Legal

Privacy Policy

Last updated: March 2026

This Privacy Policy describes how RunTailor ("we", "us", or "our") collects, uses, shares, and protects the personal information of users ("you") who access our mobile application, website, and related services (collectively, the "Platform"). This Policy is compliant with the Digital Personal Data Protection Act, 2023 (DPDP Act) and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 (IT Rules 2021).

1. Who We Are

RunTailor is an Indian on-demand tailoring and fashion marketplace that connects customers with skilled tailors, designers, and fashion professionals across India. Our Platform enables customers to discover local tailors, request custom stitching and alterations, explore bespoke fashion, and experience garments using our AI-powered Virtual Try-On feature.

RunTailor operates as the Data Fiduciary as defined under the Digital Personal Data Protection Act, 2023. We are registered and operate within India. For all data-related queries, you may contact us at grievance@runtailor.com.

2. Information We Collect

We collect information that you provide directly to us, as well as information we collect automatically when you use our Platform.

2.1 Information You Provide Directly

• Account Information: Full name, mobile phone number, email address, and profile photograph when you register on our Platform.
• Addresses: Delivery addresses, billing addresses, and saved locations for tailor pickup or drop-off services.
• Body Measurements: Detailed measurements you provide for custom stitching orders such as chest, waist, hip, sleeve length, inseam, and other garment-specific dimensions.
• Photos and Images: Photographs you upload for our AI Virtual Try-On feature, design references, fabric samples, or for communicating styling preferences to tailors.
• Order Information: Details of garments, alterations, or bespoke orders you place, including fabric preferences, design notes, and special instructions.
• Payment Information: Transaction details processed through our payment gateway partners. We do not directly store your full card or bank account numbers on our servers.
• Communications: Messages, reviews, ratings, and any correspondence you send through our Platform to tailors or our support team.

2.2 Information Collected Automatically

• Device Information: Device model, operating system, unique device identifiers, browser type, and mobile network information.
• Location Data: Precise or approximate geographic location when you grant permission, used to discover tailors and service providers near you.
• Usage Data: Pages visited, features used, search queries, time spent, and interaction patterns within our Platform.
• Log Data: IP address, access times, referring URLs, and crash reports.
• Cookies and Similar Technologies: Data collected via cookies, web beacons, and similar tracking technologies as described in Section 10.

2.3 Information from Third Parties

• Social Login: If you choose to register or log in using Google, Facebook, or other third-party services, we may receive your basic profile information such as name, email, and profile picture from those services.
• Payment Processors: Transaction status and limited transaction metadata from our payment gateway, Cashfree Payments.
• Logistics Partners: Delivery tracking and shipment status information from Delhivery and other logistics partners.

3. How We Use Your Information

We use the information we collect for the following purposes, consistent with your consent and applicable law:

• Providing Our Services: Creating and managing your account, processing orders, matching you with tailors and service providers, facilitating payments, and coordinating garment pickup and delivery.
• Personalisation: Customising your experience based on your measurement profile, order history, style preferences, and location.
• AI Virtual Try-On: Processing uploaded photographs to generate virtual outfit visualisations as described in Section 4.
• Communications: Sending order confirmations, delivery updates, service notifications, and promotional content (with your consent where required).
• Customer Support: Responding to your queries, resolving disputes, and improving our support services.
• Safety and Security: Detecting, preventing, and investigating fraud, abuse, and illegal activity on our Platform.
• Analytics and Improvement: Understanding usage patterns to improve Platform features, performance, and user experience.
• Legal Compliance: Meeting our obligations under applicable Indian laws and regulations including the DPDP Act 2023 and IT Rules 2021.
• Location-Based Discovery: Using your location data to display relevant tailors, estimated pickup/delivery times, and hyperlocal service availability near you.

4. AI Virtual Try-On Feature

Our AI Virtual Try-On feature allows you to upload a photograph of yourself to virtually visualise how a garment, fabric, or design may look on your body. We treat photographs uploaded for this purpose as sensitive personal data under the IT Rules 2021.

