Privacy Policy
1. Definitions
For the purposes of this Policy:
- “Merchant”: A fashion house, brand or retailer that runs a Shopify store and uses the App to offer virtual try-on to its customers and shoppers.
- “Shopper(s)” or “Customer(s)”: A person who uses the try-on feature while shopping on a Merchant's store.
- “User Image”: The photo or selfie you upload to try a product on.
- “Result Image”: The AI-generated picture that shows the product on you, made from your photo and the product image.
- “Merchant Content”: The product images, product details and branding that a Merchant provides.
2. Roles: Controller and Processor
2.1 Merchant Controller Role: When a Merchant installs the App on its Shopify store, the Merchant is generally the data controller/fiduciary in respect of its Shoppers' personal data, and Hope Vision AI acts as a data processor providing the try-on service on the Merchant's instructions.
2.2 Hope Vision AI Fiduciary Role: Hope Vision AI additionally acts as a data controller/fiduciary in its own right in respect of: (a) Merchant account and billing information; (b) support communications; (c) security and fraud-prevention information; (d) service administration; (e) aggregated or de-identified product analytics; and (f) any information a Shopper elects to provide directly to Hope Vision AI (e.g., support requests).
3. Information We Collect
- Name: The name provided by the Customer/Shopper when using the App.
- Email address: The email address provided by the Customer/Shopper, used for account and communication purposes, including delivering try-on results.
- User Images: The photograph(s) or selfie(s) uploaded by the Shopper (“User Images”) for the virtual try-on feature.
- Result Images: The AI-generated virtual try-on image(s) (“Result Images”) produced using a User Image and product imagery.
- Products tried: Information about which products a Shopper has tried on using the App.
- Date and time: The date and time of each try-on session and related interaction with the App.
- Phone number and verification data: Where a Shopper chooses to receive a Result Image via WhatsApp, email or another supported channel, or where phone verification is required, we collect the phone number and related OTP records needed to deliver results and prevent misuse. Phone numbers collected for result delivery are never automatically used for marketing.
- Device and usage data: Technical information such as device type, browser, IP address (or privacy-protected form), approximate location, session activity, try-on events, and performance logs.
- Merchant and store data: Store identifiers, domain, Shopify access tokens, product catalogue and imagery, store branding, and billing status via Shopify APIs.
- Support communications: Information contained in support requests, including contact details and technical logs.
4. How We Use Information
4.1 User Image Usage: User Images are used solely to: (a) generate the requested virtual try-on visualization; (b) improve the accuracy and realism of our AI models, only where the Shopper has given explicit, opt-in consent; and (c) provide customer support relating to the specific try-on session.
4.2 Operational Usage: Device, usage, store, product and account data are used to: operate and maintain the App; authenticate users; deliver Result Images; provide WhatsApp or email sharing; maintain Merchant configurations; process billing; prevent fraud; diagnose issues; and fulfill statutory obligations.
5. Legal Basis for Processing
5.1 Consent for Photos: We process User Images on the basis of the Customer's/Shopper's explicit, freely given consent, obtained at the point of upload through a clear affirmative action (e.g., “Upload & Try On” button following disclosure of this Policy).
5.2 Statutory Grounds: We process other categories of data on the basis of: performance of contract, legitimate interests in operating and securing the App, and compliance with legal obligations under the Digital Personal Data Protection Act, 2023 (“DPDP Act”) and, where applicable, EU/UK GDPR.
6. AI Model Training, Product Improvement and Consent
User Images are not used for AI-model training by default. If Lookify offers a separate program allowing Shoppers to contribute images toward AI or model improvement, participation will require a separate, explicit and optional opt-in consent. Declining such consent will not prevent the Shopper from using the standard virtual try-on service. A Shopper who has opted in may subsequently withdraw that consent and request deletion at any time.
7. Data Retention and Deletion
We follow a data-minimization approach and retain personal information only as long as reasonably necessary:
- User Images: Processed transiently to generate the try-on result and automatically deleted from active systems within 24 hours of the session.
- Result Images: Temporarily stored to allow viewing, downloading or sharing. Automatically deleted when the session/account becomes inactive.
- Saved Profile Photos: Retained until deleted or replaced by the Shopper, or upon account deletion.
- Phone Numbers & Verification Data: Retained for authentication and security; standard retention is 1 year.
- Merchant Data: Retained while active. Deleted or de-identified upon uninstallation or valid Shopify deletion request.
- Billing & Transaction Records: Retained as required for accounting, taxation, and statutory obligations.
8. How Long We Keep Your Photo – In Plain Language
We keep images for this short 24-hour window (rather than deleting them the instant a result is generated) to: (a) let you view, re-download or share your result; (b) understand overall usage patterns and service reliability; (c) troubleshoot session issues; and (d) allow optional comparison where requested.
9. Collecting and Managing Your Pictures
9.1 Collection: We collect a picture only when you actively choose to upload or capture one for virtual try-on.
9.2 Processing & Access: Once uploaded, pictures are processed by our AI systems. Photos are never viewed by staff except when necessary to investigate a specific technical support request.
9.3 Deletion: Pictures are deleted automatically at the end of the retention window using non-recoverable erasure processes.
10. Shopify Privacy Requests
We support applicable mandatory privacy webhooks received through Shopify, including requests relating to: access to stored customer data; deletion/redaction of customer data; and deletion/redaction of store information following uninstall.
11. How We Share Information
We do not sell User Images or personal information. We share information only with trusted sub-processors strictly to deliver the App:
12. Merchant Use of Shopper Images
Merchants may not use identifiable Shopper User Images or Result Images for advertising, marketing, social-media promotion, product campaigns, model imagery, or other independent commercial purposes, unless the Shopper has separately provided appropriate permission for that specific use.
13. Data Security
We implement reasonable technical and organizational safeguards including encryption in transit (TLS 1.3), encryption at rest (AES-256), secure API tokens, access controls, multi-factor authentication, and security monitoring.
14. Your Rights
Subject to applicable law, you have the right to request access, correction, consent withdrawal, deletion, restriction, and data portability. To exercise your rights, contact us at app@lookify.in.
15. Cookies, Analytics and Tracking
Our components may use essential cookies and session technologies for core functionality and session security. Optional tracking is subject to user consent choices where required by law.
16. Children's Privacy
The App is not directed to individuals under 18 years of age without parental/guardian consent. We do not knowingly collect personal data from children.
17. International Data Transfers
Your information may be processed on servers located outside your country of residence, including in India and other provider regions, subject to appropriate contractual and legal safeguards.
18. Merchant Responsibilities
Merchants using Lookify must disclose App usage in their privacy notices, obtain required shopper consents, honor privacy choices, and use shopper data solely for lawful purposes.
19. Grievance Officer / Contact
In accordance with the DPDP Act and IT Act rules, our Grievance Officer details are:
20. Changes to This Policy
We may update this Policy from time to time. Material updates will be notified via the App, website, or email with an updated revision date.