Legal

Privacy Policy

Effective Date: March 16, 2026 · Last Updated: March 16, 2026

1. Introduction

This Privacy Policy describes how Studio Try-On ("we," "us," or "our") collects, uses, stores, and protects personal information when you use our website, platform, APIs, widgets, and AI-powered virtual try-on services (collectively, the "Service"). By using the Service, you acknowledge that you have read and understood this Privacy Policy. This policy should be read together with our Terms of Service.

2. Information We Collect

2.1 Account & Contact Information

When you request a demo, create an account, or contact us, we collect:

  • Name and email address
  • Company name and website URL
  • Phone number (if provided)
  • Billing and payment information

2.2 Images & Biometric Data

Our virtual try-on functionality requires processing visual data. Depending on the product vertical, this may include:

  • Fashion & Apparel / Boutique: Photographs of the user's face and body submitted for avatar generation. These images may constitute biometric data under applicable law.
  • Furniture & Interiors: Photographs of rooms or living spaces submitted for product placement visualization.

We process these images using AI models to generate virtual try-on visualizations. The user's facial and body images may be slightly modified by the AI (e.g., lighting, posture) to generate the avatar and resulting composite image.

2.3 Usage & Device Data

We automatically collect:

  • Browser type and version, operating system, and device type
  • IP address and approximate geolocation
  • Pages visited, interaction patterns, and referral sources
  • Try-on usage metrics (number of sessions, products tried, etc.)

2.4 Cookies & Tracking Technologies

We use cookies, pixels, and similar technologies to operate the Service, remember preferences, and analyze traffic. You can manage cookie preferences through your browser settings. Blocking certain cookies may affect functionality.

3. Legal Bases for Processing (GDPR)

If you are located in the European Economic Area (EEA), the United Kingdom (UK), or Switzerland, we process your personal data in accordance with the General Data Protection Regulation (EU) 2016/679 ("GDPR") and applicable local implementing legislation. We rely on the following legal bases under Article 6 GDPR:

  • Consent (Art. 6(1)(a)): We process your images and biometric data for virtual try-on only after you have given explicit, informed consent. You may withdraw consent at any time, which will not affect the lawfulness of processing carried out before withdrawal.
  • Performance of a contract (Art. 6(1)(b)): We process account information, payment data, and usage data as necessary to provide the Service under our subscription agreements and these Terms.
  • Legitimate interests (Art. 6(1)(f)): We process usage and device data for analytics, security, fraud prevention, and Service improvement, where our legitimate interests are not overridden by your rights and freedoms.
  • Legal obligation (Art. 6(1)(c)): We process data where necessary to comply with applicable laws, regulations, or lawful governmental requests.

3.1 Special Categories of Data (Art. 9 GDPR)

Photographs of your face and body used to generate avatars may constitute biometric data, which is classified as a special category of personal data under Article 9 GDPR. We process this data exclusively on the basis of your explicit consent (Art. 9(2)(a)). Before any biometric data is collected, you will be presented with a clear consent mechanism. You may refuse or withdraw consent at any time, in which case the virtual try-on feature will not be available.

4. How We Use Your Information

We use the information we collect to:

  • Provide the Service: Generate virtual try-on visualizations, process avatar creation, and deliver product placement previews.
  • Process transactions: Manage subscriptions, billing, and payment processing.
  • Communicate with you: Respond to inquiries, send service-related notices, and provide customer support.
  • Improve the Service: Analyze usage patterns, diagnose technical issues, and enhance AI model performance.
  • Ensure security: Detect fraud, enforce our terms, and protect against unauthorized access.
  • Comply with law: Meet legal obligations and respond to lawful requests.

5. Image Processing & Data Retention

5.1 How Images Are Processed

When an end user submits images for virtual try-on, those images are transmitted securely to our AI processing infrastructure. The AI generates a composite visualization by superimposing the selected product onto the user's avatar or room image. This is an automated process with no human review of individual images unless required for support or abuse investigation.

5.2 Retention of Image Data

User-submitted images and generated avatars are retained only for the duration necessary to provide the virtual try-on experience. Specifically:

  • Session-based try-ons: Submitted images are processed in real time and automatically deleted within 24 hours of the session ending.
  • Saved avatars: If the platform allows users to save an avatar for repeated use, the avatar data is retained until the user deletes it or their account is terminated.
  • Generated result images: Composite try-on results are stored temporarily for the user to view and are deleted within 30 days unless saved by the user.

Users may request deletion of their image data at any time by contacting us at privacy@studiotryon.com.

5.3 AI Model Training

We do not use individually identifiable user images to train our AI models without explicit consent. We may use anonymized and aggregated data to improve model performance. Users can opt out of anonymized data usage by contacting us.

