Privacy Policy

Last updated: October 2026

1. Introduction

VISO ("we," "our," or "us") is an AI-powered virtual try-on and fit advice application for Shopify, operated by DataTip. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the VISO application, whether as a Shopify merchant installing our app or as a shopper using VISO in a merchant's store.

For shoppers using VISO in a merchant's store, the merchant decides to offer VISO and is responsible for its store's privacy notice; VISO processes shopper data to provide the try-on and fit features on the merchant's behalf, under the data processing terms in our Terms of Service.

By installing or using VISO, you agree to the practices described in this policy. If you do not agree with the terms of this Privacy Policy, please do not access or use the application.

2. Data We Collect

2.1 Merchant Data

When a Shopify merchant installs VISO, we collect and store the following information:

• Shop information: Store name, Shopify domain, and shop identifier
• Contact information: Merchant email address associated with the Shopify account
• Plan and billing details: Selected VISO subscription plan and usage tier
• Usage statistics: Number of try-on generations, feature usage, and session activity
• App configuration: Settings and preferences configured within the VISO dashboard

2.2 Customer Data

When a shopper uses the VISO virtual try-on feature in a merchant's store, we process:

• Photographs: Images you upload for virtual try-on. Before upload, location and camera metadata (EXIF) are removed on your device. The photo is stored on our servers and automatically deleted within 30 days, or within 24 hours if processing does not finish. We use it only to create the try-on you ask for; the legal basis is providing that service to you (Art. 6(1)(b) GDPR). The try-on window tells you this before you upload.
• Try-on results: Generated images of you wearing the selected product. These are stored for up to 90 days so you can view them again, then automatically deleted. Items you saved as favorites follow the same deletion.
• Interaction data: A random identifier for your browser (not your name or email), the products you try on, try-on status, your rating of a result, whether you added the item to your cart, and timings. This data is pseudonymous, not anonymous. Detailed event logs are kept for 90 days. Basic try-on records without images are kept while the merchant uses VISO, and deleted on the merchant's or your erasure request.
• Email address (optional): If the merchant turns on email capture and you choose to leave your email and tick the marketing consent box, we store your email address, the consent wording you agreed to and when, the product and try-on it relates to, and your language, so the merchant can contact you. We then send you an email on the merchant's behalf with a link to confirm your subscription, and record when you confirm. The merchant can see and export these emails. They are deleted after 2 years, when the merchant uninstalls VISO, or on an erasure request; if you do not confirm within 7 days, we delete your email then. If the merchant also turns on saving these emails to Shopify, we add you to the merchant's Shopify customers once you confirm, with your email address, your confirmed marketing consent and when you confirmed, and the tag viso-lead; if you had already unsubscribed from that store, we leave that unchanged. That customer record is then held by the merchant in their Shopify store under the merchant's own privacy policy; our 2-year deletion does not remove it, so ask the merchant to delete it, or unsubscribe with the link in their emails.
• Order attribution (merchants only): Where a merchant has enabled it, we receive the order ID, order total, currency and the value of the tried-on item for orders placed after a try-on, so the merchant can measure VISO's impact. We do not store your name, email, address or payment details from orders. Attribution records are kept for 2 years.

2.3 Automatically Collected Data

We automatically collect certain technical information when you interact with VISO:

• Browser type and version
• Device type and operating system
• Country (derived from your connection by our network provider; your IP address is not stored in our analytics tables)
• Screen size, language and time zone
• Pages and features accessed
• Date and time of interactions
• Referring URLs
• Campaign parameters (UTM)
• Error reports when something in VISO fails: the error message, where it happened and the store. They contain no visitor ID, photos or contact details, are sent without analytics consent because we need them to keep VISO working, and are deleted after 90 days.

2.4 Size Advisor (Fit & Style)

If the merchant enables the Size Advisor and you use it, we process:

• Size and body measurements you choose to enter: For example height, bust, chest, waist, hip, inseam, foot length and width, head, hand and wrist, plus your usual size, fit preference, occasion and unit system. Measurements are only used when your store's cookie banner allows personalization/preferences.
• Chat questions and answers: The questions you ask the fit assistant and the AI's replies. Email addresses in your messages are automatically redacted before storage.
• Saved fit profile (optional): If the merchant turns on saved profiles and you give personalization consent, your sizes, measurements and preferences are saved so future recommendations are faster. If you are logged in to the store and choose to save to your account, the profile is linked to a one-way hashed version of your customer identity. You can remove your saved profile at any time with “Forget saved profile” in the Size Advisor.

The Size Advisor does not infer body measurements or traits from your photos.

2.5 Data stored on your device

The VISO widget stores some data in your browser so it can work without asking you again:

• Browser storage (localStorage): Your recent photos (automatically removed after 7 days), your last 10 try-on looks including the photo used, a random visitor ID (only with analytics consent), ratings, display preferences, and, with preferences consent, recent size recommendations. This data stays in your browser until it expires or you clear your browser data. We cannot access it remotely.
• Security cookie (viso_vid): A signed, HttpOnly cookie set on the store's domain for up to 1 year. It ties your try-on history to your browser so no one else can view it. It is strictly necessary for this protection and is not used for advertising.

