Effective Date: May 2, 2026 Last Updated: May 2, 2026
1. Introduction
Empyra Technologies Pvt. Ltd (“we”, “our”, “us”, “empyra”) is committed to protecting your personal data. This Privacy Policy explains what information we collect, how we use it, and your rights in relation to it. This policy applies to all users of the Platform, including shoppers and Vendor brand accounts.
By using the Platform, you consent to the collection and use of your data as described in this Policy.
2. Information We Collect
2.1 Information You Provide Directly
- Account data: Name, email address, phone number, date of birth, gender.
- Styra Profile data: Body measurements, height, weight, body type, colour season, style preferences, fabric preferences, occasion preferences.
- Profile photo / selfie: Used solely for colour season analysis as part of Styra Profile.
- Payment data: Tokenised card details (we do not store raw card numbers; these are managed by Razorpay).
- Saved addresses: Shipping and billing addresses.
- Communications: Messages sent to Styra, support queries, and reviews.
2.2 Information Collected Automatically
- Behavioural data: Products viewed (dwell time ≥ 3 seconds), products liked, items added to cart, purchases made, and items returned.
- Device and technical data: Device type, operating system, browser type, IP address, session duration.
- Location data: Approximate location (city-level) for hyperlocal delivery estimates and trend personalisation — only with your permission.
- Contextual signals: Time of day, day of week, current season, and upcoming festivals (used to improve recommendations).
2.3 Information from Third Parties
- Social login providers: If you sign in via Google or Apple, we receive your name and email address from those providers, subject to their privacy policies.
3. How We Use Your Information
| Purpose | Data Used | Legal Basis |
|---|---|---|
| Account creation and authentication | Name, email, OTP | Contract performance |
| Styra Profile generation and personalisation | Quiz responses, selfie, behavioural data | Consent |
| Styra AI styling recommendations | Styra Profile, browsing behaviour, chat messages | Consent / Legitimate interest |
| Order processing and fulfilment | Name, address, payment token, order details | Contract performance |
| Push notifications and emails | Email, device token, preferences | Consent |
| Customer support | Account data, order history, chat logs | Legitimate interest |
| Platform improvement and AI training (anonymised) | Anonymised behavioural data, anonymised Styra chats | Legitimate interest |
| Fraud prevention and security | Device data, IP address, transaction data | Legal obligation / Legitimate interest |
| Marketing and promotions | Email, Styra Profile, purchase history | Consent (opt-in only) |
4. Styra Profile and AI Personalisation
4.1 Your Styra Profile is the core of your Empyra experience. It is built from your quiz responses, optional selfie, measurements, and ongoing behavioural signals.
4.2 Styra Profile data is used exclusively to personalise your experience on the Platform. It is not sold to third parties or used for advertising outside Empyra.
4.3 You may view, edit, or delete your Styra Profile at any time from your Profile → Styra Profile settings.
4.4 Selfies uploaded for colour analysis are processed by our AI model and are not stored beyond the duration required to generate your colour season profile. They are never shared with Vendors or third parties.
5. Styra (AI Stylist) and Conversations
5.1 Conversations you have with Styra are processed by Anthropic’s Claude API to generate responses. These conversations are subject to Anthropic’s data processing terms in addition to this Policy.
5.2 Empyra may retain Styra conversation logs for up to 90 days for quality assurance and system improvement purposes. After 90 days, conversation logs are anonymised or deleted.
5.3 Styra conversations are never shared with Vendors or external marketing partners.
5.4 You may request deletion of your Styra conversation history by contacting support@empyra.co.
6. Sharing Your Information
We do not sell your personal data. We share your data only in the following circumstances:
- Vendors: We share your name, shipping address, and order details with the relevant Vendor to fulfil your order. Vendors do not receive your Styra Profile, payment details, or Styra conversations.
- Payment processor (Razorpay): Payment data is transmitted securely to Razorpay for processing. Razorpay is PCI DSS compliant.
- Cloud infrastructure: Our platform runs on cloud infrastructure (AWS/Azure). Your data is stored in servers located in India where possible, and in compliance with applicable data localisation norms.
- Analytics providers: We may use anonymised, aggregated data with analytics tools to understand Platform usage patterns. No personally identifiable information is shared.
- Legal obligations: We may disclose your data if required by law, court order, or government authority.
7. Data Retention
| Data Type | Retention Period |
|---|---|
| Account data | Until account deletion + 30 days |
| Styra Profile | Until account deletion |
| Order history | 5 years (GST compliance) |
| Payment records | 5 years (financial compliance) |
| Styra conversation logs | 90 days, then anonymised |
| Behavioural / analytics data | 2 years (anonymised after 12 months) |
| Selfies (colour analysis) | Deleted after Styra Profile generation |
| Support communications | 2 years |
8. Cookies and Tracking
8.1 We use cookies and similar technologies to maintain your session, remember your preferences, and improve Platform performance.
8.2 Types of cookies used:
- Essential cookies: Required for the Platform to function (login session, cart).
- Preference cookies: Store your language, display settings, and notification preferences.
- Analytics cookies: Help us understand how users interact with the Platform (anonymised).
8.3 You may manage cookie preferences through your browser settings. Disabling essential cookies may affect Platform functionality.
9. Your Rights
As a user of Empyra, you have the following rights in relation to your personal data:
- Right to Access: Request a copy of the personal data we hold about you.
- Right to Correction: Request correction of inaccurate or incomplete data.
- Right to Deletion: Request deletion of your account and associated personal data, subject to legal retention requirements.
- Right to Data Portability: Request your data in a structured, machine-readable format.
- Right to Withdraw Consent: Withdraw consent for marketing communications or optional data processing at any time.
- Right to Restrict Processing: Request that we limit how we use your data in certain circumstances.
To exercise any of these rights, email support@empyra.co with the subject line “Data Rights Request”. We will respond within 30 days.
10. Children’s Privacy
The Platform is not directed at individuals under 18 years of age. We do not knowingly collect personal data from minors. If you believe a minor has registered on our Platform, please contact us at support@empyra.co and we will promptly delete the account.
11. Data Security
11.1 We implement industry-standard security measures including:
- HTTPS/TLS encryption for all data in transit.
- AES-256 encryption for sensitive data at rest.
- Bcrypt hashing for passwords (we never store plain-text passwords).
- PCI DSS compliance via Razorpay for payment data.
- Regular security audits and penetration testing.
- Role-based access controls for internal team members.
11.2 While we take every reasonable precaution, no system is 100% secure. In the event of a data breach that affects your rights and freedoms, we will notify you and the relevant authorities within 72 hours of becoming aware of the breach.
12. Third-Party Links
The Platform may contain links to third-party websites or brand stores. This Privacy Policy does not apply to those external sites. We encourage you to review the privacy policies of any third-party sites you visit.
13. Changes to this Policy
We may update this Privacy Policy from time to time. When we do, we will revise the “Last Updated” date at the top of this document and notify you via email or in-app notification for material changes. Continued use of the Platform after such changes constitutes acceptance of the updated Policy.
14. Contact Us
For any privacy-related queries:
Email: support@empyra.co | General Support: support@empyra.co | Website: empyra.co