WeTryOn lets a shopper see themselves wearing a product, live, on a store's product page. It comes as a script any website can add, Shopify stores included (section 10b), and as a Shopify app. This policy explains what it collects, who receives it, and what it is never used for. See also our terms of service and acceptable use policy.
The short version. Your camera video is streamed straight from your browser to the AI providers listed below, used to generate the try-on you are watching, and nothing else. It never reaches our servers, we never store it, and we never use it to identify you. The store you are shopping with does not receive it. If that store has switched on save and replay, a copy of the try-on is made inside your own browser so you can watch it again or download it — see section 3a. That copy is still never uploaded anywhere.
1. Who we are
The app is operated by XISLABS Pvt Ltd, a company registered in Pakistan. You can reach us, including about anything in this policy, at support@wetryon.ai.
For a store's own data we act as a processor on that merchant's behalf. For shopper camera video we act as a controller together with the merchant. The companies in section 4 act as our processors under a data processing agreement.
2. What we collect
From the store, through Shopify's APIs: product and variant details and image URLs, so we can build the garment being tried on; the store's domains, recorded once at install so a try-on can only be started from that store; and whether our button is present in the published theme, so the merchant can see if it is live. We request three permissions and no more: read products, manage the app proxy, and read themes.
The store owner's email address, as Shopify provides it, used to send a welcome email when the app is installed and a confirmation when it is uninstalled, and occasional emails from our team about your account or the service (for example, help with setup or your trial), through Resend, an email delivery service. We read it at the moment we send and do not store it. Reply “unsubscribe” to any email from our team and we will stop sending them.
From the merchant: which products show the button, how each product is described to the AI, an optional product image to use in place of the store's own, how the button and try-on window look, and whether shoppers may save, replay or repeat a try-on. The length of a try-on is set by the merchant's plan. We do not ask merchants for contact details.
From shoppers, only after the on-screen camera notice is accepted:
- Live camera video, for the length of the try-on and no longer.
- A record that consent was given — a timestamp, and cryptographic digests of the exact notice and recipient list that were shown.
- Which product was tried on, and how many seconds were generated.
We do not collect shopper names, phone numbers, postal addresses or payment details. We collect a shopper's email address only when a store turns on its optional email step: on the website script (section 10b), or on a Shopify store's Growth or Scale plan (section 6b). A Shopify store on the Scale plan can also let us read its orders' products, quantities and amounts, never who placed them (section 6c). Apart from that, our database has no field that identifies a shopper. We set no cookies on the storefront and use no advertising, analytics or cross-site tracking technologies there. What we store in your browser is the anonymous counter described in section 6a and, on a store with the email step, a signed note that you have already given your email (section 6b).
3. What we never do with camera video
- It never reaches our servers, and we never store it. The connection is directly between your browser and the providers below. We keep no copy, at any point, in any form.
- We never use it to identify you. No facial recognition, no matching against any database, no linking to any account.
- We never sell or share it, in the sense those words are given by the CCPA and CPRA.
- We never infer skin tone, body type, age, gender, ethnicity, health or emotion from it, and our providers are not permitted to either.
3a. Saving and replaying your try-on
A store can choose to let you replay your try-on and save it as a video file. Where that is switched on, the recording is made entirely inside your own browser while you watch — it is never uploaded to us, to the store, or to anyone else, and no server is involved at any point. The store may have its name and the product name shown in a corner of the video.
The recording exists only for as long as the try-on window is open. Closing it discards the copy. If you choose to download the file, it is saved by your own browser to your own device, and what happens to it after that is entirely up to you.
The camera notice you accept before the try-on starts tells you which of these two arrangements applies in the store you are visiting, and we keep a cryptographic digest of the exact wording you were shown.
4. Who receives camera video
Your video goes to Decart, which generates the try-on, and to the cloud infrastructure and content-moderation providers Decart uses to deliver it:
| Company | What they do with it | Where |
|---|---|---|
| Decart AI, Inc. | Generates the try-on image from your camera video, in real time. | United States |
| Google LLC (Google Cloud) | Cloud infrastructure, content moderation, and generating the result. | United States |
| Amazon Web Services, Inc. | Cloud infrastructure. | United States |
| Castle Global, Inc. (Hive) | Content moderation. | United States |
This same list is shown to every shopper, one click from the camera notice, before their camera is switched on — and a digest of it is stored with their consent record, so we can show exactly which recipients they were told about.
