{"surface":"worker","text":"# VastraLens Scanner - Terms of Use and Privacy Notice\n\n**MiniBots Private Limited** | Version 2 | Effective [EFFECTIVE DATE - draft of 11 October 2026]\n\n## In short\n\n- This app is a work tool your shop has given you access to. Use it only to photograph and record the shop's stock.\n- Never photograph a customer, except a Real-wear photo she has clearly agreed to, and never use the app for anything personal.\n- We record your name, phone number, the scans you make and your messages to us, so that your work is credited to you and we can help you.\n- The app uses your phone's camera and, if you allow it, notifications. It does not read your location, contacts, messages or other photos.\n- If something is wrong, write to us from Settings > Contact support.\n\n## 1. These terms\n\n1.1 These terms govern your use of the VastraLens Scanner application (the \"**App**\"), provided by MiniBots Private Limited, a company incorporated under the Companies Act, 2013, having its registered office at [REGISTERED OFFICE ADDRESS] and corporate identity number [CIN] (\"**MiniBots**\", \"**we**\", \"**us**\").\n\n1.2 You are given access to the App by the retailer that employs or engages you (the \"**Retailer**\"), which has a separate agreement with MiniBots for the VastraLens service. These terms are between you and MiniBots and concern your use of the App only; they do not form part of, or alter, your employment or engagement with the Retailer.\n\n1.3 By entering a join code and using the App, you accept these terms. If you do not accept them, do not use the App and tell your manager.\n\n## 2. Your access\n\n2.1 Access is personal to you and is created by your Retailer's manager, who issues you a join code. Do not share your join code or let another person use the App as you. Every scan made from your phone is recorded against your name.\n\n2.2 Your Retailer or MiniBots may pause or end your access at any time, including when you leave the Retailer or if these terms are breached. Scans already uploaded remain the property of the Retailer.\n\n## 3. Permitted use\n\n3.1 You may use the App only to photograph, identify and record garments and other stock of the Retailer, in the manner the App guides you; to take Real-wear photographs in accordance with clause 3.3; and to contact us for help.\n\n3.2 You must not:\n\n(a) photograph any customer or any other person, or allow a person to appear identifiably in a photograph, except a Real-wear photograph taken in accordance with clause 3.3;\n\n(b) photograph anything other than the Retailer's stock, or capture images for a personal purpose;\n\n(c) copy, extract, export or share the Retailer's catalogue, prices or photographs outside the Retailer's business;\n\n(d) attempt to access any data other than your own and the Retailer's catalogue as the App presents it, or to interfere with, reverse engineer or circumvent the security of the App or the VastraLens service; or\n\n(e) use the App in breach of any law.\n\n3.3 **Real-wear photographs.** The App's Real-wear feature photographs a customer wearing a garment she is buying, to help MiniBots measure and improve how faithfully VastraLens shows garments. You may use it only if (a) the customer is an adult; (b) before the photograph, you have told her in plain words what it is for and that she may refuse, and she has clearly agreed; (c) you then confirm her agreement in the App; and (d) you take only the photograph the App asks for. You must never photograph a child, never press a customer who hesitates, and never keep, copy or share a Real-wear photograph on your own phone or elsewhere. The App sends it directly to MiniBots.\n\n## 4. Who owns what\n\n4.1 The App, its software and the VastraLens name and marks belong to MiniBots and its licensors. You receive a limited, personal, non-transferable and revocable licence to use the App for the purpose in clause 3.1 while your access lasts.\n\n4.2 Photographs and catalogue records you create in the course of your work belong to the Retailer, and are licensed to MiniBots under the Retailer's agreement so that VastraLens can show them to the Retailer's customers and improve the service.