Privacy Policy

1. Who we are

TryStudio (“TryStudio”, “we”, “us”, or “our”) is a commerce platform that lets sellers in Bangladesh launch and run online stores — hosted on a trystudio.io subdomain or a custom domain — with built-in checkout, mobile-wallet payments, courier delivery, themes, and AI-assisted content tools. This Privacy Policy explains what personal information we collect, why we collect it, how we use and share it, and the choices and rights you have.

This policy covers our marketing website, the seller dashboard, the platform admin console, and the storefronts we host on behalf of sellers. Where a seller uses TryStudio to operate their own store, that seller is the controller of their buyers’ data and TryStudio acts as a processor on their behalf, as described in section 9.

2. Information we collect

We collect the following categories of information, depending on how you interact with us:

• Account information — when you register as a seller we collect your name, email address, mobile phone number, password (stored only as a salted hash), an optional recovery email, and your notification preferences. We verify your phone number with a one-time password (OTP) sent by SMS to reduce fraud and abuse.
• Sign-in with Google — if you choose to sign up or log in with Google, we receive your Google account identifier, name, and email address from Google to create or access your account.
• Security information — if you enable two-factor authentication we store a time-based one-time password (TOTP) secret and backup recovery codes so we can verify your logins.
• Store and content data — the products, prices, images, descriptions, theme choices, store names, subdomains, custom domains, and other content you create or upload while building and running your store.
• Billing and payment data — your subscription plan, invoices, billing events, per-delivery usage charges, credit-package purchases, and transaction records. Wallet credentials are handled by our payment providers (bKash and Nagad); we receive transaction identifiers and status, not your wallet PIN or banking credentials. Where cash on delivery (COD) is used, we process the associated order and collection details.
• Buyer and order data — when a shopper places an order on a store you host, we process the buyer’s name, delivery address, phone number, order contents, and delivery status so the order can be paid for and shipped by courier.
• Enquiry and support data — if you contact us through our contact form, chat/“Ask AI” widget, or by email, we collect your name, email, phone number, how you heard about us, your message, and your newsletter preference.
• Usage and device data — log data such as IP address, browser type, pages viewed, store performance and daily statistics, and similar technical information collected automatically when you use our services.
• Cookies and similar technologies — small files used to keep you signed in, remember preferences, and keep the service secure (see section 8).

3. How we use your information

We use personal information to operate and improve TryStudio, specifically to:

• Create and administer your account, authenticate logins, and enforce two-factor authentication and anti-abuse checks such as phone OTP verification.
• Provision and host your stores, allocate subdomains, connect custom domains, issue HTTPS certificates, and serve your storefronts to shoppers.
• Process subscriptions, invoices, per-delivery fees, and credit purchases, and take payment through bKash and Nagad.
• Route orders to couriers (Pathao and Steadfast) so purchases can be delivered, and share delivery status back to you and your buyers.
• Provide AI Studio features — such as virtual try-on, product image generation, and marketing video generation — by processing the images and prompts you submit through our AI providers, and by tracking the AI credits your account uses (see section 4).
• Respond to enquiries, provide customer support, and send you service, security, and transactional messages.
• Send marketing about features, offers, and news where you have opted in, and let you opt out at any time.
• Monitor, secure, debug, and improve the platform, and maintain audit logs for accountability and fraud prevention.
• Comply with legal obligations and enforce our Terms of Service.

4. Service providers and third parties

We share information with trusted service providers only to the extent needed to run the service. These include:

• Payment gateways — bKash and Nagad process subscription and store payments.
• Courier and logistics partners — Pathao and Steadfast receive buyer delivery details to fulfil orders.
• Cloud infrastructure and storage — we host the application and store uploaded media and files on S3-compatible object storage.
• AI providers — Google (Gemini and Veo) power our AI Studio try-on, image, and video generation features; the prompts and assets you submit to those features are processed by these providers to return a result.
• Authentication provider — Google, if you choose to sign in with Google.
• Communications providers — an SMS gateway for OTP verification and Resend for transactional and notification email.

We do not sell your personal information. We only disclose it to service providers under contract, to comply with the law, to protect our rights and the safety of our users, or in connection with a business transfer such as a merger or acquisition.

5. Legal bases for processing

Where required by applicable data-protection law, we rely on the following legal bases: performance of our contract with you (to provide the service); your consent (for marketing and certain cookies); our legitimate interests (to secure, improve, and promote the service); and compliance with legal obligations (such as tax and accounting records). You may withdraw consent at any time where processing is based on consent.

6. International transfers

Because of the nature of the internet and the cloud services we use, your information may be stored or processed on servers located outside Bangladesh, including outside the country from which you submitted it. Where we transfer personal information across borders, we take steps to ensure it remains protected consistent with this policy and applicable law.

7. Data retention

We keep personal information only for as long as necessary for the purposes described in this policy — for example, for as long as your account is active, and afterwards where we need to retain records to meet legal, tax, accounting, dispute-resolution, or fraud-prevention obligations. When information is no longer needed, we delete or anonymise it.

8. Cookies

We use cookies and similar technologies to keep you signed in, remember your preferences, secure the service, and understand how the platform is used. Strictly necessary cookies (for example, your session cookie) are required for the platform to work. You can restrict or block cookies through your browser settings; if you do, some features may not function correctly. For a general guide to cookies visit www.aboutcookies.org.

9. Sellers, buyers, and roles

When you shop on a store hosted by TryStudio, the seller who runs that store decides what information to collect and how to use it — they are the controller of your data, and their own privacy notice applies to that relationship. TryStudio processes buyer data on the seller’s behalf to provide checkout, payment, and delivery. If you are a buyer with a question about your order or your data, please contact the store you purchased from; you may also contact us using the details in section 12.

As a seller, you are responsible for handling your buyers’ personal information lawfully, for having any notices or consents your customers require, and for using the data you access through TryStudio only for legitimate order fulfilment and customer service.

10. Your rights and choices

Subject to applicable law, you may request to access, correct, update, or delete the personal information we hold about you, object to or restrict certain processing, and request a copy of your data. You can update most account details directly in your dashboard. You can opt out of marketing at any time using the unsubscribe link in our emails or your notification preferences. To exercise any right, contact us using the details below; we may need to verify your identity before acting on a request.

11. Security

We take reasonable technical and organisational measures to protect personal information, including password hashing, optional two-factor authentication, encrypted connections (HTTPS), access controls, and audit logging. No method of transmission or storage is completely secure, so we cannot guarantee absolute security; please keep your password and backup codes confidential.

12. Changes and contact

We may update this Privacy Policy from time to time. When we make material changes we will update the “Last updated” date above and, where appropriate, notify you. Your continued use of the service after an update means you accept the revised policy.

If you have any questions about this policy or how we handle your information, contact us at [email protected], or write to TryStudio, Gulshan, Dhaka 1212, Bangladesh.