The store does not receive your video. Neither does any advertiser, analytics provider or data broker. No such service ever receives camera video.
5. Why we are allowed to process it
Your explicit, opt-in consent, given before your camera is accessed. The notice tells you what is collected, who receives it and that the result is generated by AI.
We ask every time rather than remembering your answer. A remembered consent would mean a camera switching on with nothing on screen explaining why, and a biometric release is properly given per use. Declining costs nothing and starts nothing — no session is created and no provider is contacted.
6. How long things are kept
| Data | Kept for |
|---|---|
| Camera video — by us | Never stored. It does not reach our systems. |
| Your try-on video — on your own device | Only if this store turned on “replay and save”, and only in your own browser. It is never uploaded to us, and it is deleted when you close the try-on window. If you choose to download it, the copy on your device is yours and this policy no longer governs it. Stores that have not turned this on record nothing at all, and their camera notice says so. |
| Camera video — by our providers | Used to generate your try-on, and only for as long as that try-on runs. The maximum is set by the store you are shopping on and is shown to you in the camera notice, before your camera is switched on. They may process it only to provide that service, may not sell or share it, and are contractually required to delete it and certify that deletion. We are seeking a specific maximum period from them and will state it here once we have it in writing. |
| Consent records | Three years, so we can evidence what was agreed. |
| Session records (product, seconds used) | Three years. They contain no name, no account, and no contact detail — only the anonymous counter described in section 6a. |
| Shopper emails from a Shopify store's email step | Until the store deletes them, or until the store uninstalls the app and its data is erased (within 48 hours of uninstalling). Confirmation codes: ten minutes. |
| Order lines (Scale stores with sales insights on) | Up to 400 days, and deleted at once when the store turns sales insights off or uninstalls the app. |
| Merchant settings and store domains | While the app is installed, then deleted when the store is removed or requests erasure. |
6a. The anonymous try-on counter
The try-on stores a random identifier in your browser, on the store's own site, the first time you accept the camera notice there — or, on a store that asks for your email first, when you give it — and never before. It is a random number: it is not derived from your device, your account or your camera, and it is not a tracking pixel or third-party cookie.
It is used for two things, and nothing else. First, so a store can see how many different shoppers tried a product, as opposed to one shopper trying it five times. Second, where a store has chosen not to allow repeat try-ons, to recognise that this browser has already tried this particular product during the current month — in which case the try-on is declined and you are told why.
Our systems keep only a keyed cryptographic digest of it, different for every store, so it cannot be used to follow you from one store to another. It is never joined to your name or customer account, and it is never shared. The one exception is a store's email step (section 6b): when you give your email there, the digest is stored with it, so this browser is not asked again and the store can see which products you tried. Clearing your browser's site data removes it, and a new one is only created if you accept the camera notice or give your email again.
6b. A Shopify store's email step
A Shopify store on the Growth or Scale plan can ask for your email before a try-on, and can ask us to email you a six-digit code to confirm it. The window tells you that the store receives your email. We keep your email address, the date you gave it, the language of the window, how many try-ons it unlocked and which products you tried, in a list that only that store can see and download. We do not add you to the store's Shopify customers ourselves; the store can import the list into Shopify if it chooses.
Some stores also show an unticked box to receive their offers. If you tick it, we record that, when, and the exact words you agreed to, and the store may use your email for marketing. If you do not, the list marks you as not accepting marketing. Your browser keeps a signed note that you gave your email, for up to90 days, so you are not asked again on that store. Codes are sent through our email provider, Resend. To have your email removed, ask the store, which can delete it at once, or write to us.
6c. Sales insights on Shopify stores
A Shopify store on the Scale plan can switch on sales insights, which compares a product's sales before and after it got try-ons. For this we copy the store's order lines: which product, how many, the amount, the date, and whether the order was cancelled or refunded. We never read who placed an order — no name, email, address or customer account.
