Last updated: [DATE]
MirrorNex is an AI virtual try-on application for Shopify stores, operated by [COMPANY LEGAL NAME] ("we", "us", "our"). This policy explains what information we collect, how we use it, and the choices available to you. It applies to merchants who install MirrorNex and to shoppers who use the try-on feature on a merchant's store.
Merchant information. When you install MirrorNex through Shopify, we receive your store name, store domain, contact email, and the product data required to enable try-on, including product images, titles, and variants. Billing is handled by Shopify. We do not receive or store your payment card details.
Shopper photos. When a shopper uses the try-on feature, they upload a photo. This photo is used to generate the requested try-on image.
Usage information. We collect service analytics such as the number of try-ons generated, which products were used, device type, browser type, and approximate region. This powers merchant analytics and helps us improve the service.
We do not collect Shopify customer personal data beyond what is described here, and we request only the API access scopes necessary to operate the app.
Photos are encrypted in transit and are processed solely to generate the requested try-on image. Photos are not sold, are not shared with third parties for advertising, and are not used to train AI models.
Where a shopper does not provide consent for their photo or result to be saved, the uploaded photo is deleted from our systems within [X] hours of processing. Where a shopper does provide consent, for example to save a style profile or receive campaign content, the photo and generated result are retained until consent is withdrawn or deletion is requested.
We do not knowingly process photos of individuals under the age of 16. If we become aware that such a photo has been uploaded, we delete it.
Shoppers are shown a clear notice before uploading a photo, describing how the photo will be used. Merchants can configure consent behavior from the MirrorNex dashboard. Consent can be withdrawn at any time by contacting us or the merchant.
We use information to provide and operate the try-on service, to display usage and performance analytics to merchants, to provide customer support, to process billing through Shopify, to improve service reliability and quality, and to comply with legal obligations. We do not sell personal information.
We share information only with service providers that help us operate MirrorNex, including cloud hosting, database, object storage, and AI image processing providers, under agreements requiring them to protect that information and use it only for the purposes we specify. We also exchange the data necessary to operate the app with Shopify. We may disclose information where required by law or to protect our legal rights.
Merchant account data is retained while the app is installed and is deleted within [X] days of uninstall, except where retention is required for legal, tax, or billing purposes. Shopper photos follow the retention rules in Section 2. We honour Shopify's mandatory data request, customer redaction, and shop redaction webhooks.
Depending on your location, including under the GDPR, UK GDPR, and CCPA, you may have the right to access, correct, delete, port, or restrict the processing of your personal information, and to object to certain processing. Shoppers may exercise these rights by contacting us at [SUPPORT EMAIL] or by contacting the merchant whose store they used. We respond to verified requests within 30 days.
We apply industry standard safeguards including encryption in transit, encryption at rest for stored images, access controls, and periodic review of our security practices. No system is completely secure, but we protect information in a manner proportionate to its sensitivity.
Our infrastructure may process information in countries other than your own. Where required, we rely on appropriate legal safeguards for such transfers.
We may update this policy from time to time. The revised version will be posted on this page with an updated date. We will notify merchants of material changes by email or in-app notice.
For any privacy question or request, contact [SUPPORT EMAIL] or write to [COMPANY LEGAL NAME], [ADDRESS].