LEGAL // DATA PROTECTION

Privacy
Policy

Last updated: September 2026 · Effective: April 2026

THRYD (“we,” “our,” “us”) operates thryd.co, a curated marketplace for independent Indian fashion labels. This policy describes how we collect, use, and protect your personal data in compliance with India’s Digital Personal Data Protection Act, 2023 (DPDP Act) and other applicable laws.

1. Data We Collect

Account data: Name, email address, and password hash when you create an account.

Fit profile: Height, build category, gender, and optionally skin tone preference, used solely to generate virtual try-on visualisations and size recommendations. No biometric data is stored.

Order data: Items purchased, size, shipping address, and order status.

Payment data: We do not store card numbers or bank details. Payment processing is handled entirely by Razorpay. We receive only a payment confirmation token.

Usage data: Page views, product interactions, and device type, collected via PostHog for product analytics. If you are signed in, this activity is linked to your account ID (not your name or email).

2. How We Use Your Data

To fulfil and ship your orders.

To generate virtual try-on visualisations mapped to your fit profile.

To recommend sizes and products suited to your measurements.

To send order confirmations and shipping updates (transactional email only, no marketing without explicit opt-in).

To improve the platform through product analytics.

3. Virtual Try-On & Fit Data

If you use the AI Studio feature, any photo you provide is processed entirely on your device to estimate body measurements. Your photo is never uploaded to or stored on THRYD’s servers.

To generate the try-on visualisation, our system uses a generic mannequin image (matched to your build) together with the product’s image. We do not share your photo, your measurements, or any information identifying you with any third party for this purpose. Where rendering is performed using third-party AI infrastructure, it receives only these non-personal images and does not retain them beyond the session.

4. Data Sharing

We share only what is necessary:

Brand partners: Receive your shipping name, address, and order details to fulfil shipments. They do not receive your email, payment data, or fit profile.

Razorpay: Processes payments. Subject to Razorpay’s Privacy Policy.

Supabase: Hosts our database and authentication infrastructure on servers in India (Mumbai region). Subject to Supabase’s Privacy Policy.

Vercel: Hosts and serves our application; processes login and request data when you sign in (including via Google or Facebook). Subject to Vercel’s Privacy Policy.

Resend: Delivers transactional email to your registered email address. Subject to Resend’s Privacy Policy.

We do not sell your personal data to any third party.

5. Data Retention

Account and order data is retained for 7 years to comply with GST record-keeping requirements.

Fit profile data is retained until you delete it from your Profile page or request account deletion.

6. Your Rights (DPDP Act 2023)

Under the Digital Personal Data Protection Act, you have the right to:

✦ Access the personal data we hold about you.

✦ Correction of inaccurate or incomplete data.

✦ Erasure of your data (subject to legal retention obligations).

✦ Grievance redressal: complaints must be addressed within 30 days.

To exercise any right, email us at privacy@thryd.co.

7. Cookies & Local Storage

We use no third-party advertising or tracking cookies. The cookies we set are our own:

✦ Sign-in: Supabase Auth session cookies that keep you logged in. Essential; the site can’t keep you signed in without them.

✦ Preferences: a cookie remembering that you’ve answered the stylist’s style prompt.

✦ Analytics: a PostHog cookie that keeps a visit continuous. For signed-in users it is linked to your account ID, as described under Usage data.

We also keep some data in your browser’s local storage, on your device only, so it survives between visits: your cart, saved items and boards, labels you follow, size and style preferences, your chat with our assistant, and the shipping details you last entered at checkout.

You can clear cookies and local storage at any time from your browser settings. Clearing them signs you out and empties anything stored on the device.

8. Security

All data is transmitted over HTTPS. Passwords are hashed using bcrypt. Database access is protected by row-level security policies. We perform regular security reviews and use least-privilege access controls.

9. Contact & Grievance Officer

For any privacy concern, data request, or complaint:

Grievance Officer: Shreyas Beriwal, Director
Acknowledged within 24 hours · resolved within 30 days
THRYD COLLECTIVE PRIVATE LIMITED · CIN U47912MP2026PTC083377
Registered office: H.No. 25/A, Bank Nagar Colony, Ashoka Garden, Industrial Estate (Bhopal), Huzur, Bhopal 462023, Madhya Pradesh, India