Privacy

Xirevoa, backed by Loopwar.dev, is based at Besarda, Tiba Basai, Jhunjhunu, Rajasthan 333036, India. For anything on this page, including deletion requests and complaints, write to contact@xirevoa.com.

• Your account: your email address and username. If you sign up with a password we store only a one-way hash of it, never the password itself. If you use Google sign-in we receive your name, email and profile picture from Google.
• Images we generate for you: the try-on and haircut results you create, and whether you have shared them by link or posted them to the public feed.
• XPoints and payments: your balance and a record of every credit and debit. Payments are handled by Razorpay. We keep the order reference, amount and status, and never see or store your card, UPI or bank details.
• Abuse prevention:when a new account claims its free XPoints we store a hashed fingerprint of the device and a hashed version of the IP address, so the same device can't claim the bonus repeatedly. We never store your raw IP address for this.
• Brand accounts: for stores using our try-on button, the brand name, website, and a log of each try-on: the product page, product name, and whether the shopper went on to add it to their cart. This log does not identify the shopper.

• When you upload a photo, it is shrunk on your own device first and then sent to Google's Gemini image model, which creates the result. Google processes it under its API terms to return the image to us.
• We do not keep the photo you upload. Only the generated result is stored, on our servers in Mumbai, India.
• Generated images are private. They are not listed anywhere and can only be opened with their unguessable link.
• Nothing becomes public unless you choose to. Sharing a link and posting to the public feed are two separate choices, both off by default, and you can undo either at any time from your Looks.
• Your recent uploads appear in the Studio for convenience. They are kept in your own browser, not on our servers, and clearing your browser data removes them.
• We never sell your photos, never use them in advertising, and never use them to train our own models.
• On a store's website: when you use a “Try it on” button powered by Xirevoa, your photo is used only to create your preview. The store never sees your photo or the result.

• To run the service: sign you in, generate your images, and keep your Looks.
• To send sign-in codes and essential account emails. We don't send marketing email.
• To process payments and keep an accurate XPoints balance.
• To prevent fraud and abuse of free credits.

Only the services needed to run Xirevoa: Google (the Gemini image model, Google sign-in, and email delivery), Google Cloud (our servers, in Mumbai) and Razorpay (payments). We don't use advertising networks or third-party analytics trackers, and we don't sell personal data to anyone.

We use one essential cookie to keep you signed in. Your theme, notifications and recent photos are kept in your browser's local storage on your device. There are no tracking or advertising cookies.

We keep your account and your Looks for as long as your account is open. To delete your account, or any specific image, email contact@xirevoa.comfrom the address you signed up with. We will delete it within 30 days and confirm when it's done. Payment records may be kept longer where Indian tax and accounting law requires it.

Under India's Digital Personal Data Protection Act, 2023, you can ask us what personal data we hold about you, ask us to correct or erase it, and withdraw your consent. You can also raise a grievance with us, and if we don't resolve it, with the Data Protection Board of India. Write to contact@xirevoa.com and we will respond within 30 days.

Xirevoa is for people aged 18 and over. Please don't upload photos of children.

If we change how we handle your data, we will update this page and the date at the top. If a change is significant, we will tell you by email before it takes effect.