Privacy Policy

Last Modified on 2nd August, 2026

THIS PRIVACY POLICY ("PRIVACY POLICY") SETS FORTH THE MANNER OF COLLECTION, USE AND DISCLOSURE OF INFORMATION GATHERED ON OUR SERVICES (DEFINED HEREAFTER). PLEASE READ THIS PRIVACY POLICY CAREFULLY.

BY CONTINUING TO USE OUR SERVICES, YOU AGREE TO THE TERMS OF THIS PRIVACY POLICY AND THE TERMS AND CONDITIONS ON THE WEBSITE AND/OR SERVICES. IF YOU DO NOT AGREE TO SAME, YOU MAY NOT ACCESS OR AVAIL THE SERVICES.

Access and use of our Services is subject to the Terms and Conditions ("Terms and Conditions") accessible on www.vistoureai.com. Defined terms used but not specifically defined in this PRIVACY POLICY would carry the meaning as ascribed to them in the Terms and Conditions.

VistoureAI Technologies Private Limited, a private limited company with its registered office at 30/181(1), Amrutham, West Yakkara, Palakkad, Kerala, India, 678001, its affiliates, assigns, subsidiaries ("VistoureAI", "We", "Us" or "Our") is engaged in the business of providing artificial intelligence, SaaS, PaaS, and software services over the internet with persons who use the Services provided by VistoureAI ("You" or "Your") and in this regard owns and operates a website www.vistoureai.com and its related domain and subdomains.

VistoureAI considers privacy of utmost importance and this PRIVACY POLICY sets forth the policy of VistoureAI regarding privacy of the User across all of its Services, which are made available through: (i) the VistoureAI web application at www.vistoureai.com ("Website") and its related domains and subdomains; and/or (ii) the VistoureAI mobile application; and/or (iii) plugins and add-ons made available through third-party platforms, including but not limited to Shopify and WordPress; and/or (iv) application programming interfaces ("APIs"). ((i), (ii), (iii) and (iv) are hereinafter collectively referred to as the "Services").

By accessing the Website or otherwise using our Services, you expressly consent to Our collection, storage, use and disclosure of the Information (as defined hereunder) in accordance with the terms of this PRIVACY POLICY.

As we update, improve and expand the Services, this PRIVACY POLICY may change at Our sole discretion without notice, so please refer back to it periodically as You will be deemed to be governed by the terms of such modified PRIVACY POLICY, as it comes into effect from time to time. By using Our Services, you are deemed to have read, acknowledged and accepted all the provisions stated in this PRIVACY POLICY, including any changes that we may make from time to time. Definitions used here but not defined would carry the same meaning ascribed to the term under the Ownership of Site & Agreement to Terms of Use of VistoureAI.

1. Collection of Information

In order to utilize the Services, users must provide specific personal, non-personal, and other data, collectively referred to as "Information" as outlined below:

a) Personal Information: Users may be required to provide information that personally identifies them ("Personal Information"). This includes:

• Contact Data: such as first name, last name, email address, and phone number.
• Demographic Data: such as zipcode, address, city, and country.
• Financial Information via third-party payment processors/aggregator ("TPPPA") to enable payments, such as account/routing numbers and debit/credit card numbers.

Additionally, any information provided in communication with us, like email or letter, may be collected as Personal Information. Please note this list is illustrative and not exhaustive.

Personal Information provided by users will not be considered sensitive if freely available and/or accessible in the public domain. Additionally, content posted by users on public platforms within the website, such as reviews or discussion boards, will not be considered personally identifiable information.

b) Non-Personal Information: When visiting the Services, certain non-personal information may be collected, including domain and host from which the internet is accessed, internet protocol address, operating system, browser type, and internet service provider. This information does not personally identify users.

c) Automatic Information: To enhance Services responsiveness, electronic tools like "cookies" may be used to collect information on individual interests. Server logs may include details such as web requests, internet protocol addresses, browser types, and one or more cookies to uniquely identify browsers. Cookies are primarily used for user authentication.

d) User Communications: Communications sent by users, such as emails, may be retained to process inquiries, respond to requests, and improve services.

