1. Introduction
DIMENSO L.L.C-FZ ("TryOn Virtual", "we", "us", or "our"), a company registered in Dubai, UAE, operates the TryOn Virtual platform. This policy explains how we handle data across our website (tryonvirtual.com), Shopify application, merchant panel, public API, and the storefront try-on widget.
Our roles. For merchant account data we act as a controller. For data processed on behalf of a merchant — including product images and end-user try-on activity on their storefront — we act as a processor, and the merchant is the controller.
2. Merchant account data
We collect and process:
- Account registration details (name, email, company name)
- Contact form submissions and demo requests
- Billing information — Shopify merchants are billed through Shopify's Billing API and we do not receive card details; merchants on other platforms are billed under their contract
- Support communications, including in-app chat
How support chat is handled. Messages you send through in-app support are stored in our systems and are also delivered to our support team through Slack. What is delivered is the message text, your store domain, the sender's name, and the timestamp. This applies to merchant support conversations only — no end-user try-on data, photographs, or storefront visitor data is sent to Slack. Please do not include passwords or payment details in support chat.
3. Merchant product images
When a merchant connects a store, we sync product images from that store. These are business content, not personal data about the merchant's customers.
What we do with them:
- Store a reference to the image, and where required a copy, in our cloud storage
- Send them to our AI processing engine to generate 3D models of the product
- Use them as the product source for AI photo swap, so the item can be rendered onto a customer's photo
- Analyse them for quality, fit, and rendering accuracy, so try-on results on the merchant's store are more realistic
- Train and improve our own try-on models. Product images are used as training data to improve the accuracy and realism of our 3D generation and try-on rendering across the platform. This applies to merchant product imagery only — never to photographs uploaded by end users, which are used solely to fulfil that user's own try-on request (see §4.2).
Merchants who do not want their product imagery used for model training can opt out by contacting [email protected].
Product images are retained for as long as the product exists in the merchant's TryOn account, and are deleted when the product or account is deleted.
Product images that contain people. Fashion and accessory imagery often features human models. Merchants are responsible for ensuring they hold the rights and permissions necessary for us to process such images. See our Terms of Service.
4. End-user try-on data
The widget offers two modes, and they handle data very differently. Each mode presents its own consent screen before any processing begins, and the end user must accept it.
4.1 Real-time AR try-on (eyewear, watches)
Processing happens entirely on the user's device. Face and wrist tracking and 3D rendering run locally in the browser.
- We do not record, store, transmit, or retain camera images or video
- No facial geometry or tracking data leaves the device or is persisted by us
- Camera access is active only while the widget is open, and can be revoked at any time
- If the user saves a look, it is written to their own browser's local storage — not to our servers
4.2 AI photo swap (clothing, shoes, jewelry and similar)
This mode does send data to our servers, and the consent screen states this before the user uploads anything.
- The user's uploaded photo is transmitted to our servers and forwarded to our AI processing engine
- It is processed to generate a single result image showing the selected product on the user
- The photo is used only to fulfil that request
Retention. The uploaded photo is held in private cloud object storage, accessible only to our processing systems, and is deleted within 24 hours. The generated result is delivered to the user through a pre-signed link that expires after one hour. If the user chooses to keep a result, it is saved in their own browser (IndexedDB, falling back to local storage) — not on our servers — and they can clear it at any time through their browser.
AI processing providers. Photo swap uses commercial AI APIs operated by OpenAI and Google (Gemini) on paid business tiers, meaning the photograph is transferred to those providers in the United States for processing. Neither provider uses paid-tier API data to train or improve their models. We do not use uploaded photographs to train or improve any model of our own.
Provider-side retention. Zero Data Retention is enabled on our OpenAI account, meaning photographs sent to OpenAI are not logged or retained by them. Where the Google Gemini fallback is used, Google may retain the request briefly under its own abuse-monitoring practices before deletion. We do not authorise either provider to retain photographs for any other purpose.
4.3 Analytics collected in both modes
We record events describing how the try-on widget is used, so merchants can measure performance and so we can enforce usage limits. Events cover:
- Widget opened, model loaded, product or variant changed, widget closed
- Consent accepted or declined
- Photo selected, try-on started, completed, failed, or retried
- Result saved, downloaded, or shared; thumbs-up/down feedback on a result
- Usage-limit prompts shown, dismissed, or unlocked
- Add-to-cart initiated from the try-on
Each event carries the product and variant identifier, the storefront it occurred on, a timestamp, widget version, and the browser's user-agent string.
Identifiers stored on the user's device. The widget creates two random identifiers and stores them in the browser:
| Identifier | Stored in | Lifetime | Purpose |
|---|---|---|---|
tryon_session_id | session storage | Until the tab is closed | Groups events within a single visit |
tryon_visitor_id | local storage | Persists across visits until cleared | Counts unique visitors, and enforces per-visitor try-on limits |
Neither contains a name, email, or any information you provide — they are random values. However, tryon_visitor_id persists across visits and allows the same device to be recognised on return, so we treat it as personal data where applicable law requires. Users can remove both at any time by clearing site data in their browser.
