Privacy Policy
Last updated 16 October 2026
This policy explains what Bestry ("Bestry", "we") collects when boutique owners use Bestry and when their customers try on jewellery through a Bestry link, why we collect it, and the choices you have. We handle personal data in line with India's Digital Personal Data Protection Act, 2023, and — for people in the European Union, the United Kingdom and similar jurisdictions — the GDPR and UK GDPR.
Your camera stays on your device
Live try-on uses your phone or computer camera. Face and hand tracking run entirely on your own device. The camera video is never uploaded to Bestry or anyone else. A photo is created only if you choose to capture one, and it is shared only if you choose to share it.
What we collect from boutique owners
- Google account details you sign in with: name, email address and profile picture. We never see your Google password.
- Boutique details: boutique name, tagline, WhatsApp number (confirmed with a one-time code), and optionally city, state and PIN code.
- Products and images you upload: names, prices, SKUs, categories, photos and banners.
- Optional verification: your legal name and a photo of an ID (Aadhaar, PAN, Voter ID or Passport). This is stored privately, never shown on your store, and visible only to authorised Bestry staff.
- Plan and payment records (plan, amount, dates, invoice numbers). Card and UPI details are handled by our payment processor and are not stored by us.
- Which marketing link or site brought you to Bestry, so we can tell which channels work.
What we collect from shoppers
Shoppers do not need an account. When you open a boutique's link we record anonymous activity — such as which designs were viewed, tried on, liked, photographed, shared or asked about — against a random ID stored on your device. It contains no name, phone number or camera footage, and it is used to give the boutique its analytics.
If you tap “Get offers”, you may give your WhatsApp number (and optionally your name) and tick a consent box. We send a one-time code to confirm the number is yours. Once confirmed, the number is stored and shown to that boutique so it can contact you about new designs and offers. You can ask to be removed at any time.
Your favourites and recently viewed items are kept in your browser's local storage on your device.
How we use data
- To run Bestry: sign you in, show boutique storefronts, review new stores and products, and deliver Studio work.
- To give boutiques analytics about how shoppers use their link.
- To send account emails: welcome, store approval, plan and payment receipts, renewal reminders and important service notices.
- To keep Bestry secure, prevent abuse and fix errors.
- To understand which marketing channels lead to sign-ups.
We do not sell personal data.
Who we share data with
We use trusted service providers to operate Bestry, each only for the purpose described:
- Vercel — hosting, file storage and cookieless web analytics.
- Neon — our database.
- Google — sign-in.
- Resend — transactional email.
- MSG91 — one-time verification codes.
- Razorpay — payments by sellers in India.
- Paddle — payments by sellers outside India. Paddle is the reseller and merchant of record for those orders and processes billing details under its own privacy policy.
- Cloudflare — a bot check on the WhatsApp opt-in, where enabled.
- Sentry — error monitoring.
A shopper's WhatsApp opt-in is shared with the boutique they chose to opt in to. We may also disclose information where required by law.
Cookies and local storage
We use a sign-in cookie for boutique owners, a short-lived cookie during sign-in, and a cookie that records which link first brought a visitor to Bestry (kept for up to 90 days). Shoppers' favourites, history and an anonymous device ID live in local storage. Our web analytics are cookieless. If you are in the EU, EEA, UK or Switzerland, the attribution cookie is only set if you choose “Allow” in the cookie banner.
How long we keep data
We keep account and store data while your account is active. If you ask us to delete your account, we remove your personal data, store and products, except records we must retain by law (for example payment and invoice records). Anonymous activity counts may be kept in aggregate.
Your rights
You can ask to access, correct or erase your personal data, withdraw consent (for example to WhatsApp offers), or nominate someone to act for you, and you can raise a grievance. Contact us using the details below and we will respond within a reasonable time.
If you're outside India (GDPR / UK GDPR)
Our legal bases for using personal data are:
- Contract — to provide a seller's account, store, plan and Studio service.
- Consent — a shopper's WhatsApp offers opt-in, and the marketing-attribution cookie for visitors in the EU/EEA/UK/Switzerland. You can withdraw consent at any time.
- Legitimate interests — keeping Bestry secure, preventing abuse and producing anonymous usage counts, balanced against your rights.
- Legal obligation — keeping payment and tax records.
You have the right to access, correct, erase, restrict or object to our use of your data, to data portability, and to complain to your local data protection authority. Bestry's service providers store data in India, the United States and other countries; where the law requires it, transfers are protected by standard contractual clauses or equivalent safeguards.
Children
Bestry is for businesses and is not directed at children under 18. Shoppers under 18 should use it with a parent or guardian.
Contact & grievance redressal
Bestry
WhatsApp: +918122382993
Changes to this policy
We may update this policy as Bestry changes. The date at the top shows when it last changed; material changes will be flagged to account holders.