Privacy Policy

Last updated: May 24, 2026

TryOnIA ("the App", "we", "us") is a Shopify app operated by DevCloud Software LLC that lets shoppers preview products on themselves using AI-generated virtual try-on. This policy describes what data we receive, how we use it, and how we protect it.

1. Data we receive from merchants

When a merchant installs TryOnIA, Shopify grants us an OAuth access token and sends us webhook events we have subscribed to:

• Product events — products/create, products/update (we read the product image and title to feed the AI).
• Order events — orders/create (to attribute orders to try-on sessions when the cart carries a TryOnIA session attribute).
• App lifecycle — app/uninstalled, app_subscriptions/update.
• GDPR compliance — customers/redact, customers/data_request, shop/redact.

We do not subscribe to customers, inventory, or fulfillment events.

2. Data we receive from shoppers

When a shopper opens the try-on modal on a product page and uploads a photo, we receive:

• The selfie image file they chose to upload.
• The Shopify product they were viewing (product id + image URL).
• Their browser locale and country (ISO 2-letter codes only — no IP retention).
• A SHA-256 hash of their User-Agent string (so we can group repeat sessions without storing the raw UA).

We do not ask for, store, or transmit names, emails, phone numbers, or any other directly-identifying information about shoppers.

3. How shopper photos are processed

To generate the try-on result, your photo is sent to our AI provider (Fal.ai, Replicate, or a TryOnIA-owned GPU instance, depending on the merchant's plan). The provider runs an image-to-image diffusion model and returns the rendered result. The provider's terms forbid them from training models on customer photos, and we do not retain photos with them beyond the immediate processing.

The result image is stored alongside your selfie until the merchant's configured retention window elapses (default 7 days; minimum 1 day; maximum 30 days). After that window:

• The selfie file is deleted from our storage.
• The result image file is deleted from our storage.
• The session record is preserved with empty image URLs so the merchant's analytics totals remain accurate.

4. Consent

By default, the storefront try-on modal includes an "I agree to upload my photo" checkbox that the shopper must tick before the upload starts. Merchants can disable this checkbox (and surface their own consent flow) only when their own privacy notice covers the upload. The "agree to upload" event is logged with a SHA-256 of the User-Agent for audit purposes.

5. Safety filtering

Each result image is passed through a server-side NSFW detector before it is shown to the shopper. Results above the safety threshold are blocked from delivery and surface to the merchant only as a flagged item in the admin gallery (with the selfie + result hidden from view).

6. Sub-processors

• Shopify — source of truth for installation and billing.
• AI providers — Fal.ai, Replicate (compute providers, no data retention beyond the active inference).
• Object storage — DigitalOcean Spaces (S3-compatible), customer images at rest, US region.
• SendGrid — transactional email to the merchant only (never to shoppers).
• Sentry — error tracing; image bytes never reach Sentry.

7. GDPR & data deletion

TryOnIA honors Shopify's mandatory GDPR webhooks:

• customers/data_request — we hold no customer PII at rest, so the response is a confirmation note.
• customers/redact — no action required.
• shop/redact — 48 hours after uninstall, we delete every selfie, result, session, product config, daily-stat and feedback row for that shop.

Shoppers who want their data deleted before the retention window expires can email support@devcloudsoftware.com with the store URL and the date of their try-on session.

8. Security

• All traffic encrypted in transit via TLS 1.2+.
• Shopify access tokens encrypted at rest (Fernet/AES).
• Webhook payloads HMAC-SHA256 verified before any processing.
• Storefront uploads HMAC-bound to a 30-minute session token to prevent replay.
• Per-shop rate limits on every storefront endpoint.
• NSFW safety filter on every generated result.

9. Children

TryOnIA is not directed at children under 13. Merchants are responsible for ensuring their storefront age-gates the try-on modal when serving merchandise to minors or in jurisdictions that require additional consent.

10. Changes

Material changes are communicated in-app at least 14 days before they take effect.

11. Contact

DevCloud Software LLC
Email: support@devcloudsoftware.com