Trove Privacy Policy

Effective Date: September 29, 2026
Last Updated: September 29, 2026

This Privacy Policy explains how Trove ("Trove," "we," "us," or "our") collects, uses, discloses, stores, and protects personal information when you use Trove's websites, applications, ChatGPT integration, AI-powered wardrobe and styling features, virtual try-on features, and related services (collectively, the "Services").

Trove is designed for users in the United States. By using the Services, you acknowledge the practices described in this Privacy Policy.

1. Scope

This Privacy Policy applies to personal information that Trove processes through the Services, including information received through Trove's ChatGPT integration or other interfaces that connect to Trove.

This Privacy Policy does not govern the privacy practices of third-party services that you access separately, including OpenAI/ChatGPT, Waffo Pancake, merchants, retailers, or other third-party websites and services. Those third parties process information under their own privacy policies and terms.

2. Information We Collect

We collect information in the following categories.

2.1 Account and Contact Information

We may collect:

• Email address;
• Name, display name, or username, if provided;
• Account identifiers;
• Authentication and login information; and
• Communications you send to Trove, including customer-support requests.

2.2 User Content and Wardrobe Information

When you use wardrobe, styling, recommendation, or image features, we may collect or process:

• Photos of clothing items;
• Wardrobe images;
• E-commerce screenshots or product images;
• Clothing descriptions and clothing attributes;
• Outfit selections, saved looks, favorites, likes, dislikes, and feedback;
• Style preferences, color preferences, fit preferences, occasion preferences, and similar personalization information;
• Text or other inputs you intentionally provide to request recommendations or other features; and
• AI-generated images and other outputs that you choose to save to your account.

2.3 Photos and Appearance-Related Information

If you use features that require a photo of yourself, including virtual try-on or profile-related features, we may collect and store:

• Full-body photos;
• Other photos you upload of yourself;
• Clothing size information;
• Height, body measurements, and measurements such as bust/chest, waist, and hips; and
• Appearance- or fit-related information that you provide or that is derived for the purpose of delivering the requested feature.

Trove uses this information to provide styling, fit-related, personalization, and virtual try-on features. When the wearer-affinity recommendation feature is used, Trove may also create an image embedding from your photo and use it to retrieve clothing recommendations suited to the pictured wearer. This is recommendation retrieval, not identification: Trove does not use this photo-embedding process for facial recognition, identity verification, or biometric identification.

2.4 Information Received Through ChatGPT

If you use Trove through ChatGPT, Trove receives only the information that is transmitted to Trove through the relevant Trove tool or integration request and that is needed to perform the requested function.

Trove does not receive or store your entire ChatGPT conversation merely because you use Trove. Your broader conversation with ChatGPT is handled by OpenAI under OpenAI's own terms and privacy practices.

2.5 Payment and Subscription Information

Paid subscriptions are processed through Waffo Pancake. We may receive and store information such as:

• Subscription plan;
• Subscription status;
• Billing cycle;
• Waffo order and transaction identifiers;
• Current billing-period dates; and
• Payment status.

Trove does not directly store full payment-card numbers. Payment-card information is processed by Waffo Pancake under its own privacy practices.

2.6 Device, Log, and Technical Information

When you use the Services, we or our infrastructure providers may automatically collect technical information such as:

• IP address;
• Browser type;
• Device type;
• Operating system;
• App or service version;
• Request timestamps;
• Error and diagnostic logs;
• Security and authentication events; and
• Basic usage information necessary to operate, secure, and troubleshoot the Services.

3. How We Use Personal Information

We may use personal information to:

• Create, maintain, and secure user accounts;
• Build and maintain a user's digital wardrobe;
• Identify and describe clothing items;
• Provide outfit and styling recommendations;
• Personalize recommendations based on wardrobe information, style preferences, sizing, body measurements, feedback, and prior interactions with Trove;
• Provide virtual try-on and related image-generation features;
• Save user-selected content, outfits, wardrobe items, and generated results;
• Provide and manage Free and Premium plans;
• Process subscription status and billing through Waffo Pancake;
• Respond to support inquiries;
• Operate, maintain, debug, and improve the reliability and usability of the Services;
• Detect abuse, fraud, security incidents, or violations of our Terms of Service;
• Comply with legal obligations and enforce our agreements; and
• Protect the rights, safety, and security of users, Trove, and others.

4. Artificial Intelligence and Automated Processing

Trove uses artificial intelligence and machine-learning technologies to provide features such as:

• Clothing recognition and classification;
• Clothing-image and clothing-description embeddings;
• Outfit recommendations;
• Personalization;
• Image understanding;
• Virtual try-on; and
• AI-generated styling or visual outputs.

Depending on the feature and deployment configuration, the current implementation uses OpenAI GPT-5.6 Luna (gpt-5.6-luna), GPT-5.6 Terra (gpt-5.6-terra), GPT Image 2 (gpt-image-2), and text-embedding-3-small (text-embedding-3-small, as a text-embedding fallback); and Jina Embeddings v5 Omni Small (jina-embeddings-v5-omni-small) and Jina Reranker M0 (jina-reranker-m0). These models support image understanding, styling, recommendation retrieval and ranking, image generation/editing, and text embeddings, depending on the requested feature. Model selection may vary by deployment configuration.

