Introduction
Purple Lab Virtual Try-On ("Purple Lab," "we," "our," or "us") provides a Shopify application and storefront virtual try-on experience. This policy explains what information the service processes, why it is needed, which service providers receive it, and the choices available to merchants and shoppers.
Information we collect
2.1 Merchant information
- Shopify store domain, installation status, subscription plan, and billing-cycle information.
- Product identifiers, titles, handles, product images, and virtual try-on configuration.
- Credit usage, generation timing, view type, errors, and other operational analytics.
- Information a merchant chooses to provide in a support request.
2.2 Shopper photos and results
When a shopper chooses a photo, the browser sends it to Purple Lab so it can be submitted to Google Gemini for the requested generation. The active storefront flow does not persist the uploaded shopper photo as an image in Purple Lab storage. The generated image is returned to the shopper's browser and remains available in that browser session for viewing, sharing, or downloading. Purple Lab stores an operational try-on record with placeholder image fields rather than the storefront photo or generated image.
2.3 Abuse prevention and technical data
- The storefront does not request or trust a shopper email address for identity.
- We derive keyed, pseudonymous abuse-prevention identifiers from a browser-session ID and request network address. The raw storefront network address is not stored in the try-on record.
- We process request timestamps, product and shop identifiers, view type, credit usage, generation duration, and sharing-event metadata needed to operate and protect the service.
- Browser session history is stored locally in the shopper's session storage and is cleared by the browser when that session ends.
2.4 Merchant-initiated tests
The authenticated merchant test tool can create operational records and generated outputs for the merchant's own tests. Merchants should use synthetic photos or photos they have permission to process.
How we use your information
- Generate the requested virtual try-on or merchant model photo.
- Authenticate merchants, provide app functionality, and synchronize configured products.
- Apply credit, session, and abuse limits and prevent unauthorized use.
- Process Shopify billing and show merchants their usage.
- Diagnose failures, maintain security, and improve reliability.
- Respond to support and privacy requests.
Service providers and disclosures
- Google Gemini: Receives the shopper photo and relevant product image to generate the requested output. Google's handling is governed by the applicable Google service terms and privacy commitments.
- Supabase: Stores merchant configuration, product records, operational try-on metadata, credit records, and analytics.
- Shopify: Provides app installation, merchant authentication, store data, theme-extension delivery, and billing.
- Railway and Redis: Host the application and provide short-lived rate-limit and request-protection infrastructure.
We do not sell personal information or share it for third-party advertising. We may disclose information when required by law or when necessary to protect the service, merchants, shoppers, or our legal rights.
Retention and deletion
- Storefront photos and full generated results are not persisted as images by Purple Lab after the response is delivered.
- Pseudonymous abuse-prevention identifiers are retained for up to seven days and are automatically cleaned up.
- Merchant configuration, product data, usage records, and billing records are retained while needed to provide the installed service and meet operational, accounting, or legal obligations.
- Shopify privacy webhooks are used to process customer data requests, customer erasure requests, and shop erasure requests.
- Uninstalling the app initiates the applicable Shopify data-erasure process; some billing or security records may be retained where legally required.
Security
We use transport encryption, access controls, Shopify authentication, signed storefront requests, rate limits, payload validation, and restricted server-side credentials. No system can guarantee absolute security, but we limit the data we retain and review safeguards as the service changes.
Your rights and choices
- Choose whether to upload a photo or use virtual try-on.
- Request access, correction, deletion, restriction, or portability where applicable.
- Contact the merchant whose storefront you used or Purple Lab using the address below.
Merchants can view pending Shopify privacy requests in the app and can uninstall the app when they no longer want to use the service.
Children's privacy
Our service is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.
International processing
Our providers may process information in countries other than the country where the merchant or shopper is located. Applicable provider safeguards and contractual terms govern that processing.
Changes to this policy
We may update this policy when the service or legal requirements change. The effective date above identifies the current version. Material changes will be communicated through an appropriate merchant-facing channel.
Contact information
For privacy questions or requests, contact:
Location: Kingston, Jamaica