Privacy Policy

Last updated: September 7, 2026

StashIt is operated by Larya Studios Private Limited ("StashIt", "we", "us"). This policy explains what information we collect when you use the StashIt apps for iPhone and Android, their share extensions, and stashitai.com (together, the "Service"), how we use it, who we share it with, and the choices you have. Contact us any time at [email protected].

At a glance

• We collect your name and email when you sign in with Apple or Google, the social-media links you choose to share with us, and basic device data.
• We use AI to analyze the content you share so we can identify products in it. We never keep the raw video — only a thumbnail, the caption, and processing metadata.
• We do not sell your personal information, and we do not use it to train third-party AI models.
• There are no advertising SDKs and no cross-app tracking in the apps. We do use product analytics and crash reporting inside them, and on iPhone we record in-app session replays to find where the app is confusing or broken — see section 1.
• You can delete your account and all of your data at any time, in the app or by email.

1. Information we collect

Account information. When you sign in with Apple or Google, we receive your name and email address from that provider, and we create a profile for you (name, optional photo). We never see your Apple or Google password.

Content you share. When you share an Instagram, TikTok, or YouTube link with StashIt, we collect that link and retrieve the public content it points to so we can analyze it. From each share we keep: the link, the caption, a thumbnail image, and metadata about how our systems processed it. We do not keep the raw video.

Saves and activity. Products you save to your Vault, your import history, scan results, product feedback you submit, and which product links you open.

Device and log data. A device identifier — on iPhone, Apple's per-app "identifier for vendor"; on Android, a hashed value derived from the device's Android ID — your push-notification token if you enable notifications (Apple's or Google's push service, depending on your device), IP address, and basic diagnostic logs. The device identifier is also used to apply fair-use limits. Neither identifier is an advertising identifier.

Delivery location. The country and city you set (or allow us to detect) so we can show relevant prices and delivery options. We do not track your precise GPS location or your movements.

Camera and photos. Only when you actively choose to scan a photo or take a picture. Images you submit are processed to identify products; we do not browse your photo library.

Purchases. Your subscription status, managed by our subscription-management provider together with the app store you bought through. Payment is handled entirely by Apple (App Store) or Google (Google Play) — we never see your card details.

Analytics, diagnostics and session replay. We use a product-analytics provider inside the apps and on stashitai.com to understand which features are used and where people get stuck, and an error-reporting provider to capture crashes and diagnostic traces. On iPhone, the main app also records session replays — a reconstruction of what happened on screen during your session in the app — which we use only to find where the app is confusing or broken. The Android app does not record session replays. None of this is advertising: the apps contain no advertising SDKs, do not use Apple's advertising identifier (IDFA) or the Android advertising ID, and do not track you across other apps or websites.

2. How we use your information

• To provide the Service: we use automated systems and artificial intelligence to analyze the content you share in order to identify the products in it, find matching offers and prices, and save results to your Vault.
• To improve StashIt: we review how well our product identification works (including using past scans to measure and improve accuracy). This stays inside StashIt — we do not use your content to train third-party AI models.
• To run your account: sign-in, subscriptions, support, and service emails.
• To send notifications you've enabled, such as when a scan finishes.
• To keep the Service safe: preventing abuse, enforcing fair-use limits, and debugging.
• To comply with law and enforce our Terms of Use.

3. AI and automated decision-making

Product identification is performed by automated AI systems. Results can be wrong or incomplete — they are suggestions, not guarantees, and you should verify product details with the merchant before buying. We do not make decisions about you that produce legal or similarly significant effects solely by automated means.

