Privacy Policy

1. Who we are

FabricLens ("we", "us") operates www.fabriclens.in, an AI-powered textile analysis and fabric marketplace platform. We are based at the Faculty of Technology & Engineering, MSU Baroda, Vadodara, Gujarat, India. For privacy queries email hello@fabriclens.in.

2. What we collect

Account data — name, email, hashed password, Google account ID (if you sign in with Google).

Fabric & design data — the images, sketches, and parameters you upload for analysis, jacquard generation, CAD export, shade matching, and design generation. We retain processed outputs in your account history for your reference.

Marketplace data — if you sell on FabricLens Marketplace: company name, GSTIN (optional), business document URLs, contact details, listing photos.

Payment data — UPI / UTR transaction reference and a screenshot URL for manual subscriptions, or a Razorpay payment ID for online payments. We never see or store your card / UPI credentials directly.

Usage telemetry — for security and capacity planning we log which features you use, request timing, memory usage, and IP address. See our cookie banner for analytics opt-in details.

Communications — demo request details, support emails, and OTP verification metadata.

3. Why we use it

• To run the service you signed up for (analysis, design, marketplace listings).
• To verify your identity (OTP, password reset, supplier verification).
• To detect abuse, prevent automated scraping, and rate-limit excessive use.
• To debug crashes and plan capacity (RAM spikes, response times).
• To send transactional emails (booking confirmations, password resets, billing).
• If you opt in: to send product updates and marketing emails (you can unsubscribe any time).

4. Who we share it with

We do not sell your data. We share strictly with processors required to deliver the service:

• Resend — transactional emails (OTP, demo confirmations).
• Razorpay — payment processing.
• Google — OAuth sign-in (only if you choose Google sign-in).
• Groq, HuggingFace, Pollinations, Stable Horde, Together AI — AI inference for design generation. Only the design prompt you submit is sent.
• Chroma Cloud — vector store for our textile knowledge base. Your questions, not your account, are sent.
• Railway — our hosting provider.

5. How long we keep it

• Account data: until you delete your account.
• Analysis history: until you delete it from your dashboard or the account is deleted.
• Logs & usage telemetry: 90 days.
• OTP records: auto-purged after expiry, never retained beyond 24 hours.

6. Your rights

Under India's DPDP Act 2023 and applicable laws you may request access, correction, or deletion of your personal data. Email hello@fabriclens.in with the subject line "Data Request" and we will respond within 30 days.

7. Cookies & tracking

We use a session cookie (fl_session) to keep you logged in. It is HttpOnly, Secure (in production), and SameSite=Lax. We use Google Analytics 4 to measure how the site is used, but only after you opt in via the cookie banner. You can change your choice at any time from the "Cookie Settings" link in the footer.

8. Security

Passwords are stored hashed with scrypt. Sessions rotate on password reset. Admin endpoints require an additional flag and are audit-logged. We follow OWASP Top 10 hardening practices. No system is perfectly secure — report issues responsibly to hello@fabriclens.in.

9. Children

FabricLens is intended for users aged 18+. We do not knowingly collect data from children. If you believe a minor has signed up, contact us and we will remove the account.

10. Changes

We may update this policy. Material changes are emailed to active subscribers and announced on the site at least 7 days before they take effect.