Privacy Policy

1. Information we collect

• Account information. When you sign up we collect your email address and, if you use “Continue with Google”, your name and Google account email. Authentication is handled by our provider, Clerk. On the web app we also ask for a phone number, which our team uses only to contact you about your account and your use of Nitaris; we do not sell it or share it for others’ marketing.
• Content you upload. The product photos you select, the photos we retrieve from a public product listing when you give us its link, and the videos and images we generate from them. If you use virtual try-on with a photo of a person, we store that photo and the time you confirmed you have their permission to use it. If you use Clone video, we store the video you upload and the time you confirmed you have the rights to use it. These are stored on our behalf by Cloudflare R2.
• Shopify store data (merchants). If you install our Shopify app, we access your store domain and product information (titles, images) through the Shopify API so you can generate videos from your products and attach them back. We do not collect your shoppers’ personal information.
• Purchase records. When you buy credits, the payment is handled by the platform’s billing provider (Google Play on Android, Shopify on Shopify, or our web payment provider). We receive and store a purchase/charge identifier and which credit pack you bought so we can add your credits. We do not receive or store your card or bank details.
• Notification token. If you enable push notifications, we store a device push token so we can tell you when your video is ready.
• Design-partner applications. If you apply on our agencies page, we collect what you enter: your name, work email, agency name and website, your role, how many of your clients sell products online and, if you choose to give them, the other answers and a WhatsApp number. We also note the campaign link you arrived through, if any.
• Usage and diagnostics. We may collect app interaction events and crash/error diagnostics to keep the service working and improve it.

2. How we use your information

• To provide the core feature — analyzing your photos and generating videos.
• To create and secure your account and apply your credit balance.
• To process in-app purchases and prevent fraudulent or duplicate credit grants.
• To send you notifications you have opted into.
• To contact you by phone about your account, onboarding, and support.
• To reply to a design-partner application, and for nothing else.
• To monitor stability, diagnose errors, and improve the product.

3. Who we share it with

We do not sell your personal information. We share it with service providers strictly to run Nitaris, under agreements that limit them to processing it on our behalf:

• Clerk — authentication and account identity.
• Cloudflare (R2) — storage of your photos and videos.
• Anthropic — analyzes your uploaded photo to suggest video directions, and reads the images and video frames you give Clone video to plan each version.
• Google — generates videos and marketing photos (Gemini, including Veo and Nano Banana), processes in-app payments and delivers push notifications (Google Play & Firebase Cloud Messaging).
• OpenAI — generates marketing photos when one of its image models is selected to render them.
• fal.ai — runs other image and video models (for example FLUX, Seedream, Kling, Seedance, Wan and MiniMax) when one of them is selected to render a photo or a video, and every Precise edit, with any product photos you attach to it, and every Clone video, with the images you choose. Your photos are sent to it directly and are never made publicly reachable. A Clone video reference is trimmed, has its sound removed, and is shared through a private link that expires within an hour.
• Expo — relays push notifications to your device.
• Resend — sends our emails, and delivers design-partner applications to our own inbox.
• Shopify — for merchants, we exchange data with your Shopify store via its API to read products and attach generated videos.
• Neon (database) and Upstash (job queue) — hosting the backend that runs your requests.
• Product-analytics and error-monitoring providers (e.g. PostHog, Sentry), where enabled.
• Google (Analytics, Ads and Tag Manager), Meta (Facebook and Instagram ads) and LinkedIn (LinkedIn ads) — measure visits to our website and which of our ads led to a sign-up, a purchase or a design-partner application. What each receives is set out in section 4.
• Cal.com — schedules a call with us, where we offer one after a design-partner application. When the booking calendar opens on our website, it receives the name and email you applied with, so you do not have to type them again. This happens even if you do not go on to book. If you book, it also receives the details you enter on the booking form.

We may also disclose information if required by law or to protect the rights, safety, and security of Nitaris and its users.

4. Cookies and advertising measurement

Our website and web app use Google Tag Manager to load measurement tags from Google, Meta and LinkedIn. They set cookies and read basic browser information so we can count visits and see which of our ads brought someone to Nitaris. We never load them on client review links, in our admin tools or inside the Shopify app.

• What they receive. The address of the page you are on (with everything but campaign tags removed from it), the action you took (for example a sign-up, a design-partner application, or a purchase with the pack and amount), the ad click identifier in the link you arrived through, and, for sign-ups, purchases and applications, a one-way SHA-256 hash of your email address so the platform can match the action to an ad it showed you. They never receive your email address in plain text, your photos or videos, or anything you type into the app.
• From our servers. We may send the same actions to Meta and LinkedIn directly from our servers, with the hashed email, your IP address and your browser’s user agent, so a conversion is not lost to an ad blocker. We do not if you have declined. We delete the IP address and user agent we keep for this after 30 days.
• Your choice. In the European Economic Area, the United Kingdom and Switzerland, none of these cookies is set until you accept them. Elsewhere they are on by default, and you can turn them off. Either way, “Cookie settings” at the foot of every page changes your choice, which we keep in a cookie for six months. With cookies declined, Google’s tags send only cookieless measurement pings, and Meta’s and LinkedIn’s do not run.

5. Data retention

We keep your photos, generated videos, and account data for as long as your account is active. You can ask us to delete your account and associated content at any time (see “Your choices”). Some records (for example, purchase records) may be retained where required for legal, tax, or fraud-prevention purposes. A design-partner application is kept in our email for as long as we are talking with you about the programme; ask us and we will delete it.

6. Your choices and rights

• Access & deletion. Email hello@nitaris.com to request a copy of your data or deletion of your account and content.
• Notifications. Turn push notifications off in your device settings at any time.
• Advertising cookies. Accept or decline them from “Cookie settings” at the foot of any page (see section 4).
• Photos. We only retrieve and store photos of the product you choose to shoot: the photos you upload; the photos on a product listing whose link you paste; or, in the Shopify app, that product’s featured image and up to three more of its own images, so the video can show its other sides. An extra Shopify image that does not pass our content check is deleted rather than kept. We do not copy photos of any other product, or anything else from your device.

7. Security

All data is encrypted in transit using HTTPS/TLS. We restrict access to personal information to what is needed to operate the service. No method of transmission or storage is completely secure, but we take reasonable measures to protect your information.

8. Children

Nitaris is not directed to children under 13 (or the minimum age required in your country), and we do not knowingly collect their personal information.

9. Changes to this policy

We may update this policy from time to time. Material changes will be reflected by updating the “Last updated” date above.

10. Contact

Questions or requests? Contact us at hello@nitaris.com. Nitaris is operated by Nitaris Labs LLP, a limited liability partnership registered in India.