Your data, on your terms.

We're Slayble — an everyday rotation service for people who'd rather wear a great wardrobe than buy one. To run that service, we collect a small amount of personal data. This policy explains what we collect, why, who else sees it, and the controls you have over it.

This policy applies to the Slayble mobile app, our website, and any onboarding visit conducted by a Slayble stylist (where physical sizing is taken). It is published under the Digital Personal Data Protection Act, 2023 (“DPDP Act”) and applicable Indian regulations.

We collect only what the service needs to operate. We group it as follows:

• Account & identity. Your name, mobile number, email, and a government-issued ID for one-time KYC. KYC is required because the items in your wardrobe carry real retail value and we are accountable for them.
• Physical sizing. Body measurements taken by a Slayble stylist during your in-person onboarding visit. We never ask you to self-report sizes — fit is the single biggest reason a rotation works or doesn't.
• Style & preference data. Themes you follow, categories you browse, items you favourite, the wardrobe you build each week, and ratings you leave on returned items.
• Address & delivery data. Your delivery address(es), preferred delivery and pickup slots, and approximate device location (only used to confirm we serve your area).
• Payment & billing. Plan tier, billing history, last four digits and brand of your saved card. Full card numbers, CVVs, and UPI PINs are handled directly by our PCI-DSS compliant payment partner — Slayble never sees, stores, or transmits them.
• Device & app usage. Device model, OS version, app build, anonymous crash logs, and aggregated feature-usage analytics.
• Communications. Messages, emails, and call recordings from our support channels (we'll always tell you when a call is being recorded).

We use your data to:

• Curate your weekly wardrobe — match items to your sizing, themes, and stated preferences.
• Process your orders end-to-end: sourcing, packing, delivery, return pickup, cleaning, and repair.
• Verify identity and reduce loss when high-value items leave the warehouse.
• Run subscription billing, manage your Coin balance, and issue refunds where applicable.
• Offer customer support and resolve grievances.
• Improve the service — anonymous analytics, A/B tests, and crash reporting.
• Comply with Indian tax, accounting, and consumer-protection law.

We do not use your data to build third-party advertising profiles. We do not sell your data, ever.

We share the minimum data required, with the following categories of recipients:

• Logistics partners — name, delivery address, slot, contact number. Used for delivery and reverse pickup. They do not see your sizing, payment, or browsing data.
• Retail partners — only when an item you've selected isn't in our warehouse and we need to source it. They see the item, size, and the delivery window. They never see your name, address, or contact details.
• Cleaning and repair partners — item-level data only (e.g. RFID tag, fabric notes, return condition). No personal information.
• Payment processor — PCI-DSS certified, handles your card or UPI transaction directly. We receive only a tokenized reference.
• Cloud infrastructure — all data is stored securely on servers located in India.
• Analytics providers — anonymized event data only. Identifiers are pseudonymized before transmission.
• Legal authorities — when compelled by valid legal process, and only to the extent required.

• All data is encrypted in transit using TLS 1.2 or higher and at rest using AES-256.
• Access to production data is role-based and audited; only the engineers and operators who need a specific record can read it.
• We run an annual third-party security audit and a quarterly internal review.
• Payment data never touches Slayble's systems — it goes directly to our PCI-DSS Level 1 payment partner.

• While your subscription is active: we keep your account, sizing, and rotation history.
• After cancellation: 18 months for service history (so a returning subscriber doesn't start from zero), and longer only where a specific Indian law requires it (e.g. tax records — 8 years under the Income Tax Act, 1961).
• You can ask us to delete your account and personal data at any time. We will, except for records the law requires us to retain — those will be redacted to the legal minimum.

Under the DPDP Act, 2023 you have the right to:

• Access the personal data we hold about you.
• Correct or update any inaccurate data — most fields are editable inside the app.
• Erase your data, subject to retention exceptions noted in section 06.
• Withdraw consent for any optional processing (e.g. analytics) without affecting core service delivery.
• Nominate a representative who can exercise these rights on your behalf in the event you're unable to.
• File a grievance with our Grievance Officer (see section 11) — we will acknowledge within 48 hours and resolve within 30 days.

• Essential. Session tokens for keeping you logged in, push-notification tokens for order updates. These cannot be turned off — without them the app cannot function.
• Analytical. Aggregated, anonymized usage data so we know which screens are confusing. You can turn this off in Settings → Privacy → Analytics.
• No advertising trackers. We do not run third-party ad networks inside the app.

You must be 18 or older to subscribe. We do not knowingly collect personal data from anyone under 18. If you believe a minor has registered with us, write to support@slayble.com and we will delete the account.

We will update this policy when our service or the law changes. Material changes — anything that meaningfully affects what we collect, how we use it, or who we share it with — will be notified inside the app and via email at least 14 days before they take effect. The “last updated” date at the top of this screen always reflects the current version.