e) Face, Body & Camera Data: When you use our AI-powered image and video features, you may upload photographs or videos that contain your face and body. When you use live camera streaming features, the Services additionally access your device camera and stream real-time video that may incidentally capture your face and body. In all cases, this data is transmitted to VistoureAI and our AI processing providers solely to generate the image or video output you have requested. These features perform visual garment overlay and pose mapping only; they do not constitute facial recognition or biometric identification. VistoureAI does not use this data to create faceprints or biometric templates, and neither do our AI processing providers. For retention periods applicable to each access method, see Section 3C.

f) Information on Behalf of Children: Parents or legal guardians accessing the Services on behalf of minor children are responsible for sharing information related to their child. Such information will be treated as Personal Information unless specified otherwise.

Failure to submit requested Information may result in denial of access to the Services or certain aspects thereof. We are not liable for such denial due to inadequate Information provided. If the data provided is false, VistoureAI shall at its sole discretion terminate or suspend the account in the manner as provided under the Terms and Conditions.

2. Use of Information

We do not sell, trade, or transfer Information to third parties, except trusted third parties assisting in Services operations, business conduct, or service provision. Information may be released when deemed necessary to comply with the law, enforce Services policies, or protect rights, property, or safety.

Information provided may be processed for the following purposes:

• Personalizing user experience
• Processing information in accordance with this Privacy Policy and applicable laws
• Improving services and offerings
• Contacting users and customizing communication and marketing materials
• Analyzing and suggesting related products/services
• Sending information and updates
• Preventing fraud and illegal activities
• Protecting Services security, integrity, business, services, and users
• Allowing customized messages from professionals and business partners
• Publishing user testimonials or reviews
• Disclosing Information in compliance with applicable laws or to protect rights, property, or safety

3. Data Retention

This Data Retention Policy outlines how we collect, store, and retain personal data and other related information obtained through our Services. The purpose of this policy is to ensure compliance with applicable data protection laws detailed as per the Ownership of Site & Agreement to Terms of Use of VistoureAI.

A. Retention Criteria: By using our Services, Users acknowledge and agree to the data retention practices described in this policy. We retain personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, or as required or permitted by law. The following criteria guide our data retention practices:

• Ongoing User Relationships: If a user continues to interact with the Services, data is retained for the duration of the relationship, including account management, service provision, and customer support.
• Legal Obligations: We retain certain data to comply with applicable legal requirements, such as tax, auditing, or regulatory purposes, in accordance with applicable laws.
• Legitimate Business Interests: Some data is retained to support business operations, such as analytics, troubleshooting, and improving the Services.

When data is no longer necessary for the purposes outlined above, it is securely deleted.

B. Retention of Personal Data: Personal data, including identifiable information such as names, emails, phone numbers, and user credentials, will be retained for as long as necessary to maintain the ongoing relationship with the user, fulfill legal obligations, or serve legitimate business interests. If the user requests account deletion, we will remove personal data from our systems, subject to any legal retention obligations that may apply.

C. Image & Video Retention: We process and store images and video submitted through our Services in the following ways:

• Via Website: Both input and output images and videos are retained in our cloud storage to ensure an enhanced browsing experience. This media is retained as long as the user maintains an ongoing relationship with our website. When the user decides to delete or remove their account, it will be deleted in accordance with our retention policies.
• Via API (including Shopify and WordPress Apps): Images and videos passed through the API are stored for a period of 3 (three) days. After this period, they are automatically deleted to minimize storage costs and to avoid inconvenience for users. Temporary storage helps ensure smooth operation of the Services provided via the API while optimizing resource allocation.
• Via Mobile App: Images and videos processed through the Mobile App are stored on our cloud infrastructure for 3 (three) days, following the same retention schedule as the Via API method described above, after which they are automatically deleted. Additionally, images and videos may be stored in the user's device cache and will remain until the user chooses to delete them. The app provides users with the option to manage, remove, or permanently delete cached media at any time through the settings. Live camera streaming data is handled separately - see Via Live Camera Stream below.
• Via Live Camera Stream: The camera video stream used for any real-time AI features is transmitted directly to our AI provider and is not stored on VistoureAI's servers. The video data - including any incidental capture of the user's face or body — is discarded by the AI provider immediately upon session completion. No facial or body data from these streams are retained beyond the duration of the active session.
• By AI processing providers: Images, videos, and prompts submitted for AI inference processing are automatically cleared by our AI inference providers (Replicate for image and video generation; Decart AI for live camera streaming features) within 1 (one) hour of submission, or immediately upon session completion in the case of live camera streaming. This data is never retained beyond those periods and is never used to train, fine-tune, or improve any AI model.