\n\n## 5. Personal data we process about you\n\n5.1 MiniBots is the Data Fiduciary, within the meaning of the Digital Personal Data Protection Act, 2023 (the \"**DPDP Act**\"), for the following personal data about you:\n\n(a) **identity and contact data** provided by your Retailer when it gave you access - your name and mobile number, your branch and your role;\n\n(b) **device and app data** - an anonymous sign-in identifier for your phone, the App version, the language you choose and, if you allow notifications, a notification token;\n\n(c) **work records** - the scans you make, with their time, branch and the garment details you enter, and the photographs of stock you capture; and\n\n(d) **support records** - the messages you send us and our replies.\n\n5.2 We use this data to operate the App, to credit scans to you and your branch, to show your Retailer's managers who scanned what, to send you work alerts (such as a re-shoot request), to answer your messages, to keep the service secure, and to improve VastraLens.\n\n5.3 We process data in clause 5.1(a) to (c) because it is necessary for the purpose for which your Retailer has engaged MiniBots and for which you use the App, and, where consent is required, on the basis of your consent given by accepting these terms. You may withdraw consent at any time by asking your manager to end your access or by writing to our Grievance Officer; we will then stop processing your data except as clause 5.6 permits.\n\n5.4 The App uses your phone's **camera** only while you are scanning, and **notifications** only if you allow them. It does not access your location, contacts, call logs, SMS, microphone, or the photographs already on your phone.\n\n5.5 Your work records are visible to your Retailer's managers and to authorised MiniBots personnel. We use service providers for cloud hosting, storage and messaging, who act only on our instructions under written contracts. We do not sell your personal data.\n\n5.6 We retain your identity and work records while your access lasts and for [WORKER RECORDS PERIOD] afterwards, as needed for the Retailer's catalogue history, billing and the resolution of disputes, after which they are erased or anonymised. Support messages are retained for [SUPPORT RECORDS PERIOD].\n\n5.7 You have the rights given by the DPDP Act: to obtain a summary of your personal data, to have it corrected or erased, to withdraw consent, to nominate a person to exercise your rights, and to have grievances redressed. Write to our Grievance Officer (clause 10) to exercise them.\n\n## 6. Updates\n\n6.1 We improve the App from time to time. Some updates are required for the App to keep working with the VastraLens service; when one is available, the App will tell you and show what has changed. We may stop supporting older versions.\n\n## 7. Availability and responsibility\n\n7.1 We take reasonable care to keep the App working, but it is provided for use in the Retailer's business and we do not promise that it will be uninterrupted or free of errors. Scans made without a connection are stored on your phone and sent when the connection returns.\n\n7.2 Nothing in these terms limits any liability that cannot be limited under the law of India. Subject to that, MiniBots is not liable to you for any indirect or consequential loss arising from your use of the App.\n\n## 8. Breach\n\n8.1 Breach of clause 3.2, in particular photographing a customer, may lead to your access being ended immediately, may be reported to your Retailer, and may expose you to liability under the DPDP Act, the Information Technology Act, 2000 and other applicable law.\n\n## 9. Changes to these terms\n\n9.1 We may revise these terms. The App will show you the revised terms, with their effective date, before they apply to you. If you continue to use the App after that date you accept them.\n\n## 10. Help, grievances and law\n\n10.1 For help with the App: Settings > Contact support in the App, telephone or WhatsApp [SUPPORT PHONE], or email [SUPPORT EMAIL].\n\n10.2 For questions about your personal data, or complaints, write to our Grievance Officer: **[GRIEVANCE OFFICER NAME]**, MiniBots Private Limited, [REGISTERED OFFICE ADDRESS]; email [GRIEVANCE OFFICER EMAIL]; phone [GRIEVANCE OFFICER PHONE]. We will acknowledge a grievance within [ACKNOWLEDGEMENT PERIOD] and resolve it within [RESOLUTION PERIOD]. If you are not satisfied, you may approach the Data Protection Board of India.\n\n10.3 These terms are governed by the law of India. Subject to clause 10.2 and to any right you have under law to approach another forum, the courts at [JURISDICTION CITY] have exclusive jurisdiction.\n","version":2,"terms":"# VastraLens Counter - Terms of Use for Account Users\n\n**MiniBots Private Limited** | Version 2 | Effective [EFFECTIVE DATE - draft of 11 October 2026]\n\nThese terms govern your use of VastraLens Counter (the \"**Panel**\"). Please read them to the end; the Panel asks you to accept them before first use, and again whenever they change. Your acceptance is recorded against the version number above.