LEGAL COMPLIANCE DRAFT • DPDP ACT 2023 & DPDP RULES 2025 ALIGNED

BuyWise AI — Privacy Policy

Version: 2.1Effective Date: January 1, 2026Last Updated: September 6, 2026Jurisdiction: Republic of India
⚠️ Notice: This Privacy Policy is structured as an implementation draft aligned with the Digital Personal Data Protection Act, 2023, DPDP Rules, 2025, and the IT (Intermediary Guidelines and Digital Media Ethics Code) Rules. Final legal review by qualified Indian technology & e-commerce legal counsel is recommended prior to commercial launch.

1. Entity & Platform Overview

This Privacy Policy governs the processing of personal data by BuyWise AI ("BuyWise", "Platform", "We", "Us", or "Our"). BuyWise AI is an AI-powered shopping intelligence platform operating in the Republic of India.

2. Regulatory & Legal Framework

BuyWise AI processes digital personal data in accordance with applicable Indian laws, including the Digital Personal Data Protection Act, 2023 (DPDP Act), the Digital Personal Data Protection Rules, 2025 (DPDP Rules), the Information Technology Act, 2000, and the Consumer Protection (E-Commerce) Rules, 2020.

3. Information We Collect

We collect personal data necessary to provide shopping comparison, price alerts, AI Virtual Try-On, and partner marketplace services:

  • Account & Contact Data: Name, email address, mobile phone number, profile photo URL.
  • Shopping Preferences: Preferred categories, currency preferences, preferred retailers, price range filters.
  • Price Alert Subscriptions: Target prices, product SKUs, notification settings.
  • AI Virtual Try-On Photographs: Photographs voluntarily uploaded by users to generate garment and jewellery try-on previews.
  • Technical & Usage Data: IP address, device type, browser user-agent, operating system, proxy request logs.

4. AI Virtual Try-On (VTO) & Admin Media Access Boundaries

BuyWise AI enforces three distinct media privacy access tiers:

  • 1. Private Local Media (Default): User photographs and generated VTO results are stored strictly in browser IndexedDB on the user's device. BuyWise administrators have zero default access to private local VTO photos.
  • 2. User-Authorized Support/Security Review Media: Where a user voluntarily authorizes a specific image for support, rendering quality inspection, or safety/abuse reporting, BuyWise temporarily processes that single selected image. Access is purpose-limited, restricted to authorized support roles, expires after 48 hours, and generates an immutable security audit log.
  • 3. Competition Submission Media: Submitting a VTO look to a BuyWise competition requires active, explicit consent via a dedicated consent dialog. Consent applies ONLY to the single selected look for public gallery display upon moderation.

5. Affiliate Links & External Retailer Data

When you click on affiliate retailer links (such as Amazon India, Flipkart, or Myntra), you are redirected to the respective merchant platform. BuyWise AI does not receive your payment credentials, credit card details, or delivery address entered on external retailer sites.

6. Data Erasure & Local Clearing Rights

Under the DPDP Act 2023, data principals have the right to request erasure of their personal data. Users can clear locally stored Try-On photos and saved looks instantly via Profile → Privacy Center → Clear Local Try-On Data or request account deletion via Profile → Security → Delete Account.

8. Google Play Store Data Safety & Account Deletion

In compliance with the Google Play Console User Data Policy and Data Deletion Requirement, BuyWise AI provides two methods for users to request permanent deletion of their account and all associated personal data:

  • In-App Account Deletion: Open the BuyWise AI Android App, navigate to Profile → Delete Account (DPDP Data Erasure), and confirm deletion. This immediately wipes your Firebase authentication credentials, price alerts, and private AI Try-On assets.
  • Web/Online Account Deletion Request: If you no longer have the app installed, you can submit a deletion request by emailing support@pajonline.co.in with the subject line "Account Deletion Request" along with your registered email address. Account data will be permanently purged within 7 business days.

9. Grievance Redressal Officer

Grievance Officer: Privacy & Compliance Officer
Entity: BuyWise AI India
Email: privacy@buywise.ai / support@pajonline.co.in
Response Window: Acknowledgement within 24 hours; resolution within 15 business days as mandated under Indian IT Intermediary Rules & Google Play Guidelines.
Terms of Service →Competition Terms →Refund Policy →Affiliate Disclosure →Return to Profile
Maya BuyWise AI Assistant
HI MAYA✨
🏠Home✨AI Try-On🔔Price Alerts⚡BUYWISE PARTNERS PORTAL👤Profile