Privacy approach

How privacy works here

The short version: the shopper is asked in writing first, the video goes straight to the companies that generate it, and it never reaches our servers. The long version is below — it's still short.

Where the video goes
Shopper's browser

The camera turns on only after the shopper agrees to the written notice.

live videodirect
AI providers

They generate the live try-on and stream it back. Contractually limited to providing the service — no selling, no sharing, deletion required.

counts onlyno video
Your analytics

WeTryOn's servers receive which product was tried on and an anonymous count — never the video.

The companies that receive the video are named for the shopper, by name and country, one tap from inside the notice — and listed again in the full policy. That list is versioned, so it stays current rather than being frozen into a marketing page.

  1. 01
    The notice comes first

    A written notice appears before the camera is touched. It says what will happen and names the companies that receive the video. Only when a shopper agrees does their browser ask for camera access. If they decline, nothing starts — no session is created and no provider is contacted.

  2. 02
    Asked every time

    Agreeing once doesn't mean agreeing forever. The notice appears on every try-on, on every visit, including if a shopper tries again straight away. Nothing about the agreement is remembered between try-ons.

  3. 03
    The video goes straight to the AI providers

    Camera video streams from the shopper's browser directly to the providers that generate the try-on. It never reaches WeTryOn's servers — there is no upload route in the app to reach. The video is used only while the try-on is on screen, for the length of the try-on — 15 seconds on every current plan, and always stated in the camera notice before the camera turns on. Your store never receives it either.

  4. 04
    We keep a record of the try-on, not the try-on

    What our servers store is which product was tried on, when, and proof of what the shopper agreed to — two cryptographic fingerprints, one of the exact words of the notice and one of the list of companies behind it. No video, no image, and no name.

  5. 05
    Analytics count browsers, not people

    Your dashboard uses an anonymous, randomly generated id kept in the shopper's browser. It is created only after they agree, it is never derived from their device or camera, and we store it as a one-way hash salted per store — so the same browser can't be matched across two shops. It can tell you a product had 12 unique browsers. It cannot tell you who they were.

  6. 06
    We never read your customers

    The app asks for three permissions: read your products, read your themes, and run its own storefront route. There is no customer permission. We never read, log or store who is signed in to your store.

  7. 07
    Nothing is inferred about the shopper

    We do not detect or guess skin tone, body type, age, gender, ethnicity, health or mood, and our providers are not permitted to either. The result is labelled AI-generated on screen the whole time it runs, alongside a note that it is an approximation and may differ from the real product in fit, colour and fabric.

  8. 08
    Uninstall erases your store's data

    When you uninstall, everything we hold about your store — settings, try-on records, consent records — is deleted within 48 hours.

One setting changes what shoppers are told

Replay and save is off unless you turn it on

By default, nothing is recorded anywhere. The code that would record is never even created, and shoppers are told plainly that their video is never recorded or stored.

If you switch on replay and save, a copy of the try-on is kept in the shopper's own browser so they can watch it again or download it. It is never uploaded, we never receive it, your store never receives it, and it is deleted when they close the window. When that setting is on, the notice shoppers read says so — the wording changes with the setting, and which version each shopper agreed to is recorded.

That is why you won't find a blanket “nothing is ever recorded” claim on this site. It would be true for most shops and false for the rest, and the difference is a switch you control.

The legal version

This page is the plain-language summary. The full privacy policy is on this site too, and the parts of it that could go out of date — the list of companies that receive video — are built from the same source the product uses, so they match what it does. That page is the one that governs.

Read the full policy

Privacy questions go to privacy@xislabs.com.