\n\n## 1. Parties and scope\n\n1.1 The Panel is provided by MiniBots Private Limited, a company incorporated under the Companies Act, 2013, having its registered office at [REGISTERED OFFICE ADDRESS] and corporate identity number [CIN] (\"**MiniBots**\", \"**we**\", \"**us**\").\n\n1.2 You are given an account by, or on behalf of, a retailer that has subscribed to the VastraLens service (the \"**Retailer**\"). The commercial terms of that subscription, including fees, service levels and the processing of the Retailer's data, are set out in the agreement between the Retailer and MiniBots (the \"**Service Agreement**\"). These terms govern how you, as an individual account user, may use the Panel. If these terms conflict with the Service Agreement on a matter between MiniBots and the Retailer, the Service Agreement prevails.\n\n1.3 By accepting these terms you confirm that you are authorised by the Retailer to use the Panel and that you will do so in accordance with these terms.\n\n## 2. Your account\n\n2.1 Your account is personal. You must keep your password confidential, must not allow anyone else to use your account, and must tell us at once through the Help page if you believe it has been compromised. Actions taken through your account are recorded and attributed to you.\n\n2.2 Your access corresponds to your role (for example, branch manager or chain owner). You must not attempt to access data or functions outside that role.\n\n2.3 The Retailer or MiniBots may suspend or end your account, including when you leave the Retailer, when the Retailer instructs us, or where we reasonably believe these terms have been breached or the security of the service is at risk.\n\n## 3. Customers and their photographs\n\n3.1 **Customer photographs are not available to you and must never be captured by you.** The Panel does not show, and you must not attempt to obtain, any photograph of a customer or any try-on picture generated from one. You must not photograph a kiosk screen while a customer is using it, or record, copy or circulate any image of a customer by any means.\n\n3.2 You must ensure that the privacy notice displayed on the VastraLens screen is visible and unobstructed, that no customer is pressed into using the screen, and that any customer who asks how her data is used is directed to that notice or to MiniBots.\n\n3.3 A customer who asks for her pictures to be deleted must be helped to do so the same day, using the code printed on her picture, through the means the Panel or MiniBots provides. You must not ask why, and must not make any service or sale conditional on the answer.\n\n3.4 Children may use the VastraLens screen only with, and in the presence of, a parent or guardian.\n\n## 4. Staff and the Scanner app\n\n4.1 When you create access for a member of staff you must enter accurate details, issue the join code only to that person, and end their access promptly when they leave.\n\n4.2 You must ensure that staff use the Scanner app only to record the Retailer's stock and, where the Retailer permits it, to take Real-wear photographs of adult customers who have clearly agreed, in the manner the app requires; and never otherwise to photograph customers or any other person.\n\n## 5. Catalogue, analytics and bills\n\n5.1 The catalogue, scan records and analytics shown in the Panel are the Retailer's confidential business information. You may use them only for the Retailer's business and must not export, disclose or publish them except as the Retailer authorises.\n\n5.2 Try-on counts and amounts shown in the Panel are calculated by MiniBots from service records. They are provided for information; the invoice issued under the Service Agreement is the authoritative statement of amounts payable. Any query should be raised through the Help page within [BILLING QUERY PERIOD] of the invoice date.\n\n## 6. The VastraLens output, and the assistant\n\n6.1 A try-on picture is a computer-generated visualisation. It is not a photograph of the garment as worn and is not a representation as to the colour, texture, fit or drape of the physical garment. You must not present it to a customer as a photograph, and must not allow it to be the only basis on which a customer decides to buy.