Data retention and deletion policies

MirrorNex gives you control over how long customer data is retained. Configure these settings in Account & Integrations → Privacy & GDPR.

Privacy settings

Three settings control data handling:

Require consent before photo storage

When enabled, customers must agree to a consent prompt before uploading their photo. This is required for GDPR/CCPA compliance in most regions.

Auto-delete photos after 12 months

When enabled, customer photos that haven't been accessed for 12 months are automatically deleted. This helps with data minimization requirements.

Allow data export requests

When enabled, customers can download all their data from the Customer Portal. This supports GDPR's data portability requirement.

Data types and retention

Data Type	Retention	Purpose
Customer photos	12 months (if auto-delete enabled)	Try-on history
Try-on results	12 months (if auto-delete enabled)	Customer history
Consent records	Permanent	Legal compliance
Usage analytics	Permanent (anonymized)	Analytics & billing
Store settings	Until uninstall	App configuration

Customer-initiated deletion

Customers can delete their own data through the Customer Portal:

Visit your store and go to the Customer Portal (typically at /apps/mirrornex/portal)
Navigate to the Privacy section
Revoke photo consent to delete all their photos immediately

When a customer revokes consent, their photos are deleted from storage immediately. The try-on metadata is kept for your analytics but without any identifying photos.

Merchant-initiated deletion

To request deletion of all data for your store:

Email support@mirrornex.io

Include your store URL and the email associated with your Shopify account

We'll process your request within 30 days

Uninstalling the app

When you uninstall MirrorNex:

All store settings are deleted within 48 hours
Customer photos are queued for deletion
Usage data is anonymized (for aggregate analytics only)
The try-on button automatically stops appearing on your store