AI-generated results may be inaccurate, incomplete, or inconsistent. Virtual try-on and fit-related outputs are visual or computational estimates and should not be treated as guarantees of real-world fit, sizing, color, texture, proportions, or appearance.

No General-Purpose AI Training on Your Data

Trove does not use your personal information, private photos, body measurements, wardrobe content, or other User Content to train generalized AI models.

We may process your information as necessary to provide the requested feature, personalize your experience, operate the Services, or generate a requested output. That processing is different from using your data to train a generalized AI model.

5. How We Disclose Personal Information

We may disclose personal information to service providers that help us operate the Services. We disclose only information reasonably necessary for the relevant service.

5.1 OpenAI

We may use OpenAI services to provide AI-powered functionality, including language, image-understanding, recommendation-support, or image-generation features. The current implementation may use GPT-5.6 Luna (gpt-5.6-luna) for styling, text, and image-understanding tasks; GPT-5.6 Terra (gpt-5.6-terra) for blueprint generation; GPT Image 2 (gpt-image-2) for image generation and editing; and text-embedding-3-small (text-embedding-3-small) as a text-embedding fallback. Information sent to OpenAI depends on the feature you request and may include user-provided photos for image-understanding, image-generation, or virtual try-on features.

Trove's use of OpenAI services is separate from your direct use of ChatGPT. When you use ChatGPT itself, OpenAI independently processes your ChatGPT activity under its own terms and privacy practices.

5.2 Supabase

We use Supabase for backend infrastructure, database, authentication, storage, or related services. Information stored through Supabase may include account information, wardrobe information, saved content, photos, measurements, preferences, and application data, depending on how you use Trove.

5.3 Vercel

We use Vercel for hosting, deployment, networking, or related infrastructure. Vercel may process technical request information, IP addresses, logs, and other information necessary to deliver and secure the Services.

5.4 Waffo Pancake

We use Waffo Pancake to process paid subscriptions and payments. Waffo Pancake processes payment credentials and related billing information under its own privacy practices. Trove receives and stores limited subscription details, such as your plan, subscription status, billing period, and Waffo order identifiers, so we can manage your subscription and confirm payment status.

5.5 Jina AI / Elastic

We may use Jina AI technologies, now part of Elastic, for embedding and retrieval-related functionality, including Jina Embeddings v5 Omni Small (jina-embeddings-v5-omni-small) and Jina Reranker M0 (jina-reranker-m0).

Trove may send clothing descriptions and clothing images to Jina AI / Elastic for product embedding and retrieval. When the wearer-affinity image-retrieval feature is enabled, Trove may also send a photo you uploaded of yourself to Jina AI / Elastic to create an image embedding used to retrieve clothing recommendations suited to the pictured wearer. The image-embedding request does not include your body measurements. Trove uses this image embedding for recommendation retrieval, not for facial recognition, identity verification, or biometric identification. Trove does not use the photo or embedding to train generalized AI models.

5.6 Legal, Safety, and Corporate Events

We may disclose information if we reasonably believe disclosure is necessary to:

• Comply with applicable law, regulation, legal process, or valid governmental request;
• Protect the security or integrity of the Services;
• Investigate fraud, abuse, or security incidents;
• Enforce our agreements or protect legal rights; or
• Protect the rights, property, or safety of Trove, our users, or others.

If Trove is involved in a merger, acquisition, financing, reorganization, bankruptcy, sale of assets, or similar transaction, information may be transferred as part of that transaction, subject to applicable law.

6. We Do Not Sell Personal Information

As of the Effective Date:

• Trove does not sell personal information for money;
• Trove does not sell personal information as that term is defined by applicable U.S. state privacy laws; and
• Trove does not share personal information for cross-context behavioral advertising as that term is defined by the California Consumer Privacy Act.

Trove currently does not use Meta Pixel, TikTok Pixel, Google Ads remarketing, or similar third-party advertising pixels for cross-context behavioral advertising.

If our practices materially change, we will update this Privacy Policy and provide any legally required choices or opt-out mechanisms.

7. Cookies and Similar Technologies

Trove may use cookies, local storage, session technologies, and similar technologies that are necessary to:

• Keep users signed in;
• Maintain security;
• Remember settings;
• Route traffic;
• Maintain sessions; and
• Operate core website or application functionality.

As of the Effective Date, Trove has not deployed third-party advertising pixels or behavioral-advertising trackers. If analytics or advertising technologies are added in the future, we will update our disclosures and implement consent or opt-out controls where required by law.

8. Affiliate Links and Third-Party Merchants

Trove may recommend clothing or other products offered by third-party merchants. Some links may be affiliate links, which means Trove may receive a commission when a user clicks a link or completes a qualifying purchase.

