Privacy policy

Torbilo (“we”) makes studio photographs of clothing and accessories on a model, from product photos you provide. This policy explains what we collect, why, and the choices you have, on the website torbilo.com and in the Torbilo app.

Torbilo was called Aaina until November 2026. This policy also covers app.aaina.world and the Aaina apps for Shopify, Canva and ChatGPT.

• Account details: your name, email address and password (stored only as a secure hash), or the email your Google or Apple account shares if you sign in with Google or Apple.
• Your content: product photos you upload, product details you enter, and the images we create for you.
• Usage: actions such as creating a shoot or downloading images, credit balance and history, errors, approximate time of use, and whether you used the website, the iPhone or Android app or ChatGPT (and the app version), so we can run the service, prevent abuse and improve it.
• Visit counts: when you open a page on the website or open the app, we count the visit without cookies: which page (without anything after the address), the site or link that brought you there, your country (from our network provider) and the kind of device (phone, tablet or computer). Your IP address and browser details are used only to make a code that changes every day, so a visit is counted once per day; they are never stored, and the daily key behind the code is worked out from a server secret and not kept. A visit is not linked to your account: we note only whether the visitor was signed in, and we can't follow anyone from one day to the next. We keep visit counts for 180 days, and we don't count visits when your browser asks sites not to track you.
• Feedback and sharing: likes or dislikes you give images, and replies from people you share a review link with.
• Brands: if you start or join a brand, your place in it (the brand, your role, when you joined and any monthly photo limit set for you), and who made each photo and shoot there.
• Invitations: when someone invites you to a brand, the email address they entered, the role offered, who invited you, when, and whether you joined. We use the address only to send the invitation and one reminder, and to check that the person joining is the one invited. Only a fingerprint of the invitation link is kept, and the address on an invitation nobody answers is erased 30 days after it ends.
• Brand activity: inside a brand we keep a record of who did what to its people, plan, OpenAI key and settings, and when, for 12 months.
• Brand plans: the plan, seats, status and billing dates. If a brand connects its OpenAI account, its key, kept encrypted, with its last 4 characters, who added it and when.
• Device details: if you turn on notifications, a notification token for your device.
• Purchases: if you buy credits or a monthly plan on the website, Dodo Payments processes the payment as the seller of record; in the app, Apple or Google does. We receive a record of what was bought (pack, price, country, payment status), not your card or UPI details.

We do not sell your personal information, and we do not use your photos to advertise.

• To create the images you ask for, and to show, store and let you download them.
• To run your account: sign-in, credits, invites, notifications and support.
• To keep the service safe and working, and to understand how it is used so we can improve it.

To create and store images we send the necessary data to trusted providers, who process it only to provide their service to us:

• OpenAI, directly or through OpenRouter (image creation, reference sheets for your own models, reading product photos and writing listing text)
• fal.ai (some product images, pose and scene images, product videos, cut-outs for white backgrounds, and sharpening downloads)
• BytePlus, part of ByteDance (photo edits such as other colours, and Try on me pictures made from your own photos)
• Cloudflare (image storage), Aiven (database), Hetzner (servers)
• Our email provider (account and notification emails), Google (if you use Google sign-in)
• Dodo Payments (website payments, invoices and taxes)
• Apple, Google and RevenueCat (in-app purchases, and Sign in with Apple)
• Expo (delivering phone notifications from the app)
• Sentry (app crash reports, without your photos)

Some of these providers are located outside your country, including in the United States and the European Union.

A brand on the Brand plan connects its own OpenAI account. The work it sets to run on that account, including the photos and words it needs, is sent to the brand’s own OpenAI account, not ours, and OpenAI handles it under the brand’s own agreement with OpenAI. We keep the brand’s key encrypted, never show it again in full, and remove it when the brand leaves the Brand plan. Work the brand sets to use credits instead is handled by our providers listed above.

Your photos and images are private to your account. They are seen by others only when you choose to share them, for example with a review link, or by sharing a pose or scene with the community (which our team reviews first).

With Try on me you can add photos of yourself to see your products on you. Only you can see those photos and the pictures made from them: they are never shown to other people, used in suggestions or the community, or used for anything else. To make a try-on, your photo and the product photo are sent to our image provider (BytePlus), which processes them only to make that picture for us. Your photos stay with us until you delete them (any time, in Try on me) or delete your account.

Photos for your own model. If you create a model from a real person’s photos or reference sheet, we keep those photos and the model’s reference sheet privately in your account, only to make photos of that model for you. Only your account can use them. They stay until you delete the model (any time, in Library → Models) or delete your account. Our AI providers receive the photos only to make the reference sheet and your photos (OpenAI for the reference sheet and product photos). Your own models, their sheets and the photos you uploaded are included in your data export.

