Privacy policy

Last updated: 24 October 2026

This policy explains what DupeDesk collects, why, and your rights under India's Digital Personal Data Protection Act, 2023.

What we collect

• Your email address, to sign you in and send your reports.
• Your skin profile (skin type, concerns, budget, ingredients to avoid), only if you add it, to tailor your reports.
• The reports you generate, the products in your routine if you create a Premium report, and your purchases.
• Payment records (amount, date, Razorpay order and payment IDs). Card, UPI and bank details are handled by Razorpay; we never see or store them.
• Anonymous counts of clicks on shop links (which link, not who clicked), and basic request data used to prevent abuse, such as rate limits.

Skin scan photos

The skin scan analyses your photo in your own browser. Your photo is not uploaded to or stored by DupeDesk.

Who we share data with

Only service providers that run the site: hosting (Vercel), database (Supabase), email delivery, payments (Razorpay) and, if enabled, AI analysis (Anthropic). We don't sell your data or share it with brands.

Cookies

We use one essential cookie to keep you signed in. No advertising or tracking cookies. Retailers you visit through our shop links may use their own cookies.

Your rights

• See and correct your profile on your account page.
• Delete your account and personal data at any time from your account page. Payment records are kept without your account where the law requires.
• Withdraw consent by deleting your account.

Questions or complaints? Contact us.