D. Data Retention for Legal, Regulatory, or Compliance Purposes: We may be required to retain certain personal data for longer periods due to legal obligations, regulatory requirements, or for the establishment, exercise, or defense of legal claims. In such cases, the data will be retained for the legally required period and will be securely deleted once it is no longer needed.

E. Data Deletion and User Rights:

• User-Controlled Deletion: Users have the ability to delete their accounts and any personal information associated with their account, subject to any legal retention obligations.
• Request for Deletion: Users may submit a request to delete their data, subject to any exceptions under applicable law. Once data is deleted, it will no longer be accessible in our systems, unless required for legal compliance.

Users can contact us at support@vistoureai.com to exercise their data rights, including requesting access to, correction, or deletion of their personal information.

F. Security and Safeguards: We employ appropriate technical and organizational measures to protect data against unauthorized access, alteration, disclosure, or destruction. These measures are continually reviewed and updated to maintain the integrity and confidentiality of personal data.

4. Sharing of Information

For providing the Services, Personal Information may be shared with business partners, administrators, vendors, agents, service providers, or affiliates for legitimate business reasons in accordance with applicable law. This includes trusted cloud infrastructure and AI processing providers located in the United States who assist in the delivery of our Services.

In cases of audit, reorganization, merger, sale, or other disposition of business assets, collected Information may be shared, transferred, or assigned to relevant third parties.

We require all third-party AI processing and cloud infrastructure providers with whom we share user images, camera data, or other personal information to be bound by written agreements obligating them to provide the same or equal level of protection for that data as set out in this Privacy Policy, to process it solely to perform the requested Service on our behalf, and to neither retain it beyond the periods described in Section 3 nor use it for their own purposes.

4a. AI Processing Providers

The following third-party providers may receive user images, camera data, or other content as part of delivering our AI-powered Services. Each provider is bound by a written data processing agreement.

For precise retention periods applicable to each type of data processed by these providers, see Section 3C.

5. Security

Reasonable security measures are employed to protect Information from unauthorized access, maintain data accuracy, and ensure appropriate use and disclosure. The Services are hosted on secure servers utilizing firewalls and encryption to prevent external interference or access. User data is stored on cloud infrastructure located in the United States.

6. Links to Third Party Sites

The Services may contain links to third-party applications/websites beyond Our control. Users should refer to the privacy policies of such Third Party Sites, as policies may differ from Our own.

No Personal Information is provided to third-party websites/advertisers/ad-servers without user consent.

7. Your Consent

By using the Services and/or providing Information, users consent to the collection, use, and sharing of Information in accordance with this Privacy Policy. Users explicitly agree to the collection, storage, processing, transfer, and sharing of Information (including Personal Information) with third parties, professionals, or registered business partners/users for purposes outlined in this Privacy Policy.

8. Contact Us

If You have any questions, concerns, or feedback regarding the collection, use, or handling of the Information, we encourage you to contact us at support@vistoureai.com. We are committed to addressing your inquiries promptly and transparently.

9. AI Processing Guarantee

VistoureAI guarantees that user-provided images, generated outputs, and camera video data processed through our Services are not used to train, fine-tune, or improve any AI models — whether by VistoureAI or by our third-party AI processing providers. All data submitted for AI inference is subject to the retention periods described in Section 3 above.

10. Data Processing Agreement

If you are a business customer established in the European Union (EU), European Economic Area (EEA), United Kingdom, or Switzerland, and your use of VistoureAI Services involves the processing of personal data of your own customers or employees, the terms of the VistoureAI Data Processing Agreement ("DPA") shall apply. The DPA is incorporated by reference into these Terms and Conditions and governs how VistoureAI processes personal data on your behalf.