When you see a try-on on such a store, the try-on adds a hidden note to your cart with our try-on session's identifier, so an order that follows can be matched to the product you tried. It is not added when the store's cookie banner says analytics are not allowed. The note carries no identifier of you or your browser.
7. Where the data goes
Camera video goes only to the providers in section 4, all of which are in the United States. It is never stored on our own systems, and it never reaches Pakistan.
The records we do keep — merchant settings, and session data that contains no shopper identifier — are held on servers in the United States and administered by our team in Pakistan.
For shoppers in the European Economic Area, the United Kingdom or Switzerland, transfers to our processing providers are covered by Standard Contractual Clauses in our data processing agreement with them.
8. Your rights
Depending on where you live, you may have the right to access, correct, delete, restrict or port your personal data, and to withdraw consent. To withdraw consent for a try-on, simply close the window — nothing continues after that.
We want to be straightforward about one limit. Because we deliberately store no identifier linking a try-on to a person, we usually cannot find an individual shopper's records — which is also why we cannot hand them to anyone else by mistake. Where the law requires us to identify you before acting, and we genuinely cannot, we will tell you so rather than collect more data about you in order to look. If you can give us enough detail to locate a specific session, write to us and we will act on it. If you gave your email in a store's email step (section 6b), we can find that record by your email, and the store can delete it too.
Merchants can raise requests through Shopify's standard privacy request flow. We respond to those within 30 days.
9. How it is protected
Everything is encrypted in transit. Camera video travels over an encrypted real-time connection directly between your browser and the provider. Our database is not reachable from the public internet. The credentials that could authorise generation never reach a browser: the page receives only a 120-second token limited to one model, one store and one maximum duration.
Our processing provider holds SOC 2 Type 2, ISO 27001 and ISO 42001 certification, and owes us notice of any breach within 48 hours.
10. Children
The app is not intended for children, and we do not knowingly process a child's camera video. If you believe a child has used it, contact us and we will act.
10a. This website
The sections above are about the app. When you visit wetryon.ai itself, we measure visits with PostHog, an analytics service, to see which pages are read. A banner asks whether we may use cookies. Until you answer, your visit is counted the same way as if you had declined (below), and nothing is stored in your browser.
If you accept, PostHog sets a cookie and uses local storage to recognise your browser on later visits. It records the page you viewed, the page that sent you here, your browser and device type, clicks on the page, your IP address, and the country and city worked out from that address. Pages you viewed earlier in the same visit, before accepting, are linked to that choice so the visit is counted once. Our basis is your consent.
If you decline, the visit is still counted, without cookies: PostHog computes a hash on its servers that changes daily, and your IP address and location are not stored. Our basis for that count is our legitimate interest in understanding how the site is used. Your choice is remembered in your browser so we do not ask again. You can change it at any time with “Cookie settings” at the bottom of every page.
Either way, we do not record sessions, identify visitors by name or combine this data with anything else. PostHog processes it in the United States.
If you write to us through the contact form, we receive your name, email and message and use them only to reply. The form delivers your message to our inbox, and sends you an automatic confirmation, through Resend, an email delivery service.
The live try-on on our home page is our own product, running on this site under our own account, so everything above about camera video, the notice shown before your camera is used and the anonymous try-on counter (section 6a) applies to it. If you try on a photo you upload there, the photo goes from your browser to the AI provider that makes the try-on (section 4), for that try-on only, and never reaches our servers. We do not link a try-on to the visit analytics above.
10b. The website script (app.wetryon.ai)
Stores on any platform, Shopify included, can use WeTryOn by creating an account at app.wetryon.ai and adding our script to their site. Everything above about shopper camera video applies to them in the same way. In addition:
- Your account. We keep the email address you sign in with, your store name, the domains you add, the platform your store runs on and, if you tell us, how you heard about us. Sign-in codes are stored only as a keyed hash and expire after ten minutes.
- Your public pages. To verify a domain and to recognise which products can be tried on, our server reads public pages of your site: your homepage, and product pages' names, images, categories and addresses. It reads nothing a visitor would need to sign in to see.
