Effective Date: 28th August 2025

Last Updated: 28th August 2025

1. Introduction

Cerope (“Company”, “we”, “our”, or “us”) values your trust and is committed to safeguarding your privacy. This Privacy Policy (“Policy”) explains how we collect, use, disclose, and protect the personal information of individuals (“users”, “you”, “your”) who access or use our website, applications, and related services (“Services”).

This Policy has been drafted in compliance with the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, the Digital Personal Data Protection Act, 2023 (DPDP Act), and other applicable Indian laws. We also align our practices with global standards such as the General Data Protection Regulation (GDPR) and other international data protection principles, so that this Policy applies to users both in India and internationally.

By accessing our Services, you acknowledge that you have read and understood this Privacy Policy, and you consent to the collection, processing, and use of your data in accordance with the terms herein.

2. Information We Collect

We may collect and process the following categories of information:

• Personal Identifiers: Information you provide such as your name, email address, contact number, or other identifiers submitted during registration, inquiries, or communication with us.
• Body Data and Images: Photographs, body-related information, and style preferences that you voluntarily upload in order to receive personalized styling recommendations.
• Technical and Device Data: Information automatically collected when you use our Services, including IP address, browser type, operating system, device identifiers, cookies, and interaction logs.
• Usage Data: Information about how you interact with our Services, such as access times, features used, and pages visited, which may be collected for analytics and performance improvement.
• Location Data: While we do not actively collect location data at present, we reserve the right to collect, process, and use location-based information in the future, if required for personalization, security, or compliance.
• Communications Data: Records of your correspondence with us, including emails, inquiries, and customer support requests.
• Marketing Preferences: Information you provide to subscribe to newsletters, promotional campaigns, or surveys.

We do not knowingly collect or solicit personal information from individuals under the age of 13 years. If we become aware that such data has been inadvertently collected, we will take prompt steps to delete it.

3. How We Use Your Information

Your personal information may be used for the following purposes:

• Service Delivery: To provide styling recommendations, personalized experiences, and other features of the Services.
• Improvement of Services: To enhance accuracy, precision, and personalization through machine learning and data-driven improvements.
• User Communication: To send important service updates, respond to inquiries, and provide customer support.
• Marketing & Newsletters: To deliver promotional materials, newsletters, and offers (subject to your opt-in preferences).
• Analytics & Research: To monitor performance, usage trends, and improve our systems, including through third-party analytics providers.
• Legal Compliance: To comply with legal obligations, resolve disputes, enforce our Terms & Conditions, and protect against fraudulent or unauthorized activities.

4. Use of Third Parties

We may engage trusted third parties to support the delivery of our Services. These third parties may process user information on our behalf in accordance with this Policy. Such third parties may include:

• Cloud Storage Providers: For secure hosting and storage of user content and personal data.
• Analytics and Monitoring Services: To help us understand user behavior, improve user experience, and ensure platform reliability.
• AI Model Providers: To process inputs such as images and styling data for generating recommendations.
• Email and Communication Services: To send newsletters, updates, and service-related notifications.
• Advertising and Marketing Networks: To deliver relevant content and marketing campaigns to users.

We do not disclose user data to third parties for their independent commercial use. Any processing by third parties is strictly limited to providing contracted services to Cerope and is governed by confidentiality and data protection obligations.

5. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes described in this Policy. Specifically:

• User-uploaded images and body-related data may be stored for at least 12 months to improve the accuracy and personalization of our Services.
• Account-related information will be retained until the user deletes their account or withdraws consent.
• Certain information may be retained longer if required by law, regulation, or for legitimate business interests such as dispute resolution and fraud prevention.

When information is no longer required, it will be deleted, anonymized, or securely archived.

6. User Rights

In line with the DPDP Act and international privacy principles, you have the following rights:

• Right of Access: You may request a copy of the personal data we hold about you.
• Right of Correction: You may update or correct inaccurate or incomplete information.
• Right to Erasure: You may request deletion of your personal data, subject to applicable retention requirements.
• Right to Withdraw Consent: You may withdraw your consent for processing at any time, although this may affect your ability to use the Services.
• Right to Restriction: You may request limited use of your data in certain circumstances, such as during dispute resolution.

To exercise these rights, you may contact us at info@cerope.com. We will process such requests in accordance with legal requirements and within reasonable timelines.

7. Data Security

We implement reasonable physical, technical, and organizational safeguards to protect user data against unauthorized access, alteration, disclosure, or destruction. This includes encryption, restricted access protocols, and secure storage practices.

While we take significant measures to safeguard your information, you acknowledge that no online platform can guarantee absolute security. Users are encouraged to protect their own accounts through strong passwords and responsible practices.

8. International Data Transfers

Your personal information may be transferred, stored, or processed in jurisdictions outside India where our service providers are located. In such cases, we ensure that adequate safeguards are in place to protect your information, consistent with applicable data protection laws.

By using our Services, you consent to the transfer of your data across international borders, subject to the terms of this Policy.

9. Children’s Privacy

Cerope does not knowingly collect data from individuals under the age of 13. If a parent or guardian becomes aware that their child has provided us with personal data without consent, they should contact us immediately at info@cerope.com, and we will promptly delete such information.

10. Legal Basis for Processing (International Compliance)

• Consent: For collecting and processing user-uploaded images, personal styling data, and marketing preferences.
• Contractual Necessity: To provide Services in line with user expectations.
• Legal Obligation: For compliance with applicable laws and regulations.
• Legitimate Interests: For improving Services, preventing fraud, and ensuring security.

11. Changes to this Policy

We reserve the right to update or modify this Privacy Policy at any time. Any changes will be posted on this page with an updated “Last Updated” date. Significant changes will be communicated via email or service notifications. Continued use of the Services following updates constitutes acceptance of the revised Policy.

12. Contact and Grievance Redressal

For queries, complaints, or requests concerning this Privacy Policy or your data, please contact us:

Cerope

Email: info@cerope.com

Grievance Officer: Yash, Founder & Grievance Officer

The Grievance Officer will acknowledge complaints within the time prescribed under applicable law and make best efforts to resolve them in a fair and timely manner.