Your Data Rights

Privacy Policy

Last updated: Sep 30, 2026

1. Introduction

Try It On is a product of NFN Labs (OPC) Pvt Ltd ("NFN Labs," "we," "us" or "our"). This policy explains what data we collect, why, how long we keep it and the rights you have. It covers two services:

Try It On Chrome extension (the "Extension"): a browser extension that lets you see clothing from online stores on yourself.
Try It On: AI Virtual Fitting (the "Shopify App"): an app that Shopify merchants add to their online store, so their shoppers can try products on from a photo.

How to read this policy: Part A (Section 3) applies only to the Extension. Part B (Section 4) applies only to the Shopify App. Sections 1, 2 and 5 to 12 apply to both.

We process personal data in line with the Digital Personal Data Protection Act, 2023 (India), the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA), where they apply.

2. Our role

Who decides how your data is used depends on which service you use.

Service	Whose data	Our role
Extension	Extension users	Controller (Data Fiduciary under the DPDP Act)
Shopify App	Merchants who install the app	Controller (Data Fiduciary)
Shopify App	Shoppers who use try-on on a merchant's store	Processor (service provider) acting for the merchant

For shoppers, the merchant whose store you are in is responsible for offering try-on to you and for telling you about it in their own privacy policy. We process your photo only on that merchant's behalf and only to produce your try-on.

3. Part A: Try It On Chrome extension

This part applies when you install and use the Extension yourself.

3.1 Information we collect and our legal basis

Data	What it is	Legal basis
Account data	Your name, email address and profile picture from Google Sign-In	Performance of a contract
Reference photos	The photos of yourself you upload to use try-on	Your explicit consent
Try-on history	Generated images, the products you tried and your favourites	Performance of a contract
Extension activity	The store and product page where you start a try-on, used to find the product image	Performance of a contract
Technical data	Browser, version, operating system and device information	Legitimate interests (security, compatibility)
Usage analytics	Aggregated, de-identified data on which features are used	Legitimate interests (improving the Service)
Payment records	Your plan and payment status. The payment provider holds your card details, not us.	Performance of a contract
Support messages	What you send when you contact us	Legitimate interests, or performance of a contract

About reference photos: your photos show your physical appearance, which some laws treat as sensitive or biometric-adjacent data. You give consent separately from accepting our Terms, when you upload. You can withdraw it at any time by deleting your photos or your account (Section 3.3).

3.2 How we use it

To generate try-on images from your reference photos and the products you choose.
To keep your feed, so you can view, favourite and compare past try-ons.
To screen uploaded photos automatically for explicit, illegal or prohibited content.
To process payments, send service and security messages, and answer support requests.
To improve the Service using aggregated, de-identified usage trends.
To meet legal obligations, resolve disputes and enforce our Terms.

3.3 Retention and deletion

Reference photos and try-on history are kept while your account is active, so your feed stays available.
Deleting photos or your account: you can do this at any time inside the Extension, or by emailing contact@nfnlabs.in. We act on email requests within 30 days.
After account deletion, your data is removed from our active systems within 30 days and from backups within 90 days, unless the law requires us to keep it longer.

3.4 Services the Extension relies on

Google Sign-In: your sign-in is also subject to Google's Privacy Policy.
Online stores: the Extension runs on third-party sites such as Amazon, Myntra and Ajio. Their own privacy policies apply to your use of those sites. We do not scrape or store their catalogues; we fetch only the product image you choose to try on.
Payments: handled by [Stripe]. We never store your full card details.

3.5 Cookies and analytics

Essential storage: cookies and browser local storage keep you signed in and remember your settings.
Analytics: we use Google Analytics with IP anonymisation to see aggregated usage. We do not send your name, email or photos to analytics providers. You can opt out with the Google Analytics opt-out add-on.
Your choices: you can block cookies in your browser settings, though some features may then stop working.

4. Part B: Try It On: AI Virtual Fitting

This part applies to merchants who install the Shopify App, and to shoppers who use try-on on a merchant's store.

4.1 Information we collect from merchants

Store information from Shopify: store name, store domain, store owner's name and email address, country, currency and Shopify plan. We use it to set up and run your account.
Product information from Shopify: titles, types, tags, categories and images of products, used to prepare try-ons. We access it through the permissions you approve at install: [read_products, …].
Billing information: your plan, subscription status, subscription and top-up credit balances, extra try-on pack purchases and try-on usage. Shopify processes all payments through Shopify Billing, and we never receive card or bank details.
Settings and usage: your app settings, which products show try-on, and technical logs.
Support messages: what you send when you contact us.

The Shopify App does not access your orders, customer lists, customer addresses or payment information.

4.2 Information we collect from shoppers

Name: personalization of the Try-On experience (optional)
Uploaded photo: the photo of yourself you choose to upload. It shows your appearance and may be treated as sensitive or biometric-adjacent data.
Generated image: the try-on image made from your photo and the product image.
Session and technical data: the product tried on, a random session identifier, browser type, device type and IP address. We use this to deliver the try-on, prevent abuse and count usage against the merchant's plan.

You do not need an account with us. We do not collect your name, email address or payment details through the Shopify App. You are required to sign in to your customer account on the merchant's store to access the Try-On feature; we receive your Shopify customer ID from that store, so your try-ons are linked to your account there. We use it only to show your past try-ons, and never to identify you outside that store.