\n\n6.2 The Panel may include an automated assistant that answers questions about the Panel and your shop's figures. Its answers are generated automatically, may be incomplete or wrong, and are not professional, legal or financial advice. Check important figures against the Panel itself. Your questions, and the figures of your shop needed to answer them, are processed by a service provider acting on our behalf to produce the answer. Do not enter personal data of customers or staff into the assistant beyond what your question needs.\n\n## 7. Acceptable use\n\n7.1 You must not:\n\n(a) share credentials, or use another person's account;\n\n(b) attempt to probe, scan, test the vulnerability of, or circumvent any security or access control of the service;\n\n(c) copy, frame, scrape, reverse engineer or create derivative works of the Panel or the VastraLens service;\n\n(d) upload unlawful, infringing or harmful material, including in logos or banners; or\n\n(e) use the Panel otherwise than for the Retailer's lawful business.\n\n7.2 Logos, banners and other material you upload must be material the Retailer is entitled to use. You grant MiniBots the licence needed to display them on the Retailer's VastraLens screens and pictures.\n\n## 8. Your personal data\n\n8.1 MiniBots processes the following personal data about you as a Data Fiduciary under the Digital Personal Data Protection Act, 2023: your name, email address, role, branch and contact details; records of your sign-ins and of the actions you take in the Panel; your language and alert preferences and any browser notification token; and the messages and tickets you send us.\n\n8.2 We use it to provide and secure your account, to keep an audit trail that the Retailer and MiniBots can rely on, to send you the alerts you have chosen, to answer your requests, and to improve the Panel. We process it because it is necessary to provide the service the Retailer has engaged us for and, where consent is required, with your consent given by accepting these terms.\n\n8.3 We retain it for as long as your account exists and for [ACCOUNT RECORDS PERIOD] afterwards, for audit and dispute resolution, after which it is erased or anonymised. We use service providers for hosting, storage and messaging under written contracts, and we do not sell personal data.\n\n8.4 You may exercise your rights under the Act - to a summary of your data, correction, erasure, withdrawal of consent, nomination and grievance redressal - by writing to our Grievance Officer (clause 11).\n\n## 9. Intellectual property\n\n9.1 The Panel, the VastraLens service, their software and the VastraLens name and marks belong to MiniBots and its licensors. Nothing in these terms transfers any of them to you or the Retailer, beyond the right to use the Panel under these terms and the Service Agreement.\n\n## 10. Liability and breach\n\n10.1 The Panel is provided as part of the service described in the Service Agreement, and MiniBots' obligations and liability towards the Retailer are governed by it. Towards you as an individual user, and subject to any liability that cannot be limited under the law of India, MiniBots is not liable for any indirect, incidental or consequential loss arising from your use of the Panel.\n\n10.2 Breach of clause 3 or clause 7 may result in immediate suspension of your account and may be notified to the Retailer. Misuse of a customer's personal data is a contravention of the Digital Personal Data Protection Act, 2023, and may also attract liability under the Information Technology Act, 2000 and other law, both for you and for the Retailer. It is not merely an internal matter.\n\n10.3 You must report at once, through the Help page or by telephone, any kiosk that shows another person's picture, produces results that appear wrong, or behaves unexpectedly, and must take it out of use until we respond.\n\n## 11. Changes, notices, grievances and law\n\n11.1 We may revise these terms. The Panel will present the revised version, with its effective date, and will ask you to accept it before you continue.\n\n11.2 Help and support: the Help page in the Panel, telephone [SUPPORT PHONE], email [SUPPORT EMAIL].\n\n11.3 Grievance Officer: **[GRIEVANCE OFFICER NAME]**, MiniBots Private Limited, [REGISTERED OFFICE ADDRESS]; email [GRIEVANCE OFFICER EMAIL]; phone [GRIEVANCE OFFICER PHONE]. We will acknowledge a grievance within [ACKNOWLEDGEMENT PERIOD] and resolve it within [RESOLUTION PERIOD].\n\n11.4 These terms are governed by the law of India. Subject to the dispute resolution provisions of the Service Agreement as between MiniBots and the Retailer, the courts at [JURISDICTION CITY] have exclusive jurisdiction over any dispute arising out of these terms.