Privacy Policy

1. Introduction

AI Virtual Try-On - Purple Lab ("we," "our," or "us") is committed to protecting the privacy and security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Shopify application.

2. Information We Collect

2.1 Merchant Information

• Shopify store domain and basic store information
• Product data including titles, descriptions, and images
• Usage analytics and billing information
• Support communications and feedback

2.2 Customer Information (End Users)

• Photos uploaded for virtual try-on processing
• Email addresses (if provided voluntarily)
• IP addresses and basic technical information
• Virtual try-on results and sharing preferences

2.3 Technical Information

• Device information and browser details
• App usage statistics and performance data
• Error logs and diagnostic information

3. How We Use Your Information

3.1 AI Processing

We use Google Gemini AI services to process customer photos and generate virtual try-on images. This processing occurs securely and images are not stored permanently by Google's AI service.

3.2 Service Provision

• Generate virtual try-on images using AI technology
• Provide app functionality and customer support
• Process billing and manage subscriptions
• Analyze usage patterns to improve our service

3.3 Communications

• Send service-related notifications and updates
• Respond to inquiries and provide customer support
• Share usage alerts and billing notifications

4. Data Storage and Security

4.1 Storage

We store data using Supabase (hosted on secure cloud infrastructure). Customer photos and generated images are stored temporarily and can be deleted upon request.

4.2 Security Measures

• Data encryption in transit and at rest
• Access controls and authentication systems
• Regular security audits and monitoring
• Secure API endpoints with authentication

4.3 Data Retention

• Customer photos: Stored temporarily, deleted after 30 days unless saved by customer
• Virtual try-on results: Stored until customer requests deletion or app is uninstalled
• Usage analytics: Stored for 2 years for service improvement
• Billing records: Retained as required by law and accounting practices

5. Data Sharing and Disclosure

5.1 Third-Party Services

• Google Gemini AI: For virtual try-on image generation (images processed but not stored)
• Supabase: For secure data storage and management
• Shopify: For app functionality and billing integration

5.2 We Do Not Sell Personal Information

We do not sell, rent, or lease your personal information to third parties for marketing purposes.

5.3 Legal Requirements

We may disclose information when required by law, legal process, or to protect our rights and safety.

6. Your Rights and Choices

6.1 Access and Control

• Request access to your personal information
• Request correction of inaccurate information
• Request deletion of your personal information
• Opt out of certain data processing activities

6.2 Data Portability

You can request a copy of your data in a machine-readable format.

6.3 Account Deletion

Merchants can delete their account and all associated data by uninstalling the app from their Shopify store.

7. Children's Privacy

Our service is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.

8. International Data Transfers

Your information may be processed in countries other than your country of residence. We ensure appropriate safeguards are in place for international transfers as required by applicable law.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify merchants of significant changes through the app or via email. Continued use of our service after changes constitutes acceptance of the updated policy.

10. GDPR Compliance

If you are in the European Union, you have additional rights under the General Data Protection Regulation (GDPR), including:

• Right to rectification of inaccurate personal data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing

This Privacy Policy is designed to comply with global privacy regulations including GDPR, CCPA, and other applicable laws. For region-specific rights and procedures, please contact us using the information above.