Privacy Policy

Last updated: 4 September 2026

You are about to send us a photo of your face. That deserves a straight answer about what happens to it, so this policy is written to leave nothing open to interpretation. It explains how StylesStudio.ai, operated by StylesStudio AI Private Limited (CIN U62099UW2026PTC259563) ("we", "us", "our"), collects, uses, shares, and protects your personal data, in accordance with India's Digital Personal Data Protection Act, 2023 and applicable IT rules.

The short version

• Your photo is used to create your look. That is the only thing it is used for.
• It is never used to train AI. Not ours, not anyone else's.
• We never sell your data. Not to advertisers, not to data brokers, not to anyone, at any price.
• The photo you upload is deleted within 2 days. The looks we generate stay for 30 days so you can download them, then they are deleted too.
• You can delete everything yourself, whenever you want, without asking us.
• No advertising cookies. No tracking pixels. No profile of you is built or sold.
• Styling a child? Only a parent or guardian may upload their photo, and we never profile or advertise to children — see Section 9.

The rest of this page is the detail behind each of those statements, including the parts that are more complicated than a one-line summary can carry.

1. Who this applies to

This policy applies to anyone who visits our website or creates an account. You must be at least 18 years old to create an account and use the Service.

StylesStudio.ai includes hairstyle and outfit options for children, so a parent or legal guardian can use their own account to try looks for a child in their care. The account always belongs to the adult. How we handle a child's photo is set out in Section 9, and it is stricter than for anyone else.

You can browse the public pages without giving us anything. We only begin collecting personal data when you create an account or upload a photo.

2. What we collect

• Account details: username, email address, and optionally your name and phone number.
• Google account info (only if you use "Sign in with Google"): your name, email address, and Google account ID. We do not receive your Google password, and we cannot see anything else in your Google account.
• Photos: any photo you upload or take, plus every photo we generate for you.
• Payment records: the amount, package, and payment reference for purchases. We never see or store your card number, CVV, UPI PIN, or bank details — those go directly to Razorpay or your UPI app and never touch our servers.
• Usage data: basic technical logs (request timing, error logs) used to operate and secure the Service.
• Cookies: a single session cookie so you stay logged in. That is the only one. We use no advertising cookies, no tracking pixels, and no third-party analytics that follow you around the internet.

We do not ask for, and do not want, anything beyond this. We do not collect your contacts, your location, your other photos, or anything else on your device.

3. Why we collect it

• To generate the hairstyle, beard, and outfit recommendations and previews you ask for.
• To manage your account, credits, and purchase history.
• To send you a password-reset link if you request one, and (if you opt in) a notification when your photo is ready.
• To detect and prevent fraud, abuse, and security incidents.
• To comply with legal and tax obligations.

That list is exhaustive. We do not use your photo or your data for marketing, for research, for product development, or for anything not named above.

4. Specialist AI processing partners

Creating your look requires specialist image AI. That processing is carried out by a small number of established enterprise AI platforms we engage under formal Data Processing Agreements. Here is exactly what those agreements mean for you:

• Your photo is encrypted the moment it leaves your device. Every upload travels over HTTPS with modern TLS encryption, and the same encrypted channel is used for every request we make to our processing partners. Your image is never transmitted in the open, and nobody in between can read it.
• Your photo is never used to train AI. Under the enterprise terms we contract on, nothing sent to these platforms is used to train or improve their AI models. Your face never becomes training data for a system that anyone else uses.
• They work only on our instructions. These platforms act strictly as our processors. Your photo is used to create your result and nothing else — they cannot use it for their own purposes and cannot build a profile of you.
• Nothing is kept for their benefit. Your image is not retained for any commercial or product purpose. A short, contractually limited window exists solely for the platforms' own security and abuse checks, and nothing survives it.
• Onward sharing is closed off. A processing partner may only involve its own vetted sub-processors, each bound by the same obligations set out here. Your photo cannot be passed to anyone outside that chain.
• Vetted, and deliberately few. We work only with providers who commit contractually to every protection above. If a provider will not sign to it, we do not use them.

These platforms operate globally, so this processing may take place on servers outside India. The protections above follow your photo wherever it is processed, because they are contractual obligations rather than a matter of location.

