Legal
Privacy Policy
Last updated: October 1, 2026
What we collect
We collect the information you provide to use DRESR: your email and account details, profile photos and body measurements, product images and links you save to your closet, the try-on images we generate for you, and limited subscription and transaction metadata such as your plan, billing status, Stripe customer/subscription identifiers and invoice references. DRESR does not store your full payment-card number.
How we use it
Your photos and measurements are used to render virtual try-ons of products on your body. We use your email to send account-related messages and, if you opt in, product updates. We do not sell your personal data.
AI processing
Try-on generation sends your reference photo and the product image to our AI providers (currently Google and OpenAI). Providers process this data on our behalf and do not retain it for training.
Shopify merchant data processing
When a merchant installs or enables DRESR Retail, the merchant instructs DRESR to process the limited Shopify data required to provide the app's virtual try-on, attribution, analytics, billing, support, security, and compliance features. For Shopify protected customer data, DRESR acts only for the purposes described in these terms and the merchant's enabled app features, applies data minimization and retention limits, and does not sell or use that data for unrelated advertising. DRESR maintains appropriate technical and organizational safeguards, including encrypted transport, private storage, access controls, tenant isolation, short-lived signed asset links, and deletion workflows. Shopify privacy requests and merchant uninstall/redaction events are handled through Shopify's required privacy webhooks and DRESR's corresponding deletion/export procedures.
Shopify storefront try-on
When a Shopify merchant enables DRESR virtual try-on, a shopper can choose to upload a photo directly from that merchant's storefront. The photo is used only to create the requested virtual try-on, is stored privately, and is automatically deleted within 24 hours. The temporary DRESR Retail render is also deleted within 24 hours unless the shopper explicitly saves the result to their DRESR account, in which case the saved copy is governed by the shopper's DRESR account settings and deletion controls. For attribution, Shopify may send DRESR limited order metadata such as order and line-item identifiers, product and variant identifiers, quantity, price, currency, and the private DRESR try-on identifier attached to the cart line. DRESR Retail does not request or persist customer name, email, phone number, shipping or billing address, or payment-card data for this attribution. Raw Retail attribution identifiers are retained for no more than 90 days and are then deleted.
Chrome extension
When you invoke the DRESR Chrome extension on a shopping page, the extension temporarily reads information from the page you are actively viewing, including the page URL and product information such as the product title, brand, price, and selected product image. We use that information only to import the product into DRESR, generate a try-on you request, or save the product to your DRESR Closet. DRESR does not monitor or collect your browsing history in the background. The extension stores your DRESR authentication session and extension preferences using Chrome extension storage. Extension data is not sold or used for personalized advertising.
Payments
Paid subscriptions are processed by Stripe. Stripe receives the payment and billing information needed to complete checkout, process renewals, issue invoices and receipts, handle payment failures, and let you manage billing. DRESR receives only the billing identifiers and status information needed to provide your plan and support your account.
Storage and deletion
Your photos and renders are stored in private buckets and are only ever served to you through signed links that expire after five minutes. You can delete your account from Settings: you re-confirm it is you (your password, or a one-time code emailed to you if you sign in with Google), type a confirmation phrase, and we then sign you out of every session, immediately block any further uploads or renders, and run a background job that removes your account login, profiles, measurements, uploaded photos, generated renders, closet, imports, looks, favourites, trips, stylist conversations and render allowance. If you have an active DRESR subscription, we cancel it before deleting the account so it cannot renew. This normally finishes within minutes and we aim to complete it within 24 hours. Deletion is permanent and cannot be undone. One honest limitation: a signed link that was already issued to your own browser before deletion is a time-limited key we cannot recall, so it may keep working from cache until it expires — never longer than five minutes. After deletion no new link can be issued, because the underlying files are gone. We keep two narrow exceptions: a minimal deletion record (a one-way hash of your email plus timestamps) so we can show the request was honoured, and billing or transaction records we are legally required to retain for tax, accounting, fraud-prevention or dispute purposes, held in minimised form. Encrypted infrastructure backups held by our hosting and database providers may retain copies for a short rolling retention window before they expire; we cannot selectively edit those backups and we do not restore deleted accounts from them.
Cookies and analytics
We use essential cookies for authentication and a small set of privacy-friendly analytics to understand product usage. We do not use advertising trackers.
Contact
Questions? Email privacy@mydresr.com.