Privacy policy
WeTryOn · Last updated 28 September 2026 · Plain-language summary
WeTryOn is a Shopify app that lets a shopper see themselves wearing a product, live, on a store's product page. This policy explains what the app collects, who receives it, and what it is never used for.
The short version. Your camera video is streamed straight from your browser to the AI providers listed below, used to generate the try-on you are watching, and nothing else. It never reaches our servers, we never store it, and we never use it to identify you. The store you are shopping with does not receive it. If that store has switched on save and replay, a copy of the try-on is made inside your own browser so you can watch it again or download it — see section 3a. That copy is still never uploaded anywhere.
1. Who we are
The app is operated by XISLABS Pvt Ltd, a company registered in Pakistan. You can reach us, including about anything in this policy, at privacy@xislabs.com.
For a store's own data we act as a processor on that merchant's behalf. For shopper camera video we act as a controller together with the merchant. The companies in section 4 act as our processors under a data processing agreement.
2. What we collect
From the store, through Shopify's APIs: product and variant details and image URLs, so we can build the garment being tried on; the store's domains, recorded once at install so a try-on can only be started from that store; and whether our button is present in the published theme, so the merchant can see if it is live. We request three permissions and no more: read products, manage the app proxy, and read themes.
From the merchant: which products show the button, how each product is described to the AI, an optional product image to use in place of the store's own, how the button and try-on window look, and whether shoppers may save, replay or repeat a try-on. The length of a try-on is set by the merchant's plan. We do not ask merchants for contact details.
From shoppers, only after the on-screen camera notice is accepted:
- Live camera video, for the length of the try-on and no longer.
- A record that consent was given — a timestamp, and cryptographic digests of the exact notice and recipient list that were shown.
- Which product was tried on, and how many seconds were generated.
We do not collect shopper names, email addresses, phone numbers, postal addresses, payment details or order history. Our database has no field that identifies a shopper. We set no cookies on the storefront and use no advertising, analytics or cross-site tracking technologies there. The one thing we do store in your browser is the anonymous counter described in section 6a, and only after you accept the camera notice.
3. What we never do with camera video
- It never reaches our servers, and we never store it. The connection is directly between your browser and the providers below. We keep no copy, at any point, in any form.
- We never use it to identify you. No facial recognition, no matching against any database, no linking to any account.
- We never sell or share it, in the sense those words are given by the CCPA and CPRA.
- We never infer skin tone, body type, age, gender, ethnicity, health or emotion from it, and our providers are not permitted to either.
3a. Saving and replaying your try-on
A store can choose to let you replay your try-on and save it as a video file. Where that is switched on, the recording is made entirely inside your own browser while you watch — it is never uploaded to us, to the store, or to anyone else, and no server is involved at any point. The store may have its name and the product name shown in a corner of the video.
The recording exists only for as long as the try-on window is open. Closing it discards the copy. If you choose to download the file, it is saved by your own browser to your own device, and what happens to it after that is entirely up to you.
The camera notice you accept before the try-on starts tells you which of these two arrangements applies in the store you are visiting, and we keep a cryptographic digest of the exact wording you were shown.
4. Who receives camera video
Your video goes to Decart, which generates the try-on, and to the cloud infrastructure and content-moderation providers Decart uses to deliver it:
| Company | What they do with it | Where |
|---|---|---|
| Decart AI, Inc. | Generates the try-on image from your camera video, in real time. | United States |
| Google LLC (Google Cloud) | Cloud infrastructure, content moderation, and generating the result. | United States |
| Amazon Web Services, Inc. | Cloud infrastructure. | United States |
| Castle Global, Inc. (Hive) | Content moderation. | United States |
This same list is shown to every shopper, one click from the camera notice, before their camera is switched on — and a digest of it is stored with their consent record, so we can show exactly which recipients they were told about.
The store does not receive your video. Neither does any advertiser, analytics provider or data broker. We have no such integrations.
