Privacy Policy

Privacy Policy

Effective Date: October 7, 2026

This Privacy Policy describes how Wevraa ("we", "our", or "us") collects, uses, and protects your personal data in compliance with the Digital Personal Data Protection Act, 2023 (DPDPA) and the Information Technology Act, 2000.

1. Data Fiduciary Identity

Wevraa, registered in Karnataka, India, acts as the Data Fiduciary determining the purpose and means of processing your personal data.

2. Categories of Personal Data Collected

We collect the following types of information to provide our tailored e-commerce and SaaS billing services:

• Identity & Contact Data: Name, mobile number, email address, and billing/shipping address.
• Tailoring & Measurement Data: Specific bodily measurements, fit preferences, and images of handwritten measurement notebooks uploaded for digital extraction.
• Financial Data: Payment transaction details. We utilize Razorpay as our certified payment processor; we do not store your complete credit card or UPI PIN data on our servers.
• Technical Data: Device information, IP address, and application usage logs for platform security and debugging.

3. Purpose and Legal Basis of Processing

We process your personal data based on your explicit consent and for the legitimate use of fulfilling our service obligations. Your data is used exclusively to:

• Digitize boutique measurement records and generate customer invoices.
• Process e-commerce orders, tailor custom garments, and deliver products.
• Communicate order updates and billing receipts via WhatsApp or email.
• Ensure platform security and prevent fraudulent transactions.

4. Data Sharing and Third-Party Processors

We do not sell your personal data to data brokers or third-party advertisers. We share required data only with vetted service providers bound by strict data processing agreements, including:

• Cloud & AI Infrastructure: Secure processing of measurement images using enterprise cloud providers to power our automated extraction tools.
• Payment Gateways: Razorpay for secure processing of your checkout transactions.
• Logistics Partners: Courier services for fulfilling e-commerce and physical garment deliveries.

5. Data Retention and Security

We implement reasonable technical and organizational security safeguards, including encryption and access controls, to protect your data. Personal data is retained only for as long as necessary to fulfill the stated purposes or to comply with Indian tax and legal obligations (such as GST record-keeping).

6. Rights of Data Principals

Under the DPDPA, you have the following statutory rights regarding your personal data:

• Right to Access: Request a summary of the personal data we hold about you.
• Right to Correction & Erasure: Request the update of inaccurate data or deletion of your data when it is no longer required.
• Right to Withdraw Consent: You may withdraw your previously granted consent at any time, subject to legal limitations regarding active transactions.
• Right to Nominate: Nominate another individual to exercise your rights in the event of your death or incapacity.
• Right to Grievance Redressal: Escalate privacy concerns to our designated Grievance Officer.

7. Grievance Officer