5. Other services, and who else can see your data

• Razorpay processes card and UPI payments. They receive what they need to take the payment; we receive only the confirmation and reference.
• Other users: never. Every photo is private to your account. Viewing or downloading one requires being signed in as you, and every single request is checked against your account before an image is served. There is no public gallery, no sharing by default, and no way for another user to reach your photos.
• Our staff: a small number of authorised administrators can access accounts and photos where it is genuinely necessary — investigating a support complaint, a payment dispute, or suspected abuse. This is limited, logged, and not routine browsing.
• Law enforcement: we may disclose data if required by law, court order, or governmental request, or to protect the rights, safety, or property of StylesStudio.ai or others. We disclose the minimum required.
• We do not sell your data to anyone, and do not share it with any third party for their own marketing or commercial purposes. There is no arrangement under which anyone pays us for access to your data or your photos.

6. How long we keep it

• The photo you upload: deleted within 2 days. It is used to create your look, and kept only briefly afterwards so we can put things right if your result does not come out properly. This is automatic.
• The looks we generate: kept for 30 days. They stay in My Photos so you can return to them, compare them, and download the ones you like. After 30 days they are automatically and permanently deleted. Please download anything you want to keep — once the 30 days are up we cannot recover it, because it no longer exists.
• Your account details: kept while your account is open, and erased when you delete it.
• Payment records: kept for as long as tax and accounting law requires, even after you delete your account. These are transaction records — amount, package, reference — not photos and not card details.

These are not aspirations. Deletion runs automatically on a schedule; it does not depend on anyone remembering to do it.

7. Your rights, and exactly how to use them

• See and correct your details: update your name, email, or phone any time from your account settings.
• Download your photos: every look we generate can be downloaded to your own device at any time from My Photos. Because photos are deleted after 30 days, downloading is how you keep one permanently.
• Remove a photo: you can remove any photo from My Photos at any time and it stops being shown to you immediately. To be exact about what happens next: removing it takes it out of your gallery, and the image itself is then erased on the 30-day schedule above. If you want a photo gone from our systems straight away rather than on that schedule, delete your account or email us and we will do it for you.
• Delete everything: Change Password → Delete account permanently erases every photo you have ever uploaded or generated, along with your name, email, phone, and login. This cannot be undone. Your transaction records are retained as described above, because tax law requires it — they contain no photos and no card details.
• Withdraw consent: deleting your account withdraws your consent to any further processing.
• Complain: if you are unhappy with how your data has been handled, email compliance@thikana-india.com. We will acknowledge your complaint promptly and aim to resolve it as quickly as possible. You also have the right to raise the matter with the Data Protection Board of India.

8. Security

Passwords are never stored in plain text — we store a one-way hash, so even we cannot read your password. All traffic to and from StylesStudio.ai is encrypted with HTTPS. Every photo is private to your account and every request for one is authorised against your account before an image is served.

We apply reasonable technical and organisational measures to protect your data. We will not claim to be unbreachable, because no service honestly can. What we will commit to is this: we hold as little as possible, for as short a time as possible, so that there is very little to lose in the first place.

9. Children

The Service offers hairstyles and outfits for children, so we want to be exact about how a child's photo is treated.

• A child cannot hold an account. Accounts are for adults aged 18 or over. If we learn that a child has created one, we will delete it and everything in it.
• Only a parent or legal guardian may upload a child's photo. When you upload a photo of a child, you are confirming that you are that child's parent or legal guardian and that you consent, on their behalf, to it being processed to create the look you asked for. Please do not upload a photo of any child you are not responsible for.
• A child's photo is used for one thing only: creating the look you requested. It is never used to train AI, exactly as described in Section 4, and it is deleted on the same schedule as everyone else's — the upload within 2 days, the generated look after 30 days.
• We never profile, track, or advertise to children. We build no profile of a child, carry out no behavioural monitoring or tracking, and show no targeted advertising to anyone — we show no advertising at all. There are no advertising or tracking cookies anywhere on this service.
• You stay in control. You can remove a child's photo from My Photos at any time, or delete your account to erase every photo immediately. The rights in Section 7 apply to a child's data through you as their parent or guardian.
• If you change your mind, email compliance@thikana-india.com and we will delete a child's photos straight away rather than waiting for the schedule.

10. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the "Last updated" date above. Continued use of the Service after a change means you accept the updated policy.

11. Contact

Questions about this policy, or requests relating to your data, can be sent to compliance@thikana-india.com. A real person reads that address.

StylesStudio AI Private Limited, CIN U62099UW2026PTC259563. Registered office: A-1902 19TH FLR BLOCK A, GH 2 SECTOR 16, I.A. Surajpur, Noida, Gautam Buddha Nagar- 201306, Uttar Pradesh.