• What is made or uploaded in a brand is shared with the people in it, according to their role. The Owner and Admins also see each member’s name, email address, role, photos made this month and when they were last active, the brand’s activity record, and its credits and spending. Creators see prices only if the Owner or an Admin shows them. Reviewers see the brand’s work.
• A brand can’t see your own studio, your photos of yourself (Try on me and “Me” photos are never used in a brand), your other brands or your account settings.
• An invitation page shows the brand’s name and logo and who sent it. The invited address is partly hidden unless you are signed in with it.
• When you leave or are removed from a brand, what you made there stays with the brand and its people.
• Your data export includes your places in brands, the invitations you sent or received, what you did in brands, and the OpenAI keys you added (never the key itself). A brand’s photos and products belong to the brand and are not part of your own export.
• When you delete your account you leave every brand. What you made there stays with the brand, and your name and email address are taken out of its activity record and invitations.

You can use Aaina inside ChatGPT after you connect your Aaina account (you sign in to Aaina and press Allow). When you ask ChatGPT to use Aaina, ChatGPT sends us only what that request needs: the product photos you share with Aaina and the choices you name (for example a model or a scene). We don't receive your other chats or ChatGPT memories.

We send back what Aaina shows you in ChatGPT: the studio's suggestions and the photos you make, as private links that expire after 24 hours. Photos are made only when you press Make, and use your Aaina credits; ChatGPT can't buy credits or change your account. Your ChatGPT conversation is handled by OpenAI under OpenAI's own privacy policy.

The product photos you share with Aaina and the photos you make are saved in your Aaina account, the same as photos made on the website, so you can find them again in ChatGPT (Your photos) and on torbilo.com. We keep them while your account is open. To have them removed, delete your account in Settings, or contact us and we will delete the photos you name.

We keep a record that your account is connected (and when it was last used), and only secure fingerprints of the keys ChatGPT uses. You can disconnect ChatGPT at any time in Settings → Connected apps; it stops working with your account at once.

You can use Aaina inside Canva after you connect your Aaina account (you sign in to Aaina and press Allow). When you ask Aaina for photos, Canva sends us only the image you selected in your design, or the page you chose to use, and the choices you make in the Aaina panel (for example a garment, a colour, a model or a scene). We don't receive the rest of your designs.

We send back the studio's choices and the photos you make, as private links that work for a few minutes; the panel saves the photos in your Canva uploads and adds the ones you pick to your design. Photos are made only when you press Make, and use your Aaina credits at the prices shown in the panel. Canva can't buy credits or change your account. Your designs are handled by Canva under Canva's own privacy policy.

Privacy mode: images that come from Canva, and every photo made from them, are deleted from Aaina within 5 minutes of arriving, whatever happens. The photos are saved to your Canva account, so you keep them there. While they exist they are never shown anywhere else on Aaina (not on the website, in the app, in your shoots or in emails), they are used only to make your photos, and Aaina keeps no copy afterwards. We keep a record of the credits you used. The image providers that make your photos (OpenAI, and others we may use as backup) receive the image for that one job and handle it under their own terms.

The names of poses, scenes and models, and your product names, are translated into your Canva language by our text provider (OpenAI); your photos are not sent for this. Your product names are translated on their own and not kept. We keep a record that your account is connected (and when it was last used), and only secure fingerprints of the keys Canva uses. You can disconnect Canva at any time in Settings → Connected apps, or in the Aaina panel in Canva; it stops working with your account at once.

When a store owner or staff member installs Aaina from Shopify, Shopify tells us which store is using it, and that store becomes an Aaina workspace of its own. There is no separate Aaina account to sign in to. Credits belong to that store.

What we access: your products, their titles and their images, and only to show your product list, to use the product photo you choose, and to add the photos you pick to that product (we add them after the product's existing images and change nothing else). We don't ask for, receive or keep any information about your customers or orders.

What we keep: the product photos you chose, the photos Aaina makes, and the records of what was added to which product, for your store until you uninstall the app and Shopify asks us to erase your store's data (it does so 48 hours after uninstall). We then delete the store's photos, product details and links to your products. We keep records of purchases and credits for tax and accounting. We don't store Shopify access keys: they are used only while you have Aaina open.

Product photos are processed by the same image and text providers described above, and only when you press Make.

We keep your account and content while your account is open. When you delete your account (in Settings, on the website or in the app), we delete your account, photos and images from our systems, except records we must keep by law, such as purchase records. Images that come from Canva, and photos made from them, are deleted within 5 minutes (see Aaina in Canva).

A brand’s content is kept while the brand exists. When a brand is deleted it stops working for everyone and its OpenAI key is removed straight away. Its photos and files are hidden from everyone at once and erased 30 days after deletion.

• A brand’s activity record is kept for 12 months, then deleted.
• The email address on an invitation nobody answered is erased 30 days after the invitation ends.
• Payment and purchase records, for packs and plans alike, are kept for as long as the law requires.

• Download a copy of your account data from Settings on the website.
• Turn email and phone notifications on or off at any time.
• Delete your account in Settings.
• Contact us to access, correct or delete your information.

Torbilo is for businesses and adults. It is not intended for anyone under 18.

We will update this page when our practices change and show the date of the latest version above.