Privacy Policy

Last updated: January 2026

1. Introduction

VISO ("we," "our," or "us") is an AI-powered virtual try-on application for Shopify, operated by DataTip. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the VISO application, whether as a Shopify merchant installing our app or as a customer using the virtual try-on feature in a merchant's store.

By installing or using VISO, you agree to the practices described in this policy. If you do not agree with the terms of this Privacy Policy, please do not access or use the application.

2. Data We Collect

2.1 Merchant Data

When a Shopify merchant installs VISO, we collect and store the following information:

• Shop information: Store name, Shopify domain, and shop identifier
• Contact information: Merchant email address associated with the Shopify account
• Plan and billing details: Selected VISO subscription plan and usage tier
• Usage statistics: Number of try-on generations, feature usage, and session activity
• App configuration: Settings and preferences configured within the VISO dashboard

2.2 Customer Data

When an end customer uses the VISO virtual try-on feature in a merchant's store, we process:

• Photographs: Images uploaded by the customer for the virtual try-on experience. These are processed in real time and automatically deleted within 30 days.
• Try-on results: Generated images showing the customer wearing selected garments. These are stored for up to 90 days to support the try-on history feature, then automatically deleted.
• Session data: Anonymised interaction data such as products tried on and session duration.

2.3 Automatically Collected Data

We automatically collect certain technical information when you interact with VISO:

• Browser type and version
• Device type and operating system
• Pages and features accessed
• Date and time of interactions
• Referring URLs

3. How We Use Data

We use the information we collect for the following purposes:

• Providing the service: Processing photographs to generate virtual try-on images and delivering them to the customer in real time.
• Account management: Managing merchant accounts, subscriptions, billing, and support inquiries.
• Service improvement: Analysing anonymised usage patterns to improve the accuracy and performance of our AI models and overall user experience.
• Analytics and reporting: Providing merchants with aggregated analytics about how the try-on feature is used in their stores.
• Communication: Sending important service updates, security notices, and, with consent, product announcements to merchants.
• Compliance: Meeting legal obligations, enforcing our terms of service, and preventing misuse of the platform.

4. AI Processing

VISO uses artificial intelligence models to generate virtual try-on images. Here is how your data is handled during this process:

• Processing: Customer-uploaded photographs are sent to AI models via the OpenRouter API for image generation. These models process the image to produce a try-on result.
• No training: Your photographs and try-on results are never used to train AI models. They are used solely for the purpose of generating the requested try-on image.
• Automatic deletion: Uploaded photographs are automatically deleted within 30 days of processing. Generated try-on results are deleted after 90 days.
• Encryption: All image data is transmitted using industry-standard TLS encryption in transit and encrypted at rest while temporarily stored.

5. Data Retention

We retain data for the minimum period necessary to fulfil the purposes described in this policy:

• Customer photographs: Automatically deleted within 30 days of upload.
• Try-on results: Stored for up to 90 days to provide try-on history, then automatically deleted.
• Merchant account data: Retained for the duration of the merchant's active subscription. Upon app uninstallation, account data is deleted within 30 days, unless retention is required by law.
• Usage analytics: Aggregated and anonymised analytics data may be retained indefinitely as it cannot be used to identify any individual.

6. Third-Party Services

VISO integrates with the following third-party services to deliver and improve our product:

• Shopify: VISO operates as a Shopify app and relies on Shopify's platform APIs for store integration, authentication, and billing. Your use of Shopify is governed by Shopify's Privacy Policy.
• OpenRouter API: We use OpenRouter to access AI models for generating virtual try-on images. Image data sent to OpenRouter is processed solely for the purpose of producing try-on results and is not retained by OpenRouter for training.
• Supabase (PostgreSQL): Our application database is hosted on Supabase. All data is stored in secure, managed PostgreSQL instances with encryption at rest.
• Render.com: Our application infrastructure is hosted on Render.com, which provides secure, managed hosting with SOC 2 Type II compliance.
• PostHog: We use PostHog for product analytics to understand feature usage and improve the user experience. PostHog processes anonymised interaction events.

We ensure that all third-party service providers maintain appropriate data protection standards and process personal data only on our behalf and in accordance with our instructions.

7. Your Rights (GDPR)

If you are located in the European Economic Area (EEA), the United Kingdom, or another jurisdiction with applicable data protection laws, you have the following rights regarding your personal data:

• Right of access: You may request a copy of the personal data we hold about you.
• Right to rectification: You may request correction of any inaccurate or incomplete personal data.
• Right to erasure: You may request deletion of your personal data, subject to certain legal exceptions.
• Right to restrict processing: You may request that we limit how we use your personal data.
• Right to data portability: You may request a machine-readable copy of the personal data you have provided to us.
• Right to object: You may object to our processing of your personal data for certain purposes, including direct marketing.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us at info@visotryon.com. We will respond to your request within 30 days, as required by applicable law. You also have the right to lodge a complaint with your local data protection supervisory authority.

8. Children's Privacy

VISO is not directed at children under the age of 16. We do not knowingly collect personal data from children under 16. If we become aware that a child under 16 has provided us with personal data, we will take steps to promptly delete that information. If you believe that a child under 16 has provided personal data to us, please contact us at info@visotryon.com.

9. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make material changes, we will notify merchants through the VISO dashboard or by email. The "Last updated" date at the top of this page indicates when the policy was most recently revised. We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your data.

10. Contact

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• Company: DataTip
• Email: info@visotryon.com
• Website: visotryon.com

For data protection inquiries from EU residents, you may also contact our Data Protection Officer at info@visotryon.com.