At WearWise Try On ("WearWise", "we", "our", or "us"), we prioritize the privacy and security of both the merchants who install our application and the end-consumer shoppers who interact with our virtual fitting room widget.
1. Information We Collect
A. Information from Merchants
When a merchant installs the WearWise Try On application from the Shopify App Store, we access certain information from your Shopify store account as authorized by the OAuth permissions you grant:
- Shop Metadata: Store domain (e.g.,
store-name.myshopify.com), primary email address, store name, and active currency. - Catalog & Theme Access: Product details (titles, images, handles, product types) to enable virtual fitting room overlays on product pages.
- Order & Conversion Data: Order IDs, order totals, and attributed try-on session identifiers to compute conversion rates and ROI inside the merchant analytics dashboard.
B. Information from Shoppers / End-Users
When shoppers use the Virtual Dressing Room on a merchant's storefront:
- Garment & Model Selections: Selections made by the shopper (e.g., chosen preset model or uploaded garment).
- User-Uploaded Photos: If a shopper chooses to upload their photo, the image is transmitted securely via TLS encryption solely for generation and retained locally in the user's browser session (
localStorage). - Anonymous Session Identifiers: Ephemeral visitor tokens (e.g.,
vton_v_xxxx) stored in browser cookies/local storage to persist active dressing room state while browsing the store.
2. How We Use Information
We use the collected information strictly for the following operational purposes:
- To generate realistic virtual try-on visual outputs using 2-stage generative vision models.
- To enable multi-item outfit layering (chained styling) across clothing categories.
- To calculate merchant analytics, including try-on counts, conversion rates, and attributed sales.
- To monitor plan quotas, enforce anti-abuse rate limits, and process billing through the Shopify Billing API.
3. Data Processing & Sub-Processors
To provide generative virtual dressing room features, image data is transmitted to secured enterprise AI infrastructure (such as OpenRouter / specialized vision models) under strict non-training, zero-retention service level agreements. Data sent to our sub-processors is encrypted in transit and deleted immediately after rendering the visual output.
4. Data Retention and Storage
- Photos & Try-On Results: Not retained on WearWise database servers. Users may clear their browser storage at any time to delete locally cached photos.
- Analytics & Metric Logs: Aggregated numeric statistics (e.g., daily try-on volume, converted order IDs) are retained while the merchant maintains an active WearWise subscription.
- Merchant Uninstallation: When a merchant uninstalls the application, Shopify automatically dispatches an
app/uninstalledwebhook, upon which the store status is marked inactive and access tokens are immediately purged.
5. GDPR and CCPA Compliance
In accordance with the General Data Protection Regulation (GDPR), California Consumer Privacy Act (CCPA), and Shopify's Mandatory Webhook Requirements, WearWise fully supports the following data subject requests:
- Customer Data Request (
customers/data_request): Merchants or shoppers can request an export of all attributed session logs associated with their identifier. - Customer Redaction (
customers/redact): Automatic erasure of any shopper-associated records upon notification from Shopify. - Shop Redaction (
shop/redact): Complete erasure of store configuration and logs 48 hours following app uninstallation.
6. Security Safeguards
We implement industry-standard administrative, physical, and technical safeguards to protect all data in transit and at rest. All API communications require HTTPS/TLS 1.3 encryption, and internal requests are cryptographically verified using Shopify App Bridge HMAC token signatures.
7. Contact Us
If you have questions regarding this Privacy Policy, wish to exercise your data protection rights, or require support, please contact our privacy team: