth Cookies: Supabase Auth HTTP-only cookies (`sb-access-token`, `sb-refresh-token`) to maintain your authenticated session.
• Session Storage: `occasionai_consultation_draft` and `occasionai_auto_resume` to temporarily preserve styling choices across Google sign-in redirects.
• IndexedDB: `occasionai_pending_photo` to temporarily hold uploaded photo files in your local browser during authentication auto-resume.

We do not place third-party advertising tracking cookies or sell user browsing data.

8. Infrastructure & Third-Party Vendors

We partner with verified cloud infrastructure providers to run OccasionAI:

• Supabase Inc. — Cloud Database, Authentication, and Private File Storage.
• Google Cloud / Gemini API — Multimodal Artificial Intelligence inference engine.
• Razorpay Software Private Limited — Payment processing and recurring subscription management.
• Vercel Inc. — Frontend web application hosting and CDN infrastructure.

9. Data Retention & Account Deletion Rights

Your account data, uploaded portraits, and generated lookbooks persist as long as your account remains active. You have the right to request access to your data or request complete account and photo deletion by emailing support. Upon account deletion, your private photos and associated database records will be permanently purged from Supabase Storage and production database tables within 30 days.

10. Contacting Privacy Support & Amendments

We may update this Privacy Policy periodically to reflect platform enhancements or regulatory requirements. Material updates will be posted on this page with a revised effective date.