5. Why we are allowed to process it
Your explicit, opt-in consent, given before your camera is accessed. The notice tells you what is collected, who receives it and that the result is generated by AI.
We ask every time rather than remembering your answer. A remembered consent would mean a camera switching on with nothing on screen explaining why, and a biometric release is properly given per use. Declining costs nothing and starts nothing — no session is created and no provider is contacted.
6. How long things are kept
| Data | Kept for |
|---|---|
| Camera video — by us | Never stored. It does not reach our systems. |
| Your try-on video — on your own device | Only if this store turned on “replay and save”, and only in your own browser. It is never uploaded to us, and it is deleted when you close the try-on window. If you choose to download it, the copy on your device is yours and this policy no longer governs it. Stores that have not turned this on record nothing at all, and their camera notice says so. |
| Camera video — by our providers | Used to generate your try-on, and only for as long as that try-on runs. The maximum is set by the store you are shopping on and is shown to you in the camera notice, before your camera is switched on. They may process it only to provide that service, may not sell or share it, and are contractually required to delete it and certify that deletion. We are seeking a specific maximum period from them and will state it here once we have it in writing. |
| Consent records | Three years, so we can evidence what was agreed. |
| Session records (product, seconds used) | Three years. They contain no name, no account, and no contact detail — only the anonymous counter described in section 6a. |
| Merchant settings and store domains | While the app is installed, then deleted when the store is removed or requests erasure. |
6a. The anonymous try-on counter
The try-on stores a random identifier in your browser, on the store's own site, the first time you accept the camera notice there, and never before. It is a random number: it is not derived from your device, your account or your camera, and it is not a tracking pixel or third-party cookie.
It is used for two things, and nothing else. First, so a store can see how many different shoppers tried a product, as opposed to one shopper trying it five times. Second, where a store has chosen not to allow repeat try-ons, to recognise that this browser has already tried this particular product during the current month — in which case the try-on is declined and you are told why.
Our systems keep only a keyed cryptographic digest of it, different for every store, so it cannot be used to follow you from one store to another. It is never joined to your name, email or customer account — we do not receive those — and it is never shared. Clearing your browser's site data removes it, and a new one is only created if you accept the camera notice again.
7. Where the data goes
Camera video goes only to the providers in section 4, all of which are in the United States. It is never stored on our own systems, and it never reaches Pakistan.
The records we do keep — merchant settings, and session data that contains no shopper identifier — are held on servers in the United States and administered by our team in Pakistan.
For shoppers in the European Economic Area, the United Kingdom or Switzerland, transfers to our processing providers are covered by Standard Contractual Clauses in our data processing agreement with them.
8. Your rights
Depending on where you live, you may have the right to access, correct, delete, restrict or port your personal data, and to withdraw consent. To withdraw consent for a try-on, simply close the window — nothing continues after that.
We want to be straightforward about one limit. Because we deliberately store no identifier linking a try-on to a person, we usually cannot find an individual shopper's records — which is also why we cannot hand them to anyone else by mistake. Where the law requires us to identify you before acting, and we genuinely cannot, we will tell you so rather than collect more data about you in order to look. If you can give us enough detail to locate a specific session, write to us and we will act on it.
Merchants can raise requests through Shopify's standard privacy request flow. We respond to those within 30 days.
9. How it is protected
Everything is encrypted in transit. Camera video travels over an encrypted real-time connection directly between your browser and the provider. Our database is not reachable from the public internet. The credentials that could authorise generation never reach a browser: the page receives only a 120-second token limited to one model, one store and one maximum duration.
Our processing provider holds SOC 2 Type 2, ISO 27001 and ISO 42001 certification, and owes us notice of any breach within 48 hours.
10. Children
The app is not intended for children, and we do not knowingly process a child's camera video. If you believe a child has used it, contact us and we will act.
11. Changes
If we change this policy we will update the date at the top. If a change affects what shoppers are told before their camera is used, the on-screen notice is updated at the same time and consent is asked again.
WeTryOn · Last updated 28 September 2026 · privacy@xislabs.com