Privacy Policy

This Privacy Policy explains how ETRYON LTD (“ETRYON”, “we”, “our”, or “us”) collects, uses, shares, and protects information when you use our website, applications, Shopify app, WooCommerce/WordPress plugin, APIs, and related services (the “Services”).

‍

If you do not agree with this Privacy Policy, do not use the Services.

‍

1. Who we are / Contact

‍

Controller: ETRYON LTD

Email: hello@etryon.ai

Address: 128, City Road, London, EC1V 2NX, UNITED KINGDOM

‍

2. Scope of this Policy

‍

This Policy applies to:

‍

• etryon.ai website and related web apps
• Shopify app (“Etryon Virtual Try-On”) and its embedded admin experience
• Theme App Extension and storefront features on Shopify
• WooCommerce/WordPress plugin and its storefront/admin features
• Our APIs and infrastructure used to deliver try-on generation

3. Information we collect

‍

We collect information in the following categories:

‍

A. Account and merchant information

‍

• Name, email address, login identifiers (as applicable)
• For merchants: store identifier (e.g., shop domain), app installation details, and app configuration

‍

B. Commerce platform data (Shopify / WooCommerce / WordPress)

‍

Depending on the platform and settings, we may process:

‍

• Store domain and store/app installation identifiers
• Storefront configuration and admin settings (e.g., enabled products/collections, UI settings, daily limits)
• Subscription/billing status and plan identifiers (Shopify Billing for the Shopify app; Stripe for website/WooCommerce/WordPress offerings)
• Operational logs and event records needed to run the Services, prevent abuse, and support customers

‍

Shopify Admin API data: Our Shopify app may read limited product and collection data (e.g., titles, images) to help merchants configure where try-on is enabled.

‍

C. User content (images and generation inputs)

‍

When an end user or merchant uploads images for virtual try-on, we process:

‍

• Uploaded photos
• Generation parameters (e.g., selected background options, UI parameters, technical metadata needed to process the request)
• Generated output images

‍

D. Usage and device information

‍

We may collect:

• Device/browser information (e.g., user agent)
• App/website usage activity and basic analytics
• IP address and approximate location derived from IP (for security and fraud prevention)

‍

E. Payment-related information

‍

We do not store full payment card numbers.

‍

• Stripe (website / WooCommerce / WordPress): We may receive billing status, payment confirmations, invoices/transaction identifiers, and limited billing/contact data needed for support and accounting.
• Shopify Billing (Shopify app): Shopify processes payments. We receive subscription status and related identifiers/events needed to manage access and credits.

‍

4. How we use information

‍

We use information to:

‍

• Provide, maintain, and secure the Services
• Process virtual try-on generation requests and display results
• Manage accounts, subscriptions, credits, and access controls
• Provide customer support and troubleshoot issues
• Improve reliability, performance, and user experience
• Detect, prevent, and respond to abuse, fraud, or security incidents
• Comply with legal obligations

‍

5. AI processing and third-party AI providers

‍

AI Processing. Virtual try-on generation requires processing user-uploaded images and request parameters. To provide this functionality, we use third-party AI service providers as subprocessors, including OpenAI (ChatGPT) and Google image generation services.

‍

We send only the data necessary to perform the requested generation (for example, images and generation parameters). Third-party AI providers process data under their applicable terms and policies.

‍

No general training by ETRYON. We do not use merchant or end-user uploaded images to train our own general-purpose AI models.

‍

6. Legal bases (where applicable)

‍

Where required by law (e.g., GDPR), we rely on:

‍

• Contract performance (to deliver the Services you request)
• Legitimate interests (security, fraud prevention, product improvement)
• Consent (where required, e.g., certain cookies/marketing)

‍

7. Sharing and disclosure

‍

We share information only as needed to operate the Services, including with:

‍

• Service providers / subprocessors (cloud hosting, storage, analytics, customer support tooling, AI providers such as OpenAI and Google, and payment processors such as Stripe)
• Commerce platforms (Shopify and WooCommerce/WordPress, as applicable to installations, billing status, and compliance requests)
• Legal/Compliance (if required to comply with law, enforce our terms, or protect rights and safety)

‍

We do not sell personal information.

‍

8.  International transfers

‍

Your information may be processed in countries other than your own, including where our service providers operate. We take reasonable steps to protect data in transit and at rest and to use reputable providers and contractual safeguards where appropriate.

‍

9. Data retention

‍

Default retention. By default, we retain uploaded images and generated try-on images for up to 14 days, unless a merchant configures a different retention period or a longer retention is required for legal, security, or accounting purposes.

‍

Configurable retention. Merchants may be able to configure retention options (including shorter or longer periods) depending on the platform and settings.

‍

Operational and billing records. We may retain limited operational logs and billing records (e.g., invoices/transaction identifiers, subscription status history, abuse-prevention logs) for compliance, accounting, and fraud prevention, even after content is deleted.

‍

10. Deletion, uninstall, and platform data requests

‍

A. Shopify app uninstall

‍

If a merchant uninstalls our Shopify app, we stop processing new requests for that shop. Certain shop-level settings, generation records, and billing/credit records may remain in our systems for a limited time consistent with our retention practices and platform requirements.

‍

B. Shopify data rights (GDPR webhooks)

‍

Shopify may send data rights requests (such as erasure/redaction requests). We respond to applicable requests and delete or de-identify data as required by Shopify’s processes and applicable law.

‍

C. WordPress/WooCommerce uninstall

‍

Uninstalling the WooCommerce/WordPress plugin may not automatically delete all stored data by default. Where supported, merchants can enable an uninstall purge option (for example, an uninstall purge setting/flag) and then uninstall to remove plugin data. Merchants can also contact us for assistance with deletion.

‍

11. Security

‍

We implement reasonable administrative, technical, and organizational safeguards designed to protect information. No method of transmission or storage is 100% secure.

‍

12. Cookies and analytics

‍

We may use cookies and similar technologies for:

‍

• Essential site/app functions
• Security
• Analytics and performance measurement

You can manage cookies through your browser settings and, where available, consent controls.

‍

13. Your rights

‍

Depending on your location, you may have rights to:

‍

• Access, correct, or delete personal information
• Object to or restrict processing
• Request portability
• Withdraw consent (where processing is based on consent)

To exercise rights, contact us at hello@etryon.ai. We may need to verify your request.

‍

14. Children’s privacy

‍

The Services are not intended for children under 13, and we do not knowingly collect personal information from children under 13.

‍

15. Changes to this Policy

‍

We may update this Policy from time to time. We will post the updated version on this page and update the “Last updated” date.

‍

‍

‍

ETRYON LTD

‍Contact: hello@etryon.ai

Address: 128, City Road, London, EC1V 2NX, UNITED KINGDOM

‍