Privacy Policy & Data Disclosures
Last Updated: July 05, 2026
Local Processing
Facial landmarks for the try-on scan are computed locally in your browser. Biometrics never leave your device.
Secure Transactions
Payments are processed through PCI-compliant gateways (Razorpay). Card details are never stored on our database.
Zero Spam Policy
We only send emails for order confirmations, reward loyalty updates, or optional promotion broadcasts.
1. Information We Collect
Lekya Specs collects only the minimum personal data required to manage your account, verify your identity, and fulfill order shipments. This data collection process spans three primary categories:
- Account Credentials: Name, verified email address, phone number, and encrypted password hashes created during phone/email OTP validation.
- Transactional Details: Shipping address coordinates, billing information, purchase history, and custom prescription indices (sphere, cylinder, axis, and pupillary distance).
- Style Customization: Face shape identifiers calculated during scanner modules to provide tailored frame model recommendations.
2. Biometric Privacy & Live Web Camera Processing
Our Virtual Try-On Studio utilizes browser camera elements and the face-api.js detection model to locate facial coordinates and overlay transparent SVG frame designs.
📢 Biometric Verification Standard:
- No camera video feeds or captured photos are uploaded, stored, or processed on Lekya Specs servers.
- All landmarks detection and background removal canvas computations run client-side in your active browser instance.
- Images are converted to localized URL paths temporarily to render styling frames, and are purged instantly when you reload the window or change pages.
3. Cookies & Browser Cache Storage
We use localized browser storage cookies to remember your state and improve page loading performance:
- specs_token: Secure JSON Web Token (JWT) identifying your active authentication session.
- specs_cart: Temporary storage of chosen frame models before checkout.
- specs_wishlist: Caching products you marked as favorites.
4. Security Measures & Data Retention
We employ robust safety parameters to guarantee transaction integrity:
- Passwords are salted and securely encrypted using bcrypt libraries.
- API calls require JWT headers to prevent administrative privilege escalations.
- Customer database records (orders, profiles) are stored on encrypted cloud nodes managed by Turso.
- We retain transactional information for compliance audit guidelines, but user account records can be wiped upon explicit request.
5. Third-Party Data Integrations
We do not sell, rent, or lease your profile coordinates to third-party ad networks. We share details only with essential processors to complete store operations:
- Razorpay: Handles debit/credit and UPI processing using encrypted PCI-compliant interfaces.
- Nodemailer/Google SMTP: Delivers transactional OTP codes, helpdesk replies, and loyalty updates.
- Turso DB: Distributes database storage globally for fast page renders.
6. Customer Rights & Access Controls
You hold absolute rights to inspect, update, or purge your profile logs. You can change profile details directly from the Account Dashboard or contact our privacy team at support@lekyaspecs.in to request absolute record deletion.
Your privacy is safe with us
Thank you for placing your trust in Lekya Specs. We strive to provide a premium, transparent, and completely private eyewear styling experience.