4. Who we share information with

We share personal information only with the categories of service providers that help us run StashIt, each only to the extent needed for their job:

• Cloud hosting and infrastructure providers — host the Service, process requests, and store your data and images.
• Database and authentication providers — store your account and saved data and power sign-in.
• Content-retrieval providers — fetch the public social-media content behind the links you share.
• AI and machine-learning providers — receive the content you share solely to identify the products in it.
• Product-search providers — receive product descriptions (not your identity) to find matching offers and prices.
• Payment and subscription providers, including Apple and Google — manage subscriptions and process payments. We never receive your card details.
• Communication providers — send our service emails.
• Analytics and error-reporting providers — measure feature usage and capture crashes across the apps and stashitai.com, and receive iPhone session replays as described in section 1.

We also share information when you ask us to (for example, opening a merchant's site), if required by law or legal process, to protect StashIt or its users, or as part of a business transfer (in which case this policy continues to apply). We do not sell your personal information, and we do not share it with data brokers or advertising networks. You may request the identities of the specific providers we currently use by emailing [email protected].

5. Affiliate links and click tracking

Some product links in StashIt may in future be affiliate links, meaning we may earn a commission when you use them. Where that applies, the click may be tracked by the affiliate network for commission attribution. This does not change the price you pay.

6. Cookies and analytics

stashitai.com uses analytics to measure aggregate visits and page performance. The apps do not use cookies, advertising identifiers (Apple's IDFA or the Android advertising ID), or cross-app tracking. For what the apps do collect for analytics, diagnostics and session replay, see section 1.

7. Where your data is processed (international transfers)

StashIt is operated from India, and our service providers process data in the United States, Europe, and other regions. Where required (for example, for users in the EEA, the UK, or Switzerland), transfers are protected by recognized safeguards such as the EU Standard Contractual Clauses or adequacy decisions. For users in the EEA/UK, our legal bases are: performance of our contract with you (providing the Service), our legitimate interests (improving and securing the Service), your consent (where we ask for it, e.g., notifications and location), and legal obligations.

8. Your rights

You can access, correct, download, or delete your personal information, object to or restrict certain processing, and withdraw consent at any time. To exercise any right, email [email protected] — we respond within 45 days.

• EEA / UK: you additionally have the rights to data portability and to lodge a complaint with your local supervisory authority.
• California: you have the rights to know, delete, and correct, and to opt out of "sale" or "sharing" of personal information — though we do not sell or share personal information as the CCPA/CPRA defines those terms. We will never discriminate against you for exercising your rights.
• India: under the Digital Personal Data Protection Act, 2023, you have the rights to access, correction and erasure, grievance redressal, and to nominate someone to exercise your rights.
• Everywhere else: we honor the same access, correction, and deletion requests for all users regardless of where you live.

9. How long we keep information

• Raw video from shared links: never stored. We process it and keep only a thumbnail, caption, and processing metadata.
• Account, Vault, and scan data: for as long as your account exists.
• Merchant offers and prices: expire automatically and are refreshed; stale snapshots are not kept indefinitely as live data.
• Logs and backups: short rolling windows, then deleted automatically.
• Analytics, diagnostics and session replays: held by our analytics and error-reporting providers for a limited retention period configured with those providers, then deleted automatically.
• After account deletion: all of the above is deleted within 30 days, except minimal records we must keep by law (e.g., payment records).

10. Deleting your account

You can delete your account in the app (Account → Delete Account) or by emailing [email protected] from your account email; our account deletion page sets out both routes in full. Deletion removes your profile, scans, Vault, history, feedback, and uploaded images, and is completed within 30 days. It cannot be undone.

11. Children

StashIt is not directed to children under 13 (or the higher minimum age that applies where you live), and we do not knowingly collect their data. If you believe a child has created an account, contact us and we will delete it promptly.

12. Security

Data is encrypted in transit, access is restricted, and we use reputable infrastructure providers. No service can guarantee perfect security, but if a breach affects you we will notify you as required by law.

13. Changes to this policy

We'll update this page when our practices change and revise the date at the top. For material changes we'll give you notice in the app or by email before they take effect.

14. Contact & grievances

Larya Studios Private Limited (operator)
Aryan Bhambhani (Grievance Officer, per India's Information Technology rules)
Email: [email protected]