Privacy
Policy

Account data: Name, email address, and password hash when you create an account.

Fit profile: Height, build category, gender, and optionally skin tone preference — used solely to generate virtual try-on visualisations and size recommendations. No biometric data is stored.

Order data: Items purchased, size, shipping address, and order status.

Payment data: We do not store card numbers or bank details. Payment processing is handled entirely by Razorpay. We receive only a payment confirmation token.

Usage data: Page views, product interactions, and device type — collected anonymously via PostHog for product analytics.

To fulfil and ship your orders.

To generate virtual try-on visualisations mapped to your fit profile.

To recommend sizes and products suited to your measurements.

To send order confirmations and shipping updates (transactional email only — no marketing without explicit opt-in).

To improve the platform through anonymised analytics.

If you use the AI Studio feature, any photo you provide is processed entirely on your device to estimate body measurements. Your photo is never uploaded to or stored on THRYD’s servers.

To generate the try-on visualisation, our system uses a generic mannequin image (matched to your build) together with the product’s image. We do not share your photo, your measurements, or any information identifying you with any third party for this purpose. Where rendering is performed using third-party AI infrastructure, it receives only these non-personal images and does not retain them beyond the session.

We share only what is necessary:

Brand partners: Receive your shipping name, address, and order details to fulfil shipments. They do not receive your email, payment data, or fit profile.

Razorpay: Processes payments. Subject to Razorpay’s Privacy Policy.

Supabase: Hosts our database and authentication infrastructure on servers in India (Mumbai region). Subject to Supabase’s Privacy Policy.

Vercel: Hosts and serves our application; processes login and request data when you sign in (including via Google or Facebook). Subject to Vercel’s Privacy Policy.

Resend: Delivers transactional email to your registered email address. Subject to Resend’s Privacy Policy.

We do not sell your personal data to any third party.

Account and order data is retained for 7 years to comply with GST record-keeping requirements.

Fit profile data is retained until you delete it from your Profile page or request account deletion.

Under the Digital Personal Data Protection Act, you have the right to:

✦ Access the personal data we hold about you.

✦ Correction of inaccurate or incomplete data.

✦ Erasure of your data (subject to legal retention obligations).

✦ Grievance redressal — complaints must be addressed within 30 days.

To exercise any right, email us at privacy@thryd.co.

We use a single session cookie for authentication (Supabase Auth) and localStorage to persist your cart between visits. No third-party advertising or tracking cookies are used.

PostHog analytics may set a first-party cookie to maintain anonymous session continuity. This does not identify you personally.

All data is transmitted over HTTPS. Passwords are hashed using bcrypt. Database access is protected by row-level security policies. We perform regular security reviews and use least-privilege access controls.

For any privacy concern, data request, or complaint: