Privacy Policy

1. Information We Collect

When you install ModiTry, we collect your Shopify store information including store name, domain, and email address. When customers use the virtual try-on feature, we temporarily process their uploaded photos.

We may also collect:

• Usage analytics (widget loads, button clicks, try-on generations)
• Session identifiers for widget functionality
• Email addresses voluntarily provided by customers via the email capture feature
• Product information synced from your Shopify store
• Browser type and device information for compatibility purposes

2. How We Use Your Data

We use your information to:

• Provide the virtual try-on service and generate AI-powered try-on images
• Display analytics and insights in your merchant dashboard
• Send service-related communications (billing, usage alerts, critical updates)
• Provide customer support
• Monitor and improve service performance and reliability

We do not sell personal data to third parties. We do not use customer photos to train AI models.

3. Third-Party Data Processors

To provide our virtual try-on service, we share limited data with the following third-party processors:

• FASHN API — AI virtual try-on image generation. Receives garment images and customer-uploaded photos. Data is processed transiently and not retained by FASHN after processing.
• Amazon Web Services (AWS) / Cloudflare R2 — Cloud storage for uploaded and generated images. Images are stored encrypted at rest.
• Shopify — App hosting platform, billing, and store data synchronization.
• Resend — Transactional email delivery for try-on results sent to customers.

All third-party processors are bound by data processing agreements and are required to handle data in accordance with applicable privacy laws.

4. Data Retention

Customer photos uploaded for try-on are automatically deleted after 24 hours. Generated try-on result images are also deleted after 24 hours. Store data (products, analytics, settings) is retained while you have an active subscription.

Upon app uninstallation, your account is deactivated. Upon receiving a shop data erasure request from Shopify, all associated data is permanently deleted, including products, try-on records, leads, analytics, and stored images.

5. Cookie Policy

ModiTry uses minimal cookies and browser storage:

• Session cookies — Used to maintain your authenticated session in the merchant dashboard. These are essential for app functionality.
• Widget session ID — A randomly generated identifier stored in the browser session to track widget interactions. This is not a tracking cookie and is cleared when the browser session ends.

We do not use advertising cookies, tracking pixels, or third-party analytics cookies.

6. Data Security

All data is encrypted in transit using TLS 1.2 or higher and at rest using AES-256. We follow industry-standard security practices to protect your information, including:

• HMAC verification on all Shopify webhook payloads
• Rate limiting on all public-facing API endpoints
• Content Security Policy (CSP) headers
• Regular security reviews of our codebase and infrastructure

7. Data Transfers

Your data may be processed in the United States and other countries where our service providers operate. When data is transferred outside your jurisdiction, we ensure appropriate safeguards are in place, including standard contractual clauses where required by applicable law.

8. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access — Request a copy of the personal data we hold about you
• Deletion — Request deletion of your personal data
• Correction — Request correction of inaccurate data
• Portability — Request your data in a portable format
• Objection — Object to certain processing activities

To exercise these rights, contact us at privacy@moditry.com. We will respond within 30 days.

Shopify store customers can also request data access or deletion through the store owner, which will trigger Shopify's GDPR webhooks that we process automatically.

9. Children's Privacy

ModiTry is not intended for use by children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal data from a child under 13, we will take steps to delete that information promptly.

10. CCPA Compliance

If you are a California resident, you have the right under the California Consumer Privacy Act (CCPA) to:

• Know what personal information is collected about you
• Know whether your personal information is sold or disclosed and to whom
• Request deletion of your personal information
• Not be discriminated against for exercising your CCPA rights

We do not sell personal information. To make a CCPA request, contact privacy@moditry.com.

11. Changes to This Policy

We may update this privacy policy from time to time. When we make material changes, we will notify you by updating the "Last updated" date at the top of this policy and, where appropriate, sending a notification to the email associated with your Shopify store.

We encourage you to review this policy periodically. Continued use of the service after changes constitutes acceptance of the updated policy.

12. Contact

For privacy-related inquiries, contact us at privacy@moditry.com.