- Trying it on yourself. In your dashboard you can try on one of your own products before installing anything. Our server reads the product page you paste (only on your own store's address) and fetches its photo to show it to you. Your camera video then goes to the same AI processing providers as a shopper's (section 4), after the same notice, and never reaches our servers. We count how many of these previews an email address has used, kept as a hash of the address so the count survives deleting the account.
- Asking us to set it up. If you ask for setup help in your dashboard, we keep what you send (how you want help, your platform, your store's address and your note) with your account, and pass it to our team by email and in our internal chat (Slack) so we can reply.
- Payments. Creem is our merchant of record and takes your payment. We receive your subscription's status, plan and billing dates, the credit packs you buy (amount, currency and order identifiers) and Creem's customer and subscription identifiers, and we keep your credit balance and its history. We never see your card number.
- Moderation. Before each try-on, the text that describes the product is checked by Creem's automated moderation service. Only that product text is sent, never shopper video.
- Your shoppers' browsers. When a page with our script loads, the browser fetches your site's settings from our servers, which like any web request shows us its IP address, and at most every half hour reports which page the button was placed on. No cookies are set; a timestamp in the browser's session storage spaces out those reports.
- Shopper email step. A store can ask shoppers for their email before a try-on, and can ask us to email them a six-digit code to confirm it. The store decides this and is responsible for it; we process the address on its behalf. We store a one-way hash of the address for that store, with the number of try-ons. We store the address itself only if the store has chosen to receive the emails, in which case the shopper is told so before entering it, and the store can see and download them. Codes are sent through our email provider, stored only as a keyed hash and expire after ten minutes. A signed pass is kept in the shopper's browser session storage so they are not asked again until the session ends. Addresses are deleted when the store turns off receiving them or deletes its account, or on request to support@wetryon.ai.
- Emails. We email you sign-in codes and messages about your plan and credits (a plan starting, changing or ending, a failed payment, your credits running out) through our email provider, and occasionally an email from our team about your account or the service. Reply “unsubscribe” to any email from our team and we will stop sending them.
- How setting up is going. To find where stores get stuck, our server records the steps an account reaches (signing up, adding and verifying a domain and why a check failed, the script first loading, try-ons starting or being refused, starting a checkout, a plan starting, changing or ending, buying credits, trying it on yourself, asking for setup help, choosing your store's platform, and finishing or skipping the setup steps, with how you heard about us if you said) in PostHog, under a random account identifier. These records hold no email address, domain or shopper data. Our basis is our legitimate interest in making the product work. PostHog processes them in the United States. They are kept when an account is deleted: once its email address and domains are erased, the identifier no longer leads to you.
- Recording the dashboard. While you are signed in to app.wetryon.ai, PostHog records how the dashboard is used: the pages you open, where you click and scroll, and what the screen shows, so we can see where it is confusing. Everything you type and every email address on the screen are hidden before the recording leaves your browser, and the sign-in page is never recorded. Recordings are linked to the same random account identifier, never to your name or email address. For this, PostHog keeps a cookie and local storage in your browser. We tell you about it once, after you first sign in, and you can turn it off there or under “Usage data” in Settings at any time; that choice is remembered in that browser. We also have PostHog pass recordings to an AI model (Google Gemini, through PostHog) that notes how far setup got and where the dashboard got in the way. It sees the same masked recording, and its notes are used only to improve the dashboard, never to make decisions about your account. Our basis is our legitimate interest in making the product work. PostHog processes recordings in the United States.
- Deleting your account cancels your plan and erases your account, domains, products, settings and any shopper emails. We keep a hashed form of your email address and your domains' names so the same store cannot receive its free try-ons twice, a record of the credits you bought, and anonymised records of try-ons, which hold no shopper data.
For both forms of WeTryOn: messages to support@wetryon.ai, setup-help requests, and notices of new accounts, installs, subscriptions and cancellations including the owner's email address, are forwarded to our team's internal chat (Slack) so we can respond quickly.
11. Changes
If we change this policy we will update the date at the top. If a change affects what shoppers are told before their camera is used, the on-screen notice is updated at the same time and consent is asked again.
WeTryOn · Last updated 12 November 2026 · support@wetryon.ai