Fitting Room collects data necessary to authenticate your store, show the fitting room on your product pages, and generate an outfit preview.

Merchant and store data

• Your Shopify store domain, shop name, shop email, shop owner name, currency, a shipping-zone country code, Shopify plan name, store created date, and Shopify shop identifier
• Your OAuth access token, and staff session details Shopify provides when you use the embedded app (for example name, email, user id, and locale where Shopify supplies them)
• Settings you choose, such as whether the fitting room is on, whether extra try-ons are allowed, your app plan, and which model is shown (man or woman)
• Model photos you upload to replace a starter photo. You may upload a JPEG, PNG, or WebP under 8 MB. The file is stored in your Shopify Files. We keep the Shopify file id and the public image URL on your shop record
• A monthly count of completed try-ons for your store, used to apply your plan allowance and Shopify usage charges
• Help messages you send from the app when in-app chat is not connected. We store the shop domain and the message text

Try-on data

• The pieces placed in the fitting room: product id, variant id, title, category (top, coat, trousers, shoes, or hat), and the product image URL already published on your storefront
• The model photo URL used for that preview
• The generated image, its file type, generation status, the provider job id, and the provider cost of that generation
• A cache key so the same outfit on the same model is not generated again

Theme files are read only to check whether the fitting room button is enabled in your current theme. Fitting Room does not keep a separate copy of your product catalog.

What we do not collect

Shoppers do not upload a photo of themselves. The fitting room uses the model photo you choose. We do not use Fitting Room to collect customer names, email addresses, mailing addresses, order contents, or payment card data. Payment processing for Shopify checkout and for app billing is handled entirely by Shopify and your payment providers.

We use the data we collect solely to operate Fitting Room:

• Authenticate your store and keep a secure embedded-app session
• Save whether the fitting room is on, which model is shown, and the model photo URLs
• Send the model photo URL and the selected product image URLs to our image provider so it can generate the outfit preview
• Store the finished image so the same outfit can be shown again without a new generation
• Count try-ons for the month and record extra usage with Shopify Billing when your plan allows it
• Check whether the fitting room button is turned on in your theme
• Send our team a short operational notice when a store installs or opens the app, so we can support new merchants
• Read and reply to help messages you send us

The fitting room button runs in your theme. Adding a piece to the cart uses your store’s own cart. Fitting Room does not send a shopper’s name, email, or browsing history back to us.

We do not sell, rent, share, or trade merchant or customer personal data with third parties for advertising, marketing, or unrelated commercial purposes.

Fitting Room does not send email to your customers. Subscription and receipt emails for app billing are handled by Shopify according to Shopify’s policies.

Support

If you contact us by email, or through the in-app chat, we use your message and contact details only to respond to your request. We do not add you to marketing lists solely because you wrote to support. In-app chat is provided by Crisp when it is connected. Messages you send there are processed by Crisp to deliver the conversation to us. If chat is not connected, the message is stored in our database with your shop domain.

Application data is stored in PostgreSQL databases on secure cloud infrastructure. Generated try-on images are stored in that database. Model photos you upload are stored by Shopify in your store’s Files. We implement industry-standard measures including:

• Encrypted connections (HTTPS/TLS) between clients and our servers
• Secure OAuth and API access through Shopify
• Environment-based management of secrets and credentials
• Database access limited to the application services that require it

We do not store customer payment information. Billing for the app is handled through Shopify.

We retain your shop record, settings, sessions, try-on results, monthly try-on counts, and any stored help messages for as long as Fitting Room remains installed and your store remains active in our system. When you uninstall the app, we delete the OAuth sessions and the shop settings record for that store, including the saved model choice and model photo links. About 48 hours later, Shopify sends us a shop redaction request and we delete the generated try-on images, monthly try-on counts, and help messages we stored for that store. You can ask us to delete them sooner. Model photos you uploaded stay in your Shopify Files until you remove them or Shopify removes app-owned files as part of uninstall. Fitting Room does not store customer personal data. When a customer redaction request arrives, there are no customer records in our database to delete. You may request deletion of remaining app-held records, or ask a data question, by contacting us at [email protected]

Fitting Room does not store customer personal data. A customer data request or a customer redaction therefore has no customer records in our database to return or delete.

Uninstall deletes the OAuth sessions and the shop settings record. When Shopify sends the shop redaction request, about 48 hours after uninstall, we delete every remaining record for that store, including generated try-on images, monthly try-on counts, and stored help messages. You can ask for earlier deletion at [email protected]

Every compliance webhook is verified with Shopify’s HMAC signature. Requests with an invalid signature are rejected.

Where the GDPR applies, merchants remain the data controller for their customers’ personal data. Fitting Room processes merchant and store data, and the product image URLs needed to generate a preview. The preview is shown in the shopper’s browser. Shoppers are not asked to create an account with Fitting Room.

Fitting Room relies on:

• Shopify APIs — to authenticate, check the theme embed, upload model photos to your Files, and bill the app within the scopes you grant
• Genlook — to generate the outfit preview. We send the model photo URL, and for each selected piece the product id, variant id, title, category, and product image URL. We do not send a shopper name or email, because we do not have them. Genlook returns the generated image
• Cloud hosting — to run the application and databases
• Crisp — to deliver in-app support chat if you open it
• Telegram — to deliver an operational install and app-open notice to the Apps Alchemy team. That notice can include store name, domain, owner name, shop email, store country, currency, Shopify plan, app plan, and the year the store was created

These providers process data only as needed to host the service, generate the preview, deliver support, or notify our team of new installs.

The embedded Fitting Room admin experience runs inside Shopify. Session and security cookies follow Shopify’s practices as described in Shopify’s documentation. If you open in-app chat, Crisp may set cookies needed to keep that conversation working inside the embedded app.

This standalone policy page does not set marketing cookies or third-party tracking scripts. The storefront fitting room does not set tracking cookies and does not identify the shopper. A try-on request asks our app, through your store, for a preview of the selected products on your model photo.

As a merchant, you can:

• Turn the fitting room on or off from the app at any time
• Choose the man or woman model, and replace either photo with your own
• Uninstall Fitting Room to stop future data processing associated with the app
• Contact us to delete generated try-on images, monthly counts, and help messages before the automatic deletion that follows uninstall
• Contact us for privacy questions or assistance with data subject requests that involve our records

We may update this privacy policy to reflect changes in our practices, technology, or legal requirements. We will revise the “Last updated” date on this page when we do. Continued use of the app after updates constitutes acceptance of the revised policy where permitted by law. We may notify you of material changes through the app or by email when appropriate.

If you have questions about this privacy policy or Fitting Room data practices, contact:

Apps Alchemy
[email protected]

We aim to respond to privacy-related inquiries promptly.