We do not use these identifiers to build advertising profiles, and we do not share them with advertising networks.
tryon_visitor_id is created when the widget first opens, because it is also used to enforce per-visitor try-on limits. Users who do not want it can clear site data or use private browsing.
5. Biometric information
Some jurisdictions — including Illinois (BIPA), Texas (CUBI), and Washington (My Health My Data) — regulate facial and body geometry as biometric information.
- Real-time AR: face and wrist tracking is computed on-device and is never transmitted to or stored by us.
- AI photo swap: the uploaded photo is transmitted and processed as described in §4.2.
Retention schedule and destruction. Where a photograph submitted for AI photo swap constitutes a biometric identifier, our schedule is: the image is retained only for the period required to complete the requested try-on and in no case longer than 24 hours, after which it is permanently deleted from our storage. Generated results are accessible only through a link that expires after one hour. We do not retain biometric identifiers after the purpose for collection has been satisfied.
6. Subprocessors
We use the following providers. Merchants may request the current list at any time.
| Provider | Purpose | Location |
|---|---|---|
| DIMENSO AI processing engine | 3D model generation, AI photo swap | UAE / cloud |
| OpenAI | AI image generation for photo swap | United States |
| Google (Gemini API) | AI image generation for photo swap (fallback) | United States |
| Amazon Web Services (S3) | Object storage for models and product images | Cloud |
| Shopify | App distribution, merchant billing, product sync | Global |
| Google (Analytics, Ads) | Website analytics and advertising measurement | Global |
| Slack Technologies, LLC (a Salesforce company) | Delivering merchant support conversations to our support team | United States |
AI model providers. Photo swap is performed using commercial AI APIs from OpenAI and Google on paid business tiers. Under both providers' current published terms, data submitted through paid API tiers is not used to train or improve their models. Photographs submitted for photo swap are transferred to these providers in the United States for processing.
7. How we use information
- To provide and maintain the try-on services
- To generate 3D models and AI try-on results
- To process transactions and manage subscriptions
- To provide analytics and insights to merchants
- To communicate about updates, support, and marketing
- To improve reliability, quality, and rendering accuracy
- To comply with legal obligations
Legal bases (where GDPR applies)
- Contract — providing the service to merchants
- Consent — end-user camera access and photo upload; non-essential cookies
- Legitimate interests — security, fraud prevention, service improvement
- Legal obligation — tax, accounting, and lawful requests
8. Sharing and disclosure
We do not sell personal information. We share data with the subprocessors listed in §6, with Shopify as required for app functionality, with law enforcement where legally required, and with business partners only where you have explicitly consented.
9. Data retention
- Merchant account data — deleted within 30 days of account closure
- Product images — retained while the product exists; deleted with the product or account
- End-user uploaded photos — deleted within 24 hours (see §4.2)
- Generated try-on results — delivered via a link that expires after one hour; any copy the user keeps is stored in their own browser
- Aggregate analytics — retained in non-identifying form
10. Security
We use encryption in transit (TLS), private (non-public) object storage, access controls restricting stored images to our processing systems, and secure cloud infrastructure. No method of transmission or storage over the internet is completely secure.
11. Cookies
Essential cookies and browser storage support core functionality, including the try-on identifiers described in §4.3.
On tryonvirtual.com we also use Google Analytics and Google Ads tags to measure how the site is used and how visitors reach it. You can control or block these through your browser settings, or by using your browser's tracking-protection features.
The try-on widget on a merchant's storefront does not load advertising tags. The storefront's own cookie settings are controlled by that merchant.
12. International transfers
We operate from Dubai, UAE. Data may be transferred to and processed in the UAE and in other jurisdictions where our subprocessors operate.
Where personal data originating in the EU or UK is transferred outside those regions — including to our AI processing providers in the United States — we rely on the data protection terms and standard contractual clauses made available by those providers as part of their processing agreements. Merchants may request details of the safeguards applying to their account by contacting us.
13. Your rights
Depending on your jurisdiction you may have the right to access, correct, delete, port, restrict, or object to processing of your personal data, and to withdraw consent at any time.
California residents additionally have rights to know, delete, correct, and to opt out of sale or sharing. We do not sell personal information.
End users of a merchant's storefront should contact that merchant first, as they are the controller. We will assist them in responding.
To exercise these rights, contact [email protected].
14. Children's privacy
Our services are not directed to children. We do not knowingly collect personal information from children below the age of digital consent in their jurisdiction (13–16 depending on country).
15. Changes
We may update this policy. Material changes will be announced by updating the "Last updated" date and, where appropriate, notifying merchants directly.
16. Contact
DIMENSO L.L.C-FZ Dubai, United Arab Emirates Email: [email protected] Website: tryonvirtual.com