Text for your store's privacy policy
Draft 2026-10-26, US edition · Issued by FortyTwo Venture GmbH · Public at /merchant-privacy-snippet/, linked from Settings.
The short version
Paste Part 1 into your store's privacy policy, then check the points in Part 2. Text in [square brackets] is yours to fill in. Vestry is offered only to stores located in the United States.
Part 1 · Paste this
Virtual try-on (Vestry) On some product pages you can see a product on yourself with our virtual try-on. It's optional: no photo, no try-on. We use your photo only to make your try-on. The try-on is provided by Vestry (FortyTwo Venture GmbH, Switzerland) and its AI partners, who process your data for us. None of them use your photo to train AI, and no one uses your photo to recognize you. Your photo may be processed outside your country: Vestry is hosted in the United States, and its AI partners, OpenRouter and fal, pass it to the AI model that makes the image (Google, OpenAI, xAI and Bria), in the United States, and for some models in other countries. The partners are listed at [Vestry subprocessors link]. Your photo and your try-on images are deleted within 24 hours, or sooner if you choose "Delete my photos". We never see your photo or your try-on images. You must be 18 or older and use a photo of yourself. If we ask for your email to keep trying on, your email goes to us as a customer contact, with the products you tried on. We send you marketing only if you tick the box, and you can unsubscribe at any time. If you're signed in, the products you try on are saved to your account only if you allowed this in our cookie banner. Details: [Vestry "How we use your photo" link] and [Vestry biometric policy link]. Questions: [your contact email].
Part 2 · Check these
| # | Do this |
|---|---|
| 1 | Paste Part 1 into your privacy policy, and keep the policy easy to find on your store, for example linked in the footer. |
| 2 | Offer the try-on only to shoppers in the United States. Vestry hides it for shoppers elsewhere; don't work around that. |
| 3 | Don't add products for children on the Products page. |
| 4 | The email step is off by default. If you turn it on, you're responsible for that choice and for your marketing emails (CAN-SPAM Act): keep proof of consent, include your name, a valid physical postal address and contact details, include a working unsubscribe link, and honor unsubscribes within 5 business days. |
| 5 | Handle customer requests yourself, like any other: the email, marketing choice and product tags are in your Shopify customers. Photos and try-on images delete themselves within 24 hours. Write to {{PRIVACY_EMAIL}} only for something only Vestry holds. |
| 6 | If you sell to people in Washington State: a face photo can count as consumer health data there, so you may need a separate consumer health data privacy policy, linked on your store's homepage (My Health My Data Act). |
| 7 | If a state privacy law covers your store (for example California's CCPA), make sure your privacy policy lists the categories of data in Part 1 and how shoppers can make requests. |
Using Vestry means you accept our Terms, including the data processing agreement (/terms/).