Privacy Policy

1. Who we are

Drape ("we", "us", "our") is a virtual try-on service built and operated by eCommerce technology professionals with experience working with Indian and international D2C fashion brands. The app is available on the Shopify App Store at drapetryon.com.

2. Data we collect

From merchants (store owners)

• Store name, email address, and Shopify shop domain
• Shopify access token (used only to make Shopify API calls on your behalf)
• Billing information (managed entirely by Shopify — we do not store card details)
• Try-on usage statistics (counts, dates, product URLs)

From shoppers (your customers)

• Person photo — uploaded by the shopper to generate a try-on. This image is processed immediately and deleted within 1 hour. It is never stored permanently and is never associated with any personal identifier.
• Try-on result image— the AI-generated output, stored against the merchant's account for analytics and dispute resolution. It contains no identifiable information other than the garment overlay.
• Optional rating — a thumbs up or thumbs down submitted voluntarily after a try-on. No personal identifier is attached.

We do not collect shopper names, email addresses, or any other personally identifying information.

3. How we use data

• To generate AI-powered virtual try-on results
• To display analytics to the merchant (try-on counts, satisfaction ratings)
• To enforce plan limits and process billing through Shopify
• To respond to support requests

We do not sell, rent, or share personal data with third parties for marketing purposes.

4. Third-party service providers

To operate the service, we work with carefully selected third-party providers. These providers process data only as needed to deliver the specific function described:

• AI image processing — person and garment photos are sent to a third-party AI service to generate the try-on result. Images are used solely for this purpose and are not retained by the provider beyond the immediate request.
• Cloud storage — try-on result images are stored with a cloud infrastructure provider and are accessible only to us and the relevant merchant.
• Shopify — billing, app installation, and access token management are handled by Shopify. We receive only the information necessary to operate the app on your store.
• Infrastructure services — we use standard infrastructure services (caching, database) to operate reliably. These do not store personal data beyond what is required for operation.

We do not use advertising networks, analytics trackers, or marketing platforms.

5. Data retention

• Shopper person photos: deleted within 1 hour of the try-on
• Try-on result images: retained while the merchant's account is active; deleted when the merchant uninstalls the app
• Merchant account data: retained for the duration of the subscription; deleted upon written request

6. Merchant data deletion (GDPR / Shopify requirement)

When a merchant uninstalls the Drape app from their Shopify store, we receive a Shopify app/uninstalledwebhook. We deactivate the merchant's account and stop all data processing. Merchants can request full deletion of their data and all associated try-on records via our support form. We will complete deletion within 30 days.

7. Shopper data requests

Because shopper photos are deleted within 1 hour and no personally identifying information is retained, there is no persistent shopper data to retrieve or delete after that window. If a shopper has concerns, they should contact the merchant whose store they used; the merchant may escalate to us via our support form.

8. Cookies and tracking

The Drape widget embedded on merchant storefronts does not set any cookies and does not track shoppers across sessions or sites. No analytics pixels or advertising trackers are included.

9. Security

All data is transmitted over HTTPS and TLS-encrypted connections. Our database server enforces SSL for all connections. Person photos are stored in isolated, access-controlled cloud storage and automatically purged. We do not log or cache shopper images beyond what is required for the immediate try-on request.

10. Changes to this policy

We may update this policy to reflect changes in our practices or for legal reasons. The "Last updated" date at the top of this page will be revised accordingly. Continued use of Drape after changes are posted constitutes acceptance of the updated policy.

11. Contact

For any privacy-related questions or data deletion requests, please use our support form. We aim to respond within 1–2 business days.