Privacy Policy

1. Information We Collect

When you sign in via Helix SSO or Google OAuth, we receive your name, email address, and profile picture. We also collect information you voluntarily provide, including body measurements, shoe size, and style preferences. Usage data (pages visited, features used) is collected to improve the Service.

2. How We Use Your Information

To create and manage your RishiRich Club membership account.
To power your Virtual Closet, AI Smart Styling suggestions, and garment lifecycle tracking.
To process bespoke orders through Darjie Studio.
To operate the Circular Initiative donation and credit programme.
To send push notifications and WhatsApp messages you have opted into.
To comply with legal obligations and prevent fraud.

3. Data Sharing

We do not sell your personal data. We share data with trusted service providers solely to operate the Service:

Helix SSO (sso.ivirth.com) — authentication provider.
Google — OAuth authentication.
Razorpay — secure payment processing. Your card details are handled entirely by Razorpay and never stored on our servers.
OpenAI — AI-powered Smart Styling suggestions (wardrobe item data only; no PII shared beyond what is necessary).
Courier Partners — for Essentials Box dispatch and Circular Initiative pickups.

4. Cookies & Local Storage

We use a secure, HttpOnly session cookie (rrd_session) to maintain your login session. The PWA Service Worker may cache static assets in your browser for offline access. No advertising or tracking cookies are set.

5. Data Retention

We retain your account data for as long as your account is active. You may request deletion of your account and associated data by contacting us. Transaction and donation records may be retained for up to 7 years for legal and accounting purposes.

6. Security

We use TLS encryption for all data in transit. Passwords are not stored — authentication is delegated entirely to Helix SSO or Google. We implement CSRF protection, secure session management, and parameterised SQL queries to protect your data.

7. Your Rights

You have the right to access, correct, or request deletion of your personal data. You may update your anatomy profile (height, shoe size) directly in your profile settings. For other requests, contact us at the address below.

8. Children's Privacy

The Service is not directed at individuals under 18 years of age. We do not knowingly collect personal information from minors.

9. Contact

For privacy-related queries, please contact: privacy@rishirich.in (placeholder — update before launch).

10. Changes to This Policy

We may update this Privacy Policy periodically. Material changes will be notified via your member dashboard. Continued use of the Service after such notification constitutes acceptance of the updated policy.