Privacy Policy

Last updated: October 2026

Vastefy ("we", "our", or "us") develops AI Virtual Try-On software for Shopify and Wix merchants. We are committed to protecting the privacy of both the merchants who use our app and the shoppers who interact with our widget. This Privacy Policy outlines how we collect, use, and protect your information in accordance with Shopify's and Wix's API Terms of Service and global privacy regulations (such as GDPR and CCPA).

1. Image Data Processing & Storage

We do not store user-uploaded images on our servers. Customer-uploaded photos are processed in real-time solely to compute body landmarks and composite the requested apparel items. Once the AI virtual try-on result is generated and sent back to the shopper's browser, the original image and the rendered result are immediately discarded from active memory.

Images are never used for facial recognition, never used to train our AI models, and never sold to or shared with third-party data brokers.

2. Information We Collect from Merchants

When you install the Vastefy app on Shopify or Wix, we automatically access certain types of information from your store account to provide our service:

• Store Information: Your store or site domain, email address, and active theme data (necessary to seamlessly inject the try-on widget).
• Product Catalog Data: Product titles, images, and handles required to generate accurate try-on visualizations.
• Billing Data: Processed securely via the native billing system of your platform (the Shopify Billing API or Wix Billing). We do not handle raw credit card information.

3. Information We Collect from Shoppers

When a shopper interacts with the Vastefy widget on a merchant's storefront, we process the following:

• Transient Image Data: Photos uploaded by shoppers. As stated above, these are processed in real-time and immediately deleted. They are never stored.
• Anonymized Usage Analytics: We track anonymous widget interactions (e.g., "Popup Opens", "Try-Ons Generated") to provide merchants with engagement metrics. We do not track personally identifiable information (PII) of shoppers or drop tracking cookies.

4. Data Sharing & Sub-processors

To provide our AI try-on capabilities, we utilize secure third-party cloud infrastructure and neural rendering APIs. These sub-processors are bound by strict data processing agreements that explicitly prohibit the retention, storage, or secondary use of shopper images. We never sell personal data to third parties.

5. Data Retention & Deletion (GDPR/CCPA Compliance)

Vastefy fully complies with the mandatory privacy processes of every platform it runs on — Shopify's privacy webhooks and the equivalent Wix data-request and erasure flows — to ensure your customers' rights are respected:

• Customers Data Request: If a customer requests their data, we will provide any relevant analytical data tied to them (though we do not store PII or images).
• Customers Redact: Upon request, we will permanently erase any analytical data relating to a specific customer.
• Shop Redact: If a merchant uninstalls Vastefy, we automatically delete all store configurations, analytics, and merchant data within 48 hours of receiving the platform's uninstall notification (Shopify's uninstall webhook or the Wix app removal event).

6. Security Measures

We implement industry-standard security practices to protect merchant and shopper data. Merchant store tokens, API keys, and configurations are encrypted at rest and in transit using TLS.

7. Contact Us

If you have any questions about this Privacy Policy, how we handle data, or if you need to submit a data request, please contact our support team at support@vastefy.com.