6. How We Share Your Information

We do not sell your personal information. We may share information with:

  • Service providers: Cloud hosting, payment processors, analytics providers, and email delivery services that assist in operating the Service. These providers are bound by contractual obligations to protect your data.
  • Merchant partners: If you use the try-on feature on a merchant's website (via our embedded widget or API), the merchant may receive aggregated, non-identifiable analytics data. Merchants do not receive your submitted images or biometric data.
  • Legal obligations: We may disclose information if required by law, court order, or governmental request, or to protect our rights, safety, or property.
  • Business transfers: In connection with a merger, acquisition, or sale of assets, your information may be transferred to the successor entity.

7. Data Security

We implement industry-standard security measures including encryption in transit (TLS) and at rest, access controls, regular security audits, and secure cloud infrastructure. However, no method of electronic storage or transmission is 100% secure, and we cannot guarantee absolute security.

8. International Data Transfers

Your data may be processed in jurisdictions outside your country of residence, including countries that may not provide the same level of data protection as your home jurisdiction.

For transfers of personal data from the EEA, UK, or Switzerland to countries not deemed adequate by the European Commission, we implement appropriate safeguards in accordance with Chapter V of the GDPR, including:

  • Standard Contractual Clauses (SCCs): We enter into EU-approved Standard Contractual Clauses with our sub-processors and service providers located outside the EEA.
  • Adequacy decisions: Where applicable, we rely on European Commission adequacy decisions recognizing certain countries as providing adequate data protection.
  • Supplementary measures: Where required, we implement additional technical and organizational measures (such as encryption and pseudonymization) to ensure an essentially equivalent level of protection.

You may request a copy of the safeguards in place by contacting us at privacy@studiotryon.com.

9. Your Rights

9.1 General Rights

Depending on your jurisdiction, you may have the right to:

  • Access (Art. 15 GDPR): Request a copy of the personal data we hold about you and information about how it is processed.
  • Rectification (Art. 16 GDPR): Request correction of inaccurate or incomplete personal data.
  • Erasure (Art. 17 GDPR): Request deletion of your personal data, including submitted images and avatars ("right to be forgotten").
  • Restriction (Art. 18 GDPR): Request that we restrict processing of your data in certain circumstances.
  • Data portability (Art. 20 GDPR): Receive your personal data in a structured, commonly used, machine-readable format, and transmit it to another controller.
  • Objection (Art. 21 GDPR): Object to processing based on legitimate interests or for direct marketing purposes. Where you object, we will cease processing unless we demonstrate compelling legitimate grounds.
  • Withdraw consent (Art. 7(3) GDPR): Where processing is based on consent (including biometric data processing), you may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
  • Automated decision-making (Art. 22 GDPR): You have the right not to be subject to a decision based solely on automated processing that produces legal or similarly significant effects. Our virtual try-on visualizations are not used to make decisions with legal or significant effects on you.

9.2 Right to Lodge a Complaint

If you are located in the EEA or UK, you have the right to lodge a complaint with your local data protection supervisory authority if you believe our processing of your personal data violates the GDPR. A list of EEA supervisory authorities is available at https://edpb.europa.eu.

9.3 How to Exercise Your Rights

To exercise any of these rights, contact us at privacy@studiotryon.com. We will respond within 30 days (or within one calendar month as required by GDPR). If your request is complex, we may extend this period by a further two months, and we will inform you of any such extension within the initial 30-day period.

10. Data Controller & Data Processing

For the purposes of the GDPR, Studio Try-On acts as the data controller for personal data collected directly through our website (e.g., demo requests, account creation). When merchants integrate the Service into their own websites, the merchant is typically the data controller and Studio Try-On acts as a data processor on the merchant's behalf.

Where we act as a data processor, we enter into a Data Processing Agreement (DPA) with the merchant in accordance with Article 28 GDPR. The DPA establishes the subject matter, duration, nature, and purpose of processing, the types of personal data processed, and the obligations and rights of both parties. Merchants may request a DPA by contacting us at privacy@studiotryon.com.

We maintain a record of processing activities in accordance with Article 30 GDPR and ensure that all sub-processors engaged by us are bound by equivalent data protection obligations.

11. Biometric Data (U.S. State Laws)

Certain U.S. states (including Illinois, Texas, Washington, and others) have laws governing the collection and use of biometric data. If you reside in one of these jurisdictions:

  • We collect biometric data (facial and body imagery) solely to provide the virtual try-on service.
  • We obtain your informed consent before collecting biometric data.
  • Biometric data is retained only as long as necessary to fulfill the purpose for which it was collected, or as required by law, whichever is shorter.
  • We do not sell, lease, trade, or otherwise profit from your biometric data.
  • We protect biometric data using the same or higher standard of care as we use for other confidential information.

12. Children's Privacy

The Service is not intended for use by individuals under the age of 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will promptly delete it.

13. Third-Party Links

Our Service may contain links to third-party websites or services. We are not responsible for the privacy practices of those third parties. We encourage you to review their privacy policies before providing any personal information.

14. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or a prominent notice on the Service. The "Last Updated" date at the top reflects the most recent revision. Continued use of the Service after changes take effect constitutes acceptance.

15. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, contact us at:

Studio Try-On
Email: privacy@studiotryon.com