4.1 What We Collect

When you use the AI Virtual Try-On feature, you voluntarily upload one or more photographs. These images are processed by our AI models to overlay garment visualisations. The photographs may include biometric or visual information about your body.

4.2 How We Use Try-On Photos

• To generate and display virtual try-on visualisations to you within the Platform.
• To temporarily cache results for a smoother in-session experience.
• We do not use your personal photographs to train our AI models without your explicit, separate, opt-in consent.
• We do not share your photographs with tailors, third parties, or publicly unless you explicitly choose to share them.

4.3 Retention of Try-On Photos

Try-On photos are retained only for as long as necessary to provide the feature and are deleted within 30 days of upload unless you save them to your profile. You may delete saved Try-On photos from your account settings at any time.

4.4 Your Consent

Use of the AI Virtual Try-On feature is entirely optional and requires your affirmative action (uploading a photo). By uploading a photograph, you consent to its processing as described above. You may withdraw this consent by deleting your photos and ceasing to use the feature.

5. Location Data

RunTailor uses location data to power its hyperlocal tailoring discovery experience. We may collect your location in the following ways:

• Precise Location (GPS): Collected only when you grant permission and use location-based search or booking features.
• Approximate Location: Derived from your IP address or network information for general city-level personalisation.
• Saved Addresses: Addresses you manually enter for delivery or pickup.

Location data is used to show you nearby tailors and seamstresses, calculate pickup/delivery distances, provide accurate delivery time estimates, and enable location-based promotional offers.

You can withdraw location permission at any time through your device settings. Withdrawing location access will not prevent you from using the Platform, though certain features such as "tailors near me" may be unavailable.

6. Payment Information

All payment transactions on the RunTailor Platform are processed by Cashfree Payments, a PCI-DSS compliant payment gateway. This means your card details, net banking credentials, and UPI information are processed and stored by Cashfree Payments in accordance with Payment Card Industry Data Security Standards.

RunTailor does not directly receive, store, or process your full card number, CVV, or bank account credentials. We only receive:

• Transaction status (success, failure, pending)
• Transaction reference ID
• Partial masked payment method details (e.g., last 4 digits of card)
• Amount and currency

This information is retained in our systems to maintain your order history and for accounting, fraud prevention, and legal compliance purposes. For details on how Cashfree Payments handles your financial data, please refer to Cashfree Payments' own Privacy Policy.

7. Sharing Your Information

We do not sell your personal data. We may share your information in the following limited circumstances:

7.1 With Tailors and Service Providers on the Platform

When you place an order, we share relevant details with the tailor or fashion professional fulfilling your order. This includes your name, delivery address, contact number (for order-related communication), measurements, design preferences, and any photos you have explicitly shared for the order.

7.2 With Logistics Partners

We share your name, delivery address, and contact number with our logistics partner, Delhivery, and other courier services for the purpose of garment pickup and delivery. Delhivery processes this data under its own privacy policy as a data processor for RunTailor.

7.3 With Payment Processors

Payment-related information is shared with Cashfree Payments for processing transactions, as described in Section 6.

7.4 With Analytics and Technology Providers

We may share aggregated or pseudonymised data with analytics providers to understand Platform usage and improve our services. These providers are contractually restricted from using data for any purpose other than providing services to us.

7.5 For Legal and Safety Reasons

We may disclose your information to government authorities, law enforcement, or other parties when required by applicable Indian law (including orders from courts, tribunals, or regulatory authorities), to enforce our Terms of Service, or to protect the rights, property, or safety of RunTailor, our users, or the public.