3. How We Use Data

We use the information we collect for the following purposes:

• Providing the service: Processing photographs to generate try-on images, and processing the sizes, measurements and questions you give the Size Advisor to recommend a size and answer your fit questions.
• Account management: Managing merchant accounts, subscriptions, billing, and support inquiries.
• Service improvement: Analysing usage patterns to improve reliability, accuracy and user experience.
• Analytics and reporting: Providing merchants with aggregated analytics about how the try-on feature is used in their stores.
• Communication: Sending important service updates, security notices, and, with consent, product announcements to merchants.
• Compliance: Meeting legal obligations, enforcing our terms of service, and preventing misuse of the platform.

4. AI Processing

VISO uses artificial intelligence models to generate virtual try-on images and Size Advisor answers. Here is how your data is handled during this process:

• Processing: Your photo and the product image are sent through the OpenRouter API to an image-generation model from ByteDance, OpenAI or Google to produce your try-on. Size Advisor questions and measurements are sent through OpenRouter to a text model hosted by Nebius or Google Cloud. We may change the models used; the current list is available on request.
• No training: We do not use your photographs, try-on results, measurements or chats to train AI models. They are used solely to generate the result you requested.
• Automatic deletion: Uploaded photographs are deleted from our servers within 30 days, try-on results within 90 days, Size Advisor chats within 90 days, and Size Advisor sessions within 180 days.
• Encryption: All image data is transmitted using industry-standard TLS encryption in transit and encrypted at rest while temporarily stored.

5. Data Retention

We retain data for the minimum period necessary to fulfil the purposes described in this policy:

• Customer photographs: Automatically deleted within 30 days of upload (24 hours for photos whose processing did not complete).
• Try-on results: Stored for up to 90 days to provide try-on history, then automatically deleted.
• Size Advisor: Chat messages are deleted after 90 days, and recommendation sessions, including the measurements used for them, after 180 days. Saved fit profiles are deleted 12 months after your last visit, or sooner if the merchant sets a shorter period, or immediately when you choose “Forget saved profile”.
• Emails left in the widget and order attribution: Deleted after 2 years, or earlier on uninstall or an erasure request. Emails not confirmed within 7 days are deleted then.
• Data on your device: Recent photos expire after 7 days. Try-on history (up to 10 looks) stays in your browser until you clear it. The viso_vid cookie expires after 1 year.
• Merchant account data: Retained while the app is installed. When a merchant uninstalls VISO, the merchant's store images are removed from our storage straight away, and all shop data is deleted when Shopify sends its shop-data erasure request (about 48 hours after uninstall), unless the law requires us to keep it longer.
• Usage analytics: Detailed analytics events, device and visit information are deleted after 90 days (rate-limit counters after 7 days). Aggregated statistics that cannot identify you may be kept indefinitely.

6. Third-Party Services

VISO integrates with the following third-party services to deliver and improve our product:

• Shopify: VISO operates as a Shopify app and relies on Shopify's platform APIs for store integration, authentication, and billing. Shopify's Privacy Policy.
• OpenRouter: A routing service that forwards try-on and Size Advisor requests to the AI model providers listed in section 4 (currently ByteDance, OpenAI, Google and Nebius). Data is sent only to generate the requested result.
• Supabase: Our database and image storage (PostgreSQL and object storage), hosted in the EU (AWS eu-west-1, Ireland), with encryption at rest.
• Render.com: Our application hosting, located in Frankfurt (EU), with SOC 2 Type II compliance.
• PostHog (EU cloud): Product analytics and error tracking. In merchants' stores, the VISO widget sends events to PostHog only when the store's cookie banner signals analytics consent.
• Google Workspace (Gmail): Sending transactional emails.
• AI model providers (via OpenRouter): ByteDance, OpenAI and Google process try-on requests. Size Advisor requests are processed by Nebius or Google Cloud, neither of which retains the request data. Some providers may process data outside the EEA; where they do, we rely on appropriate safeguards such as the EU Standard Contractual Clauses.

We ensure that all third-party service providers maintain appropriate data protection standards and process personal data only on our behalf and in accordance with our instructions.

7. Your Rights (GDPR)

If you are located in the European Economic Area (EEA), the United Kingdom, or another jurisdiction with applicable data protection laws, you have the following rights regarding your personal data:

If you used VISO in a merchant's store, you can also ask the merchant to delete your data. Shopify forwards those requests to us and we act on them. You can remove your saved Size Advisor profile yourself in the widget, and clear on-device data by clearing your browser's site data.

• Right of access: You may request a copy of the personal data we hold about you.
• Right to rectification: You may request correction of any inaccurate or incomplete personal data.
• Right to erasure: You may request deletion of your personal data, subject to certain legal exceptions.
• Right to restrict processing: You may request that we limit how we use your personal data.
• Right to data portability: You may request a machine-readable copy of the personal data you have provided to us.
• Right to object: You may object to our processing of your personal data for certain purposes, including direct marketing.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us at info@visotryon.com. We will respond to your request within 30 days, as required by applicable law. You also have the right to lodge a complaint with your local data protection supervisory authority.

8. Children's Privacy

VISO is not directed at children under the age of 16. We do not knowingly collect personal data from children under 16. If we become aware that a child under 16 has provided us with personal data, we will take steps to promptly delete that information. If you believe that a child under 16 has provided personal data to us, please contact us at info@visotryon.com.

9. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make material changes, we will notify merchants through the VISO dashboard or by email. The "Last updated" date at the top of this page indicates when the policy was most recently revised. We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your data.

10. Contact

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

For data protection inquiries from EU residents, you may also contact our privacy team at info@visotryon.com.