Privacy Policy

1. Introduction

Welcome to Aura Wonder ("we," "our," or "us"). We provide AI-powered virtual try-on services to fashion boutiques and their customers via Instagram Direct Messages. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.

2. Information We Collect

2.1 Information You Provide

• Account Information: Email address, business name, and password when you sign up
• Instagram Business Account: Instagram username and business account ID when you connect via OAuth
• Payment Information: Billing details processed securely through Stripe (we do not store credit card numbers)

2.2 Information from Your Customers

• Images: Customer photos and clothing images sent via Instagram DM for virtual try-on processing
• Instagram User ID: External user identifiers for conversation management
• Messages: Instagram DM content for providing try-on services

2.3 Automatically Collected Information

• Usage Data: Try-on request counts, processing times, and service usage statistics
• Technical Data: IP addresses, browser type, and device information
• Log Data: Server logs for debugging and security purposes

3. How We Use Your Information

We use collected information for the following purposes:

• Service Delivery: Process virtual try-on requests and deliver AI-generated images
• Account Management: Create and maintain your account, manage subscriptions
• Billing: Process payments and manage subscription plans via Stripe
• Communication: Send service notifications, updates, and customer support responses
• Improvement: Analyze usage patterns to improve our AI models and service quality
• Security: Detect fraud, prevent abuse, and ensure platform security
• Legal Compliance: Comply with legal obligations and enforce our Terms of Service

5. Third-Party Services

We work with trusted partners to provide our service:

• Meta/Instagram: For connecting to your Instagram account and messaging (subject to Meta's Privacy Policy)
• Stripe: For secure payment processing (subject to Stripe's Privacy Policy)
• Secure Cloud Services: For AI processing and service delivery

All our partners are required to maintain the same high standards of privacy and security that we do. They are prohibited from using your data for any purpose other than providing our service to you.

6. Data Sharing and Disclosure

We do not sell your personal information. We may share data in these circumstances:

• With Your Consent: When you explicitly authorize us to share information
• Service Providers: With trusted vendors who assist in service delivery (listed above)
• Legal Requirements: To comply with laws, court orders, or government requests
• Business Transfers: In connection with mergers, acquisitions, or asset sales
• Protection: To protect rights, property, or safety of Aura Wonder, users, or the public

7. Data Retention

• Account Data: Retained while your account is active and for 1 year after closure
• Customer Images: ⚠️ NOT STORED - Immediately deleted after processing
• Usage Records: We keep anonymous statistics (number of try-ons, timestamps) for billing - but NO images
• Service Logs: Technical logs for service reliability and security (no personal images)

Privacy Guarantee: Personal photos shared with our service are never permanently stored. Once processing is complete and your result is delivered, all images are immediately and permanently deleted.

8. Your Rights

You have the following rights regarding your data:

• Access: Request a copy of your personal data
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your account and associated data
• Export: Receive your data in a portable format
• Opt-Out: Unsubscribe from marketing emails (service emails still required)
• Revoke Access: Disconnect Instagram integration at any time

To exercise these rights, contact us at contact@aurawonder.com

9. Security

We take your security seriously and implement industry-standard protections:

• All data is encrypted during transmission
• Secure authentication and access controls
• Regular security updates and monitoring
• Limited access to customer data - only authorized personnel when necessary for support

Remember: Your personal images are never stored on our systems. They are processed in real-time and immediately deleted, which provides the highest level of privacy protection.

10. Instagram-Specific Privacy Practices

When you connect your Instagram Business Account:

• We only access Instagram DMs sent to your business account
• We do not access your personal Instagram posts, followers, or private data
• Your Instagram credentials are stored securely
• You can disconnect Instagram at any time through your dashboard
• We comply with Meta's privacy requirements

Images shared via Instagram DM are processed immediately and deleted - we never save them to our servers.

11. Children's Privacy

Our service is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected data from a minor, please contact us immediately.

12. International Data Transfers

Your data may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. We ensure appropriate safeguards are in place to protect your information in compliance with applicable laws.

13. Cookies and Tracking

We use cookies to:

• Keep you logged in to your account
• Remember your preferences
• Improve our service based on how it's used
• Keep your account secure

You can control cookies through your browser settings. Note that disabling cookies may affect how our service works.

14. Changes to This Privacy Policy

We may update this Privacy Policy periodically. We will notify you of significant changes via email or through a prominent notice on our website. Continued use of our service after changes constitutes acceptance of the updated policy.

15. Data Protection Officer

For privacy-related inquiries or to exercise your rights, contact our Data Protection Officer:

Email: contact@aurawonder.com
Response Time: Within 30 days of receipt

16. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us:

17. Legal Basis for Processing (GDPR)

For users in the European Economic Area, we process personal data based on:

• Contract: Processing necessary to provide our services
• Consent: You have given clear consent for specific processing
• Legitimate Interests: For service improvement and fraud prevention
• Legal Obligation: To comply with legal requirements