Privacy Policy

This Privacy Policy explains how VirtualWare (“we”, “us”, “our”), operating virtualwares.org, collects, uses, and protects your information when you use our AI virtual try-on service (the “Service”). By using the Service you agree to this policy.

1. Information we collect

• Account information — your name, email address, and password (stored only as a secure hash).
• Photos and images — the personal photos and garment images you upload to generate a try-on.
• Payment information — when you buy coins, payment is processed by Stripe and/or PayPal. We do not see or store your full card number; we receive only a confirmation and a transaction reference.
• Usage data — try-ons performed, coins purchased and used, and billing history.
• Technical and security data — IP address, approximate location (country), browser/device information, and security audit logs, used to keep accounts safe and prevent abuse.
• Cookies — strictly necessary cookies/local storage to keep you signed in and remember session state.

2. How we use your information

• To provide the Service — generating virtual try-on results from your photos and selected garments.
• To manage your account, coins balance, and billing.
• To process payments and prevent fraud.
• To secure the platform, enforce our Terms, and comply with the law.
• To respond to your support and contact requests.

3. Your photos

Photos you upload are used solely to generate your try-on result. They are processed for that purpose and are not sold or used to train third-party models on your behalf. We aim to retain uploaded images only as long as needed to deliver and display your results; you may request deletion of your photos and account at any time (see Section 7).

4. Service providers we share with

We share limited data with trusted providers only to run the Service:

• Stripe and PayPal — to process payments.
• Google — for optional Google sign-in and reCAPTCHA bot protection.
• AI image providers — to generate try-on results from your images.
• Cloudflare — for content delivery, security, and DDoS protection.

We do not sell your personal data.

5. Data retention

We keep account and billing records for as long as your account is active and as required for legal, tax, and accounting purposes. Security logs are kept for a limited period to protect the Service.

6. Security

We use industry-standard measures including encrypted connections (HTTPS), hashed passwords, access controls, and origin protection. No system is perfectly secure, but we work to protect your information against unauthorised access.

7. Your rights

Depending on your location (including under UK GDPR), you may have the right to access, correct, delete, or export your personal data, and to object to or restrict certain processing. To exercise these rights, or to request deletion of your photos and account, email us at [email protected].

8. Children

The Service is not intended for children under 16, and we do not knowingly collect their data.

9. International transfers

We operate internationally, so your information may be processed in countries outside your own. Where required, we take steps to ensure your data remains protected.

10. Changes to this policy

We may update this policy from time to time. Material changes will be reflected by the “Last updated” date above. Continued use of the Service means you accept the updated policy.

11. Contact

Questions about your privacy? Email [email protected].