Consent: before you upload a photo, the try-on window explains how it is used, and you must confirm to continue. You must be 18 or older, and may upload only photos of yourself.

4.3 How we use it

To generate try-on images, including selecting and analysing the merchant's product photos.
To screen uploaded photos automatically for explicit, illegal or prohibited content, and check they are suitable for try-on (for example, pose).
To count try-ons against the merchant's plan and bill through Shopify.
To provide support, keep the app secure and prevent fraud or abuse.
To improve the app using aggregated, de-identified usage statistics.

We do not use shopper data for our own marketing, and we never combine it with Extension data.

4.4 Retention and deletion

Data	Kept for
Shoppers' uploaded photos	Until the shopper uploads a replacement, which permanently deletes the old photo. Shoppers can also ask us to delete it at contact@nfnlabs.in.
Generated try-on images	Until the shopper deletes them. Deleting permanently removes them from our database and storage.
Merchant data	While the app is installed; deleted within 60 days of Shopify's shop deletion request after uninstall, including that store's shopper photos and try-on images
Credit balances and billing records	Kept after uninstall so your balances are restored if you reinstall, and as long as tax and accounting law requires.
Billing records	As long as tax and accounting law requires

4.5 Shopify privacy requests

We respond to Shopify's mandatory privacy requests:

Customer data request: we give the merchant any data we hold about that customer.
Customer deletion request: we delete that data.
Shop deletion request: we delete the store's data.

A shopper is required to sign in to access the Try-On feature and their photo and try-ons are linked to their Shopify customer ID. For a customer data request, we give the merchant the photo and try-on images we hold for that ID. For a deletion request, we permanently delete them.

4.6 Merchant responsibilities

By enabling the Shopify App, merchants agree to tell shoppers in their store's privacy policy that they use Try It On for virtual try-on, with a link to this policy, and to use the app only in line with applicable law. Suggested wording:

We use Try It On, a virtual try-on service by NFN Labs. If you use the try-on button, the photo you upload is sent to NFN Labs to create an image of you wearing the product, and is kept only until you replace it or ask for it to be deleted. It is not used to train AI models or for advertising. See the Try It On Privacy Policy.

5. AI and data commitments

These apply to every photo and image in both services.

No training: we never use your photos or generated images to train our own or any third party's AI models.
No sale: we do not sell personal data, or share it for cross-context behavioural advertising.
No identification: we do not use photos to identify people, or create face or body templates or other biometric identifiers.
Our AI provider: try-on images are generated with Google's Gemini API, used under Google's paid-service terms, which bar Google from using this data to train its models.
Content screening: uploaded photos are screened automatically for explicit or illegal content. Flagged content may be reviewed as described in our Terms, and is never used for training.
Output ownership: you keep ownership of your photos, and retailers keep ownership of their product images. Our Terms of Use set out how generated images may be used.

6. Sharing and subprocessors

We share data only with providers that help us run the services. Each is bound by a data processing agreement to use it only on our instructions.

Provider	Purpose	Service
Google (Gemini API)	Try-on generation and product image analysis	Both
Replicate	Safety and identity checks	Both
AWS	Hosting, RDS and storage	Both
Google Analytics	Aggregated usage analytics	Both
Google Sign-In	Account sign-in	Extension
Stripe	Payments	Extension
Shopify	App platform and billing	Shopify App

We may also disclose data when the law requires it, to protect people's safety or our rights, or to a successor in a merger or acquisition under the same protections.

7. Data security

TLS encryption for all data in transit, and AES-256 encryption at rest.
Role-based access controls, and images served only through time-limited signed URLs.
Regular security assessments, and collecting only the data each service needs.

No system is completely secure. If a breach affects personal data, we will notify affected users or merchants, and the relevant authorities where required, without undue delay.

8. International data transfers

Data may be stored and processed in India, the United States and other countries where our providers operate. Where GDPR applies, we use appropriate safeguards such as Standard Contractual Clauses.

9. Children

Both services are only for people aged 18 and over. Photos of children must not be uploaded, and photos flagged as showing a minor are rejected and deleted. If you believe a child has given us personal data, contact contact@nfnlabs.in and we will delete it promptly.

10. Your rights

Depending on where you live, you can ask to access, correct, delete or export your data, restrict or object to its processing, and withdraw consent at any time. EEA and UK residents can also complain to their local supervisory authority.

Extension users and merchants: email contact@nfnlabs.in. We reply within 30 days of a verified request, and provide exports in a common format such as JSON or CSV.
Shoppers: contact the merchant whose store you used, or email us. We will act on your request, or pass it to that merchant. Because photos are deleted within 48 hours, we usually hold nothing after that time.

11. Changes to this policy

We will post updates on this page and change the date at the top. For material changes, we will also notify Extension users inside the Extension and merchants inside the Shopify App or by email.

12. Contact us

NFN Labs (OPC) Pvt Ltd Address: Kasturi Apartments, Radhakrishnan Salai 6th Street, Krishnapuram, Mylapore, Chennai, Tamil Nadu 600004, India

Email us

Grievance Officer (India): Sonaal Bangera Contact

Data Protection Officer (EU/UK): James Ramya Rajan Contact