GDPR and privacy compliance
MirrorNex includes built-in features to help you comply with GDPR, CCPA, and other privacy regulations.
Privacy settings in the app
Configure these in Account & Integrations → Privacy & GDPR:
| Setting | GDPR Requirement |
|---|---|
| Require consent before photo storage | Lawful basis / Consent (Article 6) |
| Auto-delete photos after 12 months | Storage limitation (Article 5) |
| Allow data export requests | Right to portability (Article 20) |
Consent management
When "Require consent before photo storage" is enabled:
- Customers see a consent prompt before uploading photos
- The prompt explains how their photo will be used
- Consent is recorded with a timestamp for your records
- Customers can revoke consent at any time via the Customer Portal
The consent badge also appears in the widget (see Widget Settings → Behaviour).
Customer Portal
MirrorNex provides a Customer Portal where customers can manage their data. The portal is accessible at /apps/mirrornex/portal on your store and includes:
- History — View all past try-ons
- Saved Looks — View bookmarked try-ons
- Profile — Style preferences and sizes
- Privacy — Manage consent and delete data
Data subject rights
MirrorNex supports GDPR data subject rights:
| Right | How it's supported |
|---|---|
| Right to access | Customers view their data in the Portal |
| Right to deletion | Customers revoke consent → photos deleted immediately |
| Right to portability | Customers export data as JSON (if enabled) |
| Right to object | Customers can revoke consent anytime |
| Right to rectification | Customers update their profile in the Portal |
CCPA compliance (California)
For California consumers under CCPA:
- We don't sell customer photos or personal information
- Customers can delete their data via the Portal
- Customers can opt out by revoking consent
Data processing agreement
Under GDPR:
- You (the merchant) are the Data Controller
- MirrorNex is a Data Processor
If you need a formal Data Processing Agreement (DPA) for your records, contact us at support@mirrornex.io.
Recommended privacy policy text
Add this to your privacy policy:
"Our virtual try-on feature uses AI to show you how clothing looks on your photo. We require your consent before storing photos. Photos are processed securely and can be deleted at any time through your account portal. You can also export all your data or revoke consent, which immediately deletes your stored photos."
"Our virtual try-on feature uses AI to show you how clothing looks on your photo. We require your consent before storing photos. Photos are processed securely and can be deleted at any time through your account portal. You can also export all your data or revoke consent, which immediately deletes your stored photos."