Last updated: September 5, 2026
Beauty Base Zero LLC, doing business as Draped (“DrapedAI”), operates an AI fashion stylist and virtual try-on service. This policy explains what we collect, why, and your rights.
1. Information we collect
From you
- Account: email, name, hashed password, age confirmation.
- Profile: handle, bio, profile photo, style preferences, optional measurements.
- Photos: closet items, body / try-on photos, inspo posts (location EXIF stripped).
- Social content: posts, comments, DMs, friend connections.
- Subscription metadata: tier and status. We do not store full card numbers.
- Support correspondence.
Automatically
- Usage analytics, device data, app version, IP address, approximate (city-level) location.
- Web cookies / localStorage (e.g.
auth_token).
From third parties
- CJ Affiliate clicks and resulting commissions.
- Apple / RevenueCat: iOS subscription transaction IDs and entitlement status (not your full Apple ID).
2. How we use your information
- Operate the closet, try-on, stylist chat, inspo, and DM features.
- AI processing: closet item and body photos, and the prompts and messages you submit to AI features, may be sent to third-party AI service providers acting on our behalf to generate try-ons and styling responses. We do not authorize those providers to use your photos to train public AI models.
- Bill subscriptions and detect fraud (Stripe / Apple / RevenueCat).
- Track affiliate commissions (CJ Affiliate).
- Send transactional messages and (with consent) marketing.
- Improve the Service, debug, and ensure security.
We do not sell your personal information.
3. Sharing
With AI service providers and other processors that support payments, subscriptions, affiliate tracking, hosting, error monitoring, and analytics; with other users for content you choose to share; in a corporate transaction; and where required by law.
4. Retention
Data is kept while your account is active. After deletion, personal data is removed within 30 days, except limited records retained for legal, accounting, fraud-prevention, and backup purposes (typically up to 12 months in encrypted backups).
5. Your choices and rights
You can access, edit, or delete your profile and content from in-app settings, delete your account, opt out of marketing, and manage iOS subscription auto-renewal in your Apple ID settings.
California (CCPA / CPRA)
California residents may request access, deletion, correction, limits on the use of sensitive information, and may opt out of sale or sharing — DrapedAI does not sell or share for cross-context behavioral advertising. Email privacy@drapedai.com to make a request; we may need to verify your identity. We will not discriminate against you for exercising these rights.
EEA, UK, and Switzerland
If applicable law in your location applies, our legal bases are contract performance, legitimate interests, consent, and legal obligation. You have rights to access, rectify, erase, restrict, port, and object, and to lodge a complaint with your supervisory authority. Where required, cross-border transfers use safeguards recognized by applicable law.
Right to data portability (Article 20): You may request a machine-readable copy of all personal data you have provided to DrapedAI. Go to Account → Privacy → Download my data in the app to receive a JSON file containing your profile, closet, wishlist, saved looks, stylist board snapshots, inspo posts, direct messages, friendships, style persona, filed reports, and blocked-user list. You may also email privacy@drapedai.com to request an export.
6. Cookies (web)
We use first-party cookies and localStorage to keep you signed in and remember preferences. Affiliate clicks may be attributed through CJ Affiliate links. We do not run cross-site behavioral ad networks.
7. Children
Not directed to children under 13. We do not knowingly collect data from anyone under 13. Users 13–17 should use the Service only with parental involvement and may not make in-app purchases without parental consent.
8. Security
TLS in transit, encryption at rest for photo storage, hashed passwords, JWT-based sessions, and access controls. Report vulnerabilities to privacy@drapedai.com.
9. International users
The Service is operated from the United States. By using it you consent to U.S. processing.
10. Changes
Material changes will be announced in-app or by email at least 30 days before effect.
11. Contact
Beauty Base Zero LLC (dba Draped), Los Angeles, CA, USA — privacy@drapedai.com