8. Data Retention

We retain your personal data for as long as necessary to provide our services, fulfil the purposes described in this Policy, and comply with our legal obligations. The following retention guidelines apply:

• Account Data: Retained for the lifetime of your account. If you request account deletion, your personal data is deleted or anonymised within 30 days, subject to legal hold requirements.
• Order and Transaction Records: Retained for a minimum of 7 years in accordance with Indian accounting and tax regulations.
• Measurement Profiles: Retained as long as your account is active. You may delete saved measurement profiles from your account settings at any time.
• AI Try-On Photos: Deleted within 30 days of upload unless saved to your profile. Profile-saved photos are retained until you delete them or delete your account.
• Communications and Support Records: Retained for up to 3 years after the issue is resolved for quality assurance, training, and legal compliance.
• Log and Usage Data: Retained for up to 12 months.

9. Your Rights Under the DPDP Act 2023

As a Data Principal under the Digital Personal Data Protection Act, 2023, you have the following rights with respect to your personal data processed by RunTailor:

To exercise any of these rights, please contact our Grievance Officer at grievance@runtailor.com. We will respond to your request within the timeframes prescribed by the DPDP Act 2023.

10. Cookies and Tracking Technologies

We use cookies and similar tracking technologies on our website and application to improve functionality, analyse usage, and deliver relevant content.

Types of Cookies We Use

• Essential Cookies: Necessary for the Platform to function, including session management and authentication.
• Performance Cookies: Help us understand how users interact with our Platform, including pages visited and error reports.
• Functional Cookies: Remember your preferences such as saved addresses, language settings, and tailored recommendations.
• Marketing and Analytics Cookies: Used to measure the effectiveness of our marketing campaigns and deliver relevant advertisements, subject to your consent.

You can control cookies through your browser settings or our in-app cookie preference centre. Disabling certain cookies may impact your experience on the Platform.

11. Children's Privacy

RunTailor's services are not directed to children below the age of 18 years. We do not knowingly collect personal data from children. Under the DPDP Act 2023, we do not process personal data of children without verifiable parental consent.

If you believe that a child under the age of 18 has provided us with personal data without appropriate parental consent, please contact us at grievance@runtailor.com and we will take steps to delete such information promptly.

12. Security of Your Information

We implement industry-standard security measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction. These measures include:

• Encryption of data in transit using TLS/SSL protocols.
• Encryption of sensitive data at rest.
• Access controls and authentication mechanisms to restrict data access to authorised personnel only.
• Regular security assessments and vulnerability testing.
• PCI-DSS compliance for payment processing via Cashfree Payments.
• Incident response procedures in accordance with IT Rules 2021.

While we take all reasonable precautions, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security, but we are committed to promptly notifying affected users and relevant authorities in the event of a data breach as required by applicable law.

13. Third-Party Links and Services

Our Platform may contain links to third-party websites, apps, or services such as payment gateways, social media platforms, or logistics tracking portals. This Privacy Policy does not apply to those third-party services.

We encourage you to review the privacy policies of any third-party services you interact with through our Platform. RunTailor is not responsible for the privacy practices or content of third-party services.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:

• Update the "Last Updated" date at the top of this Policy.
• Notify you via email or in-app notification if the changes are significant.
• Where required by the DPDP Act 2023, seek your fresh consent for new processing activities.

We encourage you to review this Privacy Policy periodically. Your continued use of our Platform after changes are posted constitutes your acceptance of the updated Policy, to the extent permitted by applicable law.

15. Grievance Redressal

In accordance with the Information Technology Act, 2000 and the rules made thereunder, as well as the Digital Personal Data Protection Act, 2023, RunTailor has designated a Grievance Officer to address any complaints, questions, or concerns related to this Privacy Policy or the processing of your personal data.

If you are not satisfied with the resolution provided by our Grievance Officer, you may escalate your complaint to the Data Protection Board of India, once operational under the DPDP Act 2023.

16. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please reach out to us:

grievance@runtailor.com

This Privacy Policy is governed by the laws of India. Any disputes arising under this Policy shall be subject to the exclusive jurisdiction of competent courts in India.