Privacy

Somebody's photograph is not a marketing asset

A shopper uploads a picture of herself to your storefront. What happens to it afterwards is the part worth being specific about.

What is kept

Four things, three of which expire

her photograph existsonly the result existsUploadshe picks a photographSix hoursher photograph is deletedThirty daysthe result is deletedNo account, no name, no login. Visitors are counted with a salted hash, for rate limiting only.
Both deletions happen on a timer rather than on request, because a retention policy somebody has to remember to act on is the kind that fails on a busy day.

Her photograph: six hours

The image she uploads is held only long enough to generate the result, and is deleted within six hours. It is not written into a catalogue and it is not used to train anything.

The result: thirty days

So she can come back to it on her phone, or open the link again later in the day. Then it is removed.

Her identity: not collected

Visitors are counted with a salted hash for rate limiting. There is no account, no login and no name attached to a try-on unless you switch on the optional email field.

The garment flat lay: cached

Derived once from your own product photograph and kept, because it belongs to you and contains no shopper in it at all.

Source photographs expire within six hours whether or not anybody asks, because a retention policy nobody has to act on is the only kind that holds under pressure.

For your storefront

What to tell your shoppers

  • Her photograph is deleted within six hours
  • The result is kept for thirty days so she can come back to it
  • It takes about ten seconds
  • It is a preview of drape and proportion, not a measurement

The widget shows the retention line itself before she picks a file, so she is told before she decides rather than afterwards.

Nothing to illustrate this with except the absence of it, which is rather the point.

Questions

The ones that actually get asked

Do you train models on shopper photographs?
No. The upload exists to produce her result and is deleted within six hours.
Can I see what my shoppers uploaded?
No. You see that a try-on happened and what it cost you in credits. The photographs are not yours and are not surfaced to you.
What if a shopper asks for her photograph to be deleted?
It is already gone or going. Source images expire within six hours regardless of whether anyone asks, and results within thirty days.
Is this suitable for a store with minors as customers?
The widget is built for adult shoppers uploading their own photograph. If your customers are children, do not enable it on those pages.
Where is it processed?
The generation runs through the same engine as the rest of the product, against your account's credits.
Do I need to update my privacy policy?
If you are collecting a photograph on your storefront, say so. The four lines above are the substance and you are welcome to use them verbatim.

One line in your theme, and your shoppers can see themselves

Try-on comes out of the same credits as everything else, so there is nothing separate to buy. Set a daily cap before you turn it on.