Privacy Policy

1. Information we collect

We collect account details you provide (name, email), browsing and preference data, and basic device information such as IP address and browser type. We do not ask for your phone number to create an account.

2. How we use information

We use your data to provide the product, personalize recommendations, communicate updates, improve performance, and prevent abuse.

3. Sharing of data

We do not sell your personal data. We work with a small set of trusted service providers (sub-processors) who help us run the platform, each only for the purpose listed below and under confidentiality safeguards:

• Supabase— database, sign-in and secure storage of your account and saved pieces.
• Vercel— website hosting and privacy-friendly, cookieless usage analytics.
• Resend— sending you transactional email (sign-in codes, waitlist and back-in-stock alerts).
• Algolia— powering fast on-site search over our public catalogue.
• Groq & Google (Gemini)— generating Sakhi's styling replies; only your conversation text is sent, never your name or contact details.
• Sentry— error and performance monitoring to keep the site reliable.
• Cuelinks— attributing your outbound clicks to partner brands so we earn an affiliate commission.

4. Cookies and analytics

Essential storage that keeps Nayuu working — sign-in, your saved pieces, your theme — is always on. Analytics are optional and stay off until you accept them on the consent banner: only then do we measure how the site is used (via privacy-friendly, cookieless analytics) and record your in-app activity. You can change or withdraw your choice any time from “Cookie preferences” in the footer; decline and no analytics run.

5. Data retention

We keep data only as long as necessary for product operation, legal compliance, and security obligations. In practice:

• Account data(name, email, style profile) — kept while your account is active; deleted within 30 days of you closing it or asking us to.
• Saved pieces & boards— kept while your account is active; for guests they live only in your browser until you clear it.
• Waitlist email— kept until launch and until you ask to be removed; one click in any email opts you out.
• Usage analytics(only if you accept) — retained in aggregate for up to 14 months, then removed; always cookieless.
• Error & security logs— kept for up to 90 days, then deleted.

6. Security

We implement reasonable technical and organizational safeguards. No internet system is fully risk-free, but we continuously work to protect user data.

7. Your choices

You can request access, correction, or deletion of your data by contacting us. You can also opt out of non-essential communication.

8. Your rights under Indian law

Nayuu operates from India. We process personal data in line with India's Digital Personal Data Protection Act, 2023. You may withdraw consent, request access to or correction of your data, or ask us to delete it, at any time.

9. Governing law

This Privacy Policy is governed by the laws of India. Any disputes are subject to the courts of Gujarat, India.

10. Contact

For privacy questions or to exercise your rights, email: privacy@nayuu.in