Install App

GDPR and privacy compliance

MirrorNex includes built-in privacy practices to help you comply with GDPR, CCPA, and global privacy standards.

Consent & Retention Standards

Practice GDPR Requirement
Modal privacy notice & consent checkbox Lawful basis / Consent (Article 6)
Auto-delete unsaved photos (24 hours) / saved looks (12 months) Storage limitation (Article 5)
Shopper data deletion in Style Room (My Looks) Right to erasure (Article 17)

Consent management

During the virtual try-on workflow:

Style Room (My Looks)

MirrorNex provides a Style Room (shoppers see it as My Looks) where shoppers can manage their saved data:

Data subject rights

MirrorNex supports GDPR data subject rights:

Right How it's supported
Right to access Shoppers view their saved looks in Style Room (My Looks)
Right to deletion Shoppers delete saved looks → photos deleted immediately
Right to object Shoppers can opt out and delete their saved data anytime

CCPA compliance (California)

For California consumers under CCPA:

Data processing agreement

Under GDPR:

If you need a formal Data Processing Agreement (DPA) for your records, contact us at support@mirrornex.io.

Recommended privacy policy text

Add this to your privacy policy:

"Our virtual try-on feature uses AI to show you how clothing looks on your photo. We show a privacy notice before photo uploads. Photos uploaded for a session are deleted within 24 hours unless saved to your looks with your consent, which are kept for up to 12 months or until you delete them in My Looks. We do not use your photos to train AI models. Our size guide shows measurements only; it doesn't collect your measurements."
← Back to Customer Data & Privacy