How we use your photo: shopper privacy notice
Draft 2026-10-26, US edition · Issued by FortyTwo Venture GmbH · Public at /shopper-privacy/, linked as "How we use your photo" in the fitting room.
The short version
- The try-on is optional. No photo, no try-on. You must be 18 or older and use a photo of yourself.
- This store uses your photo only to make your try-on. The try-on is provided by Vestry and its AI partners. None of them use your photo to train AI, and no one uses your photo to recognize you.
- Your photo and your try-on images are deleted within 24 hours, or sooner by you with "Delete my photos".
- This store never sees your photo or your try-on images.
- It may be processed outside your country. Vestry is hosted in the United States (Google Cloud, Iowa). Our AI partners, OpenRouter and fal, pass your photo to the AI model that makes the image (Google, OpenAI, xAI and Bria), in the United States, and for some models in other countries.
- If this store asks for your email to keep trying on, your email goes to this store as a customer contact, with the products you tried on. You get marketing emails only if you tick the box.
| Responsible for your data | This store. See its own privacy policy, usually linked at the bottom of every page of the store. |
| Runs the fitting room for this store | Vestry, by FortyTwo Venture GmbH, Suurstoffi 20, 6343 Rotkreuz, Switzerland |
| Questions or requests | This store, or {{PRIVACY_EMAIL}} |
1. Who is responsible
This store chose to offer the fitting room and is responsible for your data. Vestry processes it only on this store's instructions, under the data processing agreement in Vestry's Terms.
The fitting room is offered only in the United States.
2. What we use, why, and for how long
| Data | Why | Kept |
|---|---|---|
| Your photo | To make your try-on image. Only if you agree: you tap "Agree and choose photo" or "Agree and take a photo" | Deleted within 24 hours, or sooner by you |
| Your try-on images | To show you the result and your recent try-ons | Deleted within 24 hours, or sooner by you |
| A random ID in your browser | To keep your try-ons together and count your free try-ons | In your browser until you clear it |
| IP address | To stop abuse (a limit on requests per minute) | Held for one minute in memory, never stored |
| The product, size and color you tried | To make the try-on | While this store uses Vestry |
| Email, only if this store asks for it | To give you the extra try-ons this store offers, and as this store's customer contact | At this store, as a customer contact. Our copy: while this store uses Vestry, deleted within 30 days after it removes the app, or sooner if you or this store ask |
| Your marketing choice | So this store emails you only if you ticked the box | Until you unsubscribe |
| The products you tried, as tags on your customer record at this store | So this store knows what you tried on. You're told this when you enter your email | At this store |
| Records of what you agreed to (the text version, your choice, the time; never the photo or the email) | To prove your choices | While this store uses Vestry; deleted within 30 days after it removes the app |
If you're signed in to this store, you skip the email step. The products you try on are saved to your account at this store only if you allowed this in this store's cookie banner.
If the law requires a photo or image to be kept, for example for the authorities, only that copy is kept, only as long as the law requires.
3. Who receives your data, and where
- Our AI partners, OpenRouter and fal, pass your photo to the AI model that makes the image (Google, OpenAI, xAI and Bria), in the United States, and for some models in other countries. They get only your photo and the product image: never your name, email or browser ID. They don't train on it and delete it within 24 hours, unless the law requires them to keep it. The list is at /subprocessors/.
- Hosting: Google Cloud in Iowa, United States.
- This store, through Shopify, gets your email, your marketing choice and the products you tried. Never your photo or images.
- Email sending: Resend (United States), for the code email. It keeps the message for 30 days.
Your data is stored in the United States. Your photo goes to the AI model that makes the image, which can be outside the United States. Vestry's team works from Switzerland and can reach it only to run the service, never to look at shopper images. What goes where, to whom, for how long and on what basis is listed at /subprocessors/. These partners are needed to make your try-on; if you don't want them, don't use the fitting room.
4. Your face and biometric laws
No one uses your photo to recognize you. We don't scan your face's geometry, keep a face template or match you with anyone. Some US state laws, such as those of Illinois, Texas and Washington, could treat a face photo as biometric. So, as a precaution:
- this is our written notice that your photo is collected and stored, only to make your try-on, and for at most 24 hours;
- tapping "Agree and choose photo" or "Agree and take a photo" is your written release, and your consent to share your photo with our AI partners to make the image;
- our retention and destruction schedule is public in our Biometric policy.
We never sell, lease or trade your photo.
5. Age and misuse
The fitting room is for people aged 18 and older. Use only a photo of yourself. If you think someone uploaded a child's photo, write to {{PRIVACY_EMAIL}}. We'll delete it within 24 hours.
Don't use someone else's photo or make fake or intimate images. Misuse can be punished by law. We remove such images within 24 hours of a report and report them to the authorities where the law requires it.
6. Your choices and rights
- Delete: "Delete my photos", in the menu or in "Your try-ons", deletes your photos and try-on images at once.
- Withdraw consent: use "Delete my photos". For marketing, use the unsubscribe link in any email from this store.
- Your email: to remove it, ask this store, or write to
{{PRIVACY_EMAIL}}and we'll pass your request on. - Access, correction, deletion and your other rights: in states with privacy laws, for example California, you can ask this store, or write to
{{PRIVACY_EMAIL}}. We pass your request on within 24 hours. If you didn't give an email, tell us the store, roughly when you used the fitting room, and your device. We won't ask you for more data to identify you. You won't be treated differently for using your rights. - Not sold or shared: your data is never sold or shared for advertising.
- Complain to this store first. If you're not satisfied, you can go to the Federal Trade Commission or your state attorney general (in California, also the California Privacy Protection Agency).
7. Storage in your browser
To work, the fitting room stores a random ID, your choices and your recent try-ons in your browser. It doesn't use advertising cookies. If you're signed in, your try-ons are saved to your account at this store only if this store's cookie banner allows it.
8. Security
Your data is encrypted in transit and at rest, kept in private storage, shared only through short-lived links, and only a few staff can reach it. No one on our team looks at shopper images.
9. AI-generated images
Every try-on image is labeled "AI-generated" and carries an invisible marker (C2PA or a watermark). It is a preview: color and drape may differ, and every size looks the same.
10. Changes
If we change something that affects what you agreed to, the fitting room asks you again. Version {{VERSION}}, effective {{EFFECTIVE_DATE}}.