\n","updatedAt":"2026-09-01T02:41:09.804871+00:00","source":"file","kioskNote":"Your photos are kept securely by VastraLens to improve try-ons, and are never shown publicly. To delete yours, ask staff or use the code on your picture.","uploadNote":"Your photo is used to create your try-on and is kept securely by VastraLens to improve try-ons. It is never sold, never used for advertising and never shown publicly. Photos of children are never kept. The code printed on your picture is how you can ask us to delete it.","customerTerms":"# VastraLens - Privacy Notice for Shoppers\n\n**MiniBots Private Limited** | Version 2 | Effective [EFFECTIVE DATE - draft of 11 October 2026]\n\n## In short\n\n- The screen takes your photograph only to show you a garment on you.\n- Your photograph and your try-on pictures are kept securely by VastraLens and used to improve try-ons. They are never sold, never used for advertising and never shown publicly. The shop's staff cannot open them.\n- Photographs of children are never kept.\n- Every picture you take home carries a short code. Use it, or give it to any staff member, and we will delete your photograph and your try-on pictures.\n- Questions or complaints: our Grievance Officer, whose details are at the end of this notice.\n\nThe rest of this notice sets out the same matters in full.\n\n## 1. Who we are\n\n1.1 This notice is issued by MiniBots Private Limited, a company incorporated under the Companies Act, 2013, having its registered office at [REGISTERED OFFICE ADDRESS] and corporate identity number [CIN] (\"**MiniBots**\", \"**we**\", \"**us**\"). MiniBots provides the VastraLens virtual try-on service (\"**VastraLens**\") to the retailer in whose shop you are using it (the \"**Shop**\").\n\n1.2 For the purposes of the Digital Personal Data Protection Act, 2023 (the \"**DPDP Act**\") and the rules made under it, MiniBots is the Data Fiduciary in respect of the personal data described in this notice. The Shop does not determine why or how your photographs are processed and does not have access to them.\n\n## 2. The personal data we process\n\n2.1 **Your photograph.** The image of you captured by the VastraLens screen, or uploaded by you from your own phone using the code shown on the screen.\n\n2.2 **Your try-on pictures.** The images generated by VastraLens showing a garment on you.\n\n2.3 **A Real-wear photograph, only if you agree to it.** With your agreement, a member of the Shop's staff may photograph you wearing the garment you are buying, using the VastraLens Scanner app. It is sent directly to MiniBots, is not kept on the staff member's phone, and is used only for the purpose in paragraph 3.2. It is never taken of a child. You may refuse without giving a reason, and refusing does not affect your purchase.\n\n2.4 **Session details.** The time, the screen and the Shop at which the try-on took place, the garments you selected, the code printed on your pictures, and technical records needed to operate and secure the service. We do not ask for, and do not record, your name, phone number or address unless you choose to contact us.\n\n## 3. Why we process it\n\n3.1 **To provide the try-on** you requested: to show you the selected garment on you, on the screen and, if you choose, on your phone.\n\n3.2 **To improve VastraLens**, including by reviewing results and by training and evaluating the models that produce try-on pictures, so that colour, drape and fit are shown more faithfully.\n\n3.3 **To keep the service safe and lawful**, including preventing misuse, investigating faults and complying with law.\n\n3.4 We do not use your photograph to identify you, to build a profile of you, to target advertising at you, or for any purpose not stated in this notice.\n\n## 4. The basis on which we process it\n\n4.1 We process your personal data on the basis of your consent under section 6 of the DPDP Act, given by your clear affirmative act of starting a try-on after this notice has been made available to you on the screen. You may withdraw that consent at any time, as easily as you gave it, in the manner set out in paragraph 7.\n\n4.2 Withdrawal does not affect the lawfulness of processing carried out before it, but once you withdraw we will stop processing and erase your personal data as set out in paragraph 7, unless retention is required by law.