Privacy Policy

1. Information we process

We process only information needed to provide the Shopify app, storefront app proxy, virtual try-on generation, subscription management, and usage tracking.

• Shop and installation information: shop domain, Shopify shop ID or GID, installation status, granted scopes, session information, and security-related request data.
• Product and storefront information: product identifiers, product image URLs, and related information needed to display or generate a try-on result.
• Images and generation data: a shopper photo, the selected product image, generation task status, and the resulting try-on image when the feature is used. These images may contain an identifiable person, but we do not use them to identify a person or create a biometric identifier.
• Subscription and usage information: selected plan, billing status, monthly usage count, quota, and remaining usage allowance.
• Basic technical information: information necessary to secure, operate, troubleshoot, and monitor the service, such as timestamps, request logs, and error details.

We do not request Shopify admin passwords. Shopify authentication tokens are handled by our server and are not shown to storefront visitors.

2. How we use information

We use the information above to:

• authenticate the merchant and connect the app to a shop;
• provide product-page virtual try-on functionality;
• process uploaded photos and return requested results;
• apply subscription plans, quotas, and usage charges;
• provide support, prevent misuse, and protect the service; and
• meet legal, security, and Shopify platform requirements.

We do not sell personal information or use shopper images for advertising, facial recognition, or unrelated model training.

3. Sharing and service providers

We share information only when necessary to operate the service. This may include sharing relevant shop and storefront information with Shopify, and sending the selected product image, shopper photo, and task data to hosting or AI processing providers that help us generate the requested result. Providers may process data in countries outside the merchant's location and are required to protect it and use it only for the contracted service.

We may also disclose information when required by law, to respond to a valid legal request, or to protect the rights, safety, and security of Vidoly, merchants, shoppers, or the public.

4. Retention and deletion

Uploaded shopper photos, product images copied for processing, and generated results are retained only for the time reasonably needed to complete the requested generation, provide support, and protect the service. We then delete or de-identify them according to our retention controls.

Shop connection, subscription, usage, and security records are retained while needed to provide the app, resolve disputes, maintain security, or comply with law. When a merchant uninstalls the app, we stop using the shop connection and delete or anonymize associated app data, except where retention is legally required.

We support Shopify's compliance requests, including customer data requests, customer redaction requests, shop redaction requests, and app uninstall events. These requests are handled by the designated compliance webhook endpoint.

5. Your choices and rights

Merchants can request access to, correction of, or deletion of their app data by contacting us. A shopper can ask the merchant who collected the photo to submit a request, or contact us directly. We may need to verify the request before acting on it.

Merchants are responsible for providing appropriate notice and obtaining any permission required before uploading a shopper's photo or product content to the app.

6. Security

We use reasonable technical and organizational safeguards to protect information against unauthorized access, loss, misuse, or alteration. No online service can guarantee absolute security, so merchants should use the app and upload content responsibly.

7. Changes to this policy

We may update this policy when the app, our processing practices, or applicable requirements change. The date at the top of this page shows when it was last updated. Continued use of the app after an update means the updated policy applies to future processing.