DATA INTEGRITY

Privacy Policy

Last Updated: May 2026 · Norch Studio Vol. I

1. Information We Collect

We collect information you provide directly to us when creating a studio account, subscribing to plan tiers, or uploading apparel images. This includes your name, business email, billing details, and any garment photography uploaded. We also automatically gather device logs, active usage metrics, and IP addresses to maintain studio performance and restrict credit misuse.

2. How We Process Data & Generative Models

Garment flat lays and model images are processed securely using OpenRouter API endpoints and purpose-built try-on pipelines. Uploaded garment graphics are cached temporarily to enable high-quality campaign compilation. Your private apparel catalog images are never sold, rented, or distributed to third-party advertisers, and are only processed to fulfill your campaign rendering requests.

3. Third-Party Data Integrations

Norch integrates with secure hosting providers (Supabase Storage), billing engines (Flutterwave), and caching providers (Upstash Redis). These processors only receive the minimum data required to execute their specific functions (e.g. processing subscription charges, storing signed campaign URLs, or executing model try-on completions).

4. Storage & Asset Protection

All campaign images are stored securely in Supabase storage buckets, backed by service-role authentication gates. We implement industry-standard secure socket layers (SSL) and JWT-based authentication. Unwatermarked original campaign files are accessible exclusively by your authorized workspace profile.

5. Your Rights & Choice

You retain full control over your creative assets and account settings. You may request the permanent deletion of your profile data, uploaded garments, and campaign generation logs at any time. To request asset cleanup or profile termination, you can contact our privacy desk directly.