\n\n[REVIEWER NOTE - delete before publication: the purposes in 3.1 and 3.2 are distinct. Section 6(1) of the DPDP Act requires consent to be specific and limited to the data necessary for the specified purpose, and a service should not be made conditional on consent to processing it does not need. Counsel should confirm whether a single action may lawfully cover both purposes, or whether a separate, optional choice for purpose 3.2 should be offered on the screen or the phone page. See legal/README.md, risk R1.]\n\n## 5. Children\n\n5.1 VastraLens is not intended to be used by a person below eighteen years of age except with, and in the presence of, a parent or lawful guardian, who gives consent on the child's behalf in accordance with section 9 of the DPDP Act.\n\n5.2 Photographs of children, and all try-ons of children's wear, are **never retained**. They are processed only to show the try-on and are erased when the session ends. We do not undertake tracking, behavioural monitoring or targeted advertising directed at children.\n\n## 6. Who can see your data, and where it is held\n\n6.1 Your photographs are held in private storage controlled by MiniBots. Access is limited to authorised MiniBots personnel who need it for the purposes in paragraph 3, under obligations of confidentiality. **The Shop and its staff cannot open, download or receive your photographs.**\n\n6.2 We engage carefully selected service providers (Data Processors) for cloud hosting, storage and the computation that generates try-on pictures. They process your data only on our instructions, under written contracts that require reasonable security safeguards, and may not use it for their own purposes.\n\n6.3 Your data may be processed on servers located outside India, in a country or territory not restricted by the Central Government under section 16 of the DPDP Act. [CONFIRM HOSTING LOCATIONS]\n\n6.4 We do not sell your personal data. We will disclose it to a public authority only where required by law.\n\n## 7. Your rights, and how to delete your pictures\n\n7.1 Under the DPDP Act you have the right to obtain a summary of the personal data we process about you; to have it corrected, completed or updated; to have it erased; to withdraw consent; to nominate another person to exercise these rights in the event of your death or incapacity; and to have your grievances redressed.\n\n7.2 **To delete your pictures**, use the short code printed on any picture you received: enter it on the share page, give it to any staff member at the Shop, or send it to our Grievance Officer. We will erase your photograph and your try-on pictures within [ERASURE PERIOD, e.g. 7] days of receiving the request, and confirm when we have done so if you have given us a way to reach you. Images that have already contributed to training a model cannot be extracted from that model, but will not be used again.\n\n7.3 We may need to verify that a request comes from the person whose pictures it concerns; the code serves that purpose.\n\n## 8. How long we keep it\n\n8.1 Unless you ask us to erase them earlier, we retain photographs and try-on pictures of adults for [RETENTION PERIOD] from the date of capture, after which they are erased or irreversibly anonymised. Session details may be retained for [RECORDS PERIOD] for accounting, security and legal purposes.\n\n8.2 Children's photographs are not retained (paragraph 5.2).\n\n## 9. Security\n\n9.1 We protect your data with reasonable security safeguards, including encryption in transit, access restricted by role and logged, and private storage that is not reachable from the public internet. Should a personal data breach occur, we will notify the Data Protection Board of India and affected persons as the DPDP Act requires.\n\n## 10. Grievances\n\n10.1 Questions, requests and complaints may be addressed to our Grievance Officer:\n\n**[GRIEVANCE OFFICER NAME]**, Grievance Officer, MiniBots Private Limited\n[REGISTERED OFFICE ADDRESS]\nEmail: [GRIEVANCE OFFICER EMAIL] | Phone: [GRIEVANCE OFFICER PHONE]\n\n10.2 We will acknowledge your grievance within [ACKNOWLEDGEMENT PERIOD, e.g. 48 hours] and resolve it within [RESOLUTION PERIOD, e.g. 30 days]. If you are not satisfied with our response, you may complain to the Data Protection Board of India once you have exhausted this remedy, as provided in section 13 of the DPDP Act.\n\n## 11. Changes to this notice\n\n11.1 We will publish any revised version of this notice on the VastraLens screen and the share page, with its effective date. Material changes will not apply to pictures taken before they take effect without your fresh consent.\n"}