Indo Fab

AI & API Use

Last updated 17 October 2026

How we use AI ourselves, and the rules for AI assistants, agents and apps that browse or shop with us through our APIs on someone's behalf.

Part A: How we use AI

Drape and model visuals. Some videos and images showing how a design falls on the body are generated with AI video tools. They are always shown next to real photographs of the actual cloth, and the product page says when a visual is AI-generated.
Never for product facts. Prices, measurements, GSM, fibre content and stock counts come from our own records, not from AI.
Your data. We do not use your personal data or order history to train AI models. If we use an AI tool to help answer enquiries, a person on our team reviews what is sent to you.

Part B: Connected apps and analytics

We connect our website and back office to these third-party services through their official APIs. Each one receives only what is listed here. Services marked "only with your consent" stay off until you accept them in the cookie banner, and you can switch them off again at any time.

Service	What we use it for	What it receives
Google Analytics Google LLC · only with your consent	Measuring visits, popular pages and how shoppers move through the site.	Pseudonymous device ID, pages viewed, approximate location, device and browser type. No name, email or phone.
Meta Pixel (Facebook and Instagram) Meta Platforms, Inc. · only with your consent	Measuring which Facebook and Instagram posts and ads bring visitors, and showing our ads to people who visited.	Pseudonymous device ID, pages viewed, products added to cart and purchase value. Hashed email or phone only if you opt in.
Facebook and Instagram pages Meta Platforms, Inc.	Posting collections and replying to comments and direct messages.	What you send us there, under Meta's own terms. We read messages to reply; we do not import your profile.
WhatsApp Business Meta Platforms, Inc.	Trade enquiries by design code, order and shipping updates, and customer support.	Your phone number, WhatsApp name, messages, and the order number or design codes involved.
YouTube Google LLC · only with your consent	Hosting our drape and craft films, embedded on product and story pages.	Embedded videos load in privacy-enhanced mode; YouTube sets cookies only when you press play.
[other tool]	[add every new analytics, marketing or automation tool here before it goes live]	[data it receives]

These providers process data under their own privacy policies and may store it outside India. We do not sell your data to any of them. The full list is also in our Privacy Policy.

Part C: Our own AI agents

Inside the business we use AI agents (automated assistants built on [AI model provider, e.g. Anthropic Claude]) that connect to the services above through their APIs to save our small team time. Here is what they do, and the limits we hold them to.

Task	Data the agent can see	Human check
Weekly reports from Google Analytics, Meta and YouTube	Aggregated statistics only (visits, views, top products). No personal data.	Read by the team
Drafting and scheduling posts for Instagram, Facebook and YouTube	Our product catalogue and our own images and films.	Approved by a person before posting
Sorting WhatsApp and Instagram messages, and drafting replies	The message, your name or number, and the design codes or order it mentions.	A person reviews and sends any reply that is not a standard order update
Order and shipping updates on WhatsApp	Your number, order number, items and tracking link.	Pre-approved templates, sent only after you order
Answering questions about stock, prices and design codes	Our catalogue, stock and retail prices. Trade prices only for the signed-in trade customer.	Answers come from our own records, not from AI guesses

Rules our agents follow

Each agent gets its own access key, limited to the services and actions its task needs. Keys are stored securely and can be revoked at any time.
Agents never take payments, issue refunds, change prices, approve trade accounts or delete customer data. Those stay with people.
Nothing is posted publicly or sent to you in our name without the human check shown above.
Personal data sent to our AI provider is used only to complete the task, is not used to train its models, and is not kept by us longer than the retention periods in our Privacy Policy.
Agent actions are logged so we can see what was done, when, and by which agent.

If you would rather an AI agent did not handle your messages, tell us and a person on our team will deal with you directly.

Part D: Rules for outside AI agents and apps

We welcome assistants that help people discover and buy cloth, as long as a real customer is in charge. "Agent" here means any AI assistant, bot, script or app that calls our APIs or uses the site automatically.

You may

read the public catalogue: products, categories (including the Six Moods), retail prices in INR, images and availability;
compare pieces, suggest pairings and build a cart for the person you are helping;
sign in to a customer or trade account using that customer's own credentials, when they asked you to;
link to our product pages, quoting product names, design codes and prices accurately.

You must

Get the human's confirmation before any order or payment. Show them the items, quantities, total price and delivery address, and let them approve it. Payment is completed by the customer through our payment partner's own screen.
identify yourself with a descriptive User-Agent, for example ExampleAssistant/1.0 (+https://example.com/bot);
stay under [60] requests per minute and back off when you receive HTTP 429 or 5xx responses;
handle any customer personal data only to complete that customer's request, in line with our Privacy Policy.

You must not

scrape, store or republish trade prices or the trade catalogue, or use one trade account for anyone other than its owner;
create accounts in bulk, or apply for trade accounts for businesses you do not represent;
use our designs, photographs or videos to train AI models, or to generate copies or look-alikes of our designs;
place speculative, automated or resale-bot orders, or try to hold stock you are not buying;
get around rate limits, security controls or CAPTCHAs.

We may block or rate-limit agents that break these rules, and cancel orders that were placed in breach of them.

Part E: The API

Our storefront runs on the Medusa Store API. The same public endpoints the website uses are open to agents. Every request needs our publishable key in the x-publishable-api-key header. The key is public; it identifies our store, not you.

Purpose	Endpoint
Regions (use India for INR prices)	`GET /store/regions`
Categories and the Six Moods	`GET /store/product-categories`
Products with prices	`GET /store/products?region_id=…`
One product by handle (design code)	`GET /store/products?handle=if-ph-101&region_id=…`
Create a cart / add items	`POST /store/carts`, `POST /store/carts/{id}/line-items`
Customer or trade sign-in	`POST /auth/customer/emailpass`

curl "https://[api domain]/store/products?region_id=<india-region-id>&limit=20" \
  -H "x-publishable-api-key: <publishable key>" \
  -H "User-Agent: ExampleAssistant/1.0 (+https://example.com/bot)"

Prices are returned in variants[].calculated_price, in rupees. Signed-in trade customers get their trade price in the same field. Base URL: [api domain]. Publishable key: [publish key here, or on request].

Higher limits and partnerships

Building a shopping assistant, a retailer integration or a marketplace feed? Write to [email] and tell us who you are and what you are building. We can agree higher limits or a dedicated trade feed.

These rules form part of our Terms & Conditions. If they conflict, the Terms apply.