When you leave Trove and interact with a merchant or retailer, that third party may collect information directly from you under its own privacy policy. Trove does not control a merchant's data practices.

Unless specifically disclosed at the time of interaction, Trove does not provide a merchant with your private body photos, body measurements, or private wardrobe content merely because you click an affiliate or product link.

9. Data Retention

We retain personal information for as long as reasonably necessary to provide the Services, maintain your account, meet legal obligations, resolve disputes, enforce agreements, and protect the Services.

Our general retention approach is:

Account Deletion

When you delete your Trove account, Trove will delete or de-identify personal information and User Content associated with the account from active systems within 30 days, except information that we must retain for legal, accounting, fraud-prevention, security, dispute-resolution, or other lawful purposes.

Residual copies may remain temporarily in encrypted backups or disaster-recovery systems until those backups are overwritten in the ordinary course. Such backup data is not used for ordinary business purposes.

10. Your Privacy Rights

Depending on where you live and which privacy laws apply to Trove, you may have rights regarding your personal information, including the right to:

• Request access to personal information we maintain about you;
• Request correction of inaccurate personal information;
• Request deletion of personal information;
• Request a portable copy of certain personal information;
• Request information about categories of personal information collected, used, or disclosed;
• Opt out of certain sales, sharing, targeted advertising, or profiling where applicable;
• Limit certain uses of sensitive personal information where applicable;
• Appeal certain privacy-request decisions where applicable; and
• Exercise privacy rights without unlawful discrimination or retaliation.

Because Trove does not currently sell personal information or share it for cross-context behavioral advertising, there is currently no sale/sharing opt-out necessary for those practices.

How to Submit a Request

You may submit a privacy request by emailing:

support@trovefinds.my

Please use a subject line such as "Privacy Request" and describe the request you want to make.

We may need to verify your identity before completing certain requests. We will use information provided in connection with the request only as reasonably necessary to verify and fulfill the request.

Where permitted by law, an authorized agent may submit a request on your behalf. We may ask for evidence of the agent's authority and may separately verify your identity.

11. California Privacy Notice

This section applies to California residents to the extent the California Consumer Privacy Act, as amended (CCPA), applies to Trove.

Categories of Personal Information

During the preceding 12 months, Trove may have collected the following categories of personal information, depending on a user's use of the Services:

• Identifiers, such as email address, account identifiers, and IP address;
• Customer-record information, such as account and subscription information;
• Commercial information, such as subscription status and interactions with recommended products;
• Internet or electronic network activity, such as device, log, and service-usage information;
• Visual information, including clothing photos and user-uploaded photos;
• Inferences and preference information used for styling and personalization;
• Body measurements, sizing information, and other information a user chooses to provide for fit or personalization features; and
• Other information a user intentionally provides to Trove.

We collect these categories from users directly, from their interactions with the Services, from connected interfaces such as Trove's ChatGPT integration, and from service providers that support the Services.

We use and disclose these categories for the purposes described in Sections 3 and 5 of this Privacy Policy.

Sale and Sharing

Trove does not currently sell personal information or share personal information for cross-context behavioral advertising.

California Rights

If the CCPA applies, eligible California residents may have rights to know, access, correct, delete, and obtain information regarding certain uses and disclosures of personal information, as well as rights relating to sale, sharing, and certain uses of sensitive personal information.

You may exercise applicable rights by contacting support@trovefinds.my.

12. Other U.S. State Privacy Rights

Residents of certain U.S. states may have additional privacy rights under applicable state law. These may include rights to access, correct, delete, obtain a copy of personal information, opt out of certain processing, or appeal a decision regarding a privacy request.

Trove will honor applicable rights where required by law.

13. Security

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information against unauthorized access, loss, misuse, alteration, or disclosure.

However, no method of electronic transmission, storage, or security is completely secure, and we cannot guarantee absolute security.

Users are responsible for maintaining the confidentiality of their account credentials and for notifying us if they believe their account has been compromised.

14. International Processing and Transfers

Although Trove is designed for users in the United States, Trove, its operator, team members, infrastructure providers, and service providers may process information in the United States and other countries.

Those countries may have privacy and data-protection laws that differ from the laws where you live. Where required, we take reasonable steps to use appropriate safeguards for cross-border processing.

15. Children and Teenagers

Trove is intended only for individuals who are 18 years of age or older.

We do not knowingly permit users under 18 to create or maintain a Trove account. If we learn that we have collected personal information from a person under 18 in violation of this requirement, we will take reasonable steps to delete the information.

If you believe a person under 18 has provided personal information to Trove, contact support@trovefinds.my.

16. Changes to This Privacy Policy

We may update this Privacy Policy as our Services, technology, business practices, or legal obligations change.

If we make material changes, we will provide notice as required by applicable law, such as by updating the Effective Date, posting a notice in the Services, or sending an account or email notification where appropriate.

17. Contact Us

For privacy questions, requests, or concerns, contact:

Trove
Email: support@trovefinds.my