Privacy Policy

"Provador" app for Tiendanube stores — last updated October 1, 2026.

This is a translation; in case of discrepancy, the Portuguese version prevails.

1. Who is responsible for what

The store that installs the app (the merchant) is the controller of its customers' data under the LGPD (Lei 13.709/2018, Brazil). The merchant decides to offer the virtual try-on and must obtain the end customer's consent to use their photo. Arara acts as the processor: we process the photo only to generate the requested result, for no longer than strictly necessary, and we do not decide how or why the store uses the feature.

2. Data the app handles, and for how long

Data	From whom	Purpose	Retention
Store OAuth access token, store ID, store domains	Merchant (generated by Tiendanube at installation)	Authenticate calls to the Tiendanube API on the store's behalf; validate the origin of the public widget	While the app is installed — deleted on uninstall
Provador API key issued to the store	Generated by us at installation	Allow the store to use the service (image generation, balance)	While the app is installed — revoked on uninstall
Billing email, legal company name, Brazilian tax ID (CNPJ/CPF), Stripe customer ID	Merchant, when adding a payment method	Charge one-off credit packs through Stripe	While the app is installed
Photo of the person and of the garments submitted in a try-on	The store's end customer, through the widget	Generate the requested composite (the person wearing the garment)	Zero retention by default — deleted as soon as the result is ready, at most a few hours later
Garment photo published to the showcase	Merchant, when setting up the catalog	Reuse the garment in any try-on without repeating the preparation	Indefinite — it is the merchant's catalog, not a third party's personal data. Removed only if the merchant deletes the garment

3. Who the data is shared with

• Google (Gemini API) — receives the photo and the garment only while generating the requested image, to produce the result. We do not use that photo to train any model.
• Stripe — processes payment for the store's credit packs. We have no access to card numbers; they are stored directly with Stripe.
• Infrastructure providers (database, hosting) — store the data listed above on Arara's behalf, under contract, and do not use it for any other purpose.

We do not sell any data to third parties.

4. Data subject rights

If you are an end customer of a store that uses Provador, your rights over the photo you submitted (access, correction, deletion, portability, withdrawal of consent) must be exercised with the store where you shopped — it is the controller of your data. Since photo retention is already zero by default, in practice the photo ceases to exist shortly after you see the result.

If you are a merchant and want to exercise any of these rights over your own store's data (token, API key, billing details), or have any question about this document, contact us at contato@arara.app.br.

5. Uninstalling

When you uninstall the app, Tiendanube notifies us automatically: we revoke the store's API key and delete the installation record (token, domains, project reference). No store data remains stored after that.

6. Security

• Sensitive secrets (OAuth token, API key) are encrypted at rest, never stored in plain text.
• The public try-on widget validates the request origin against the store's real domains.
• Image URLs submitted by any party are validated before any request is made, to prevent the server from being used to reach internal addresses.

7. Changes to this policy

We publish any relevant change on this same page, with the revised update date at the top.