Privacy Policy
Last updated: September 30, 2026
1. Who We Are
Tryvio is a virtual try-on application for Shopify stores, operated by MiYoMi OOD (МиЙоМи ООД), UIC BG207348449, 26 Yantra St, Golyamo Vranovo, Slivo Pole, Ruse Region, Bulgaria. This Privacy Policy explains how we collect, use, store, and protect personal data when you interact with our services — as a merchant (a Shopify store owner) or as a shopper (a visitor who uses the try-on widget).
For questions or to exercise your rights: tryvioai@gmail.com
2. Data We Collect
From Shoppers (widget users)
| Data | Purpose | Legal Basis |
|---|---|---|
| Uploaded photos | Virtual try-on generation | Consent (explicit upload action) |
| Generated try-on images | Displaying results | Legitimate interest |
| Email address | Optional — only if submitted via email capture form | Consent |
| Anonymous session ID | Analytics, fraud prevention | Legitimate interest |
| Shopify Customer ID | Linking try-on to customer account (only if logged in) | Legitimate interest |
We do not collect names, addresses, payment data, or any other data from your Shopify account.
From Merchants (Shopify store owners)
| Data | Purpose |
|---|---|
| Store domain | App functionality |
| Shopify access token | Making API calls on your behalf |
| Product catalog | Populating the try-on widget |
| Analytics events | Merchant dashboard metrics |
| Subscription plan & usage counters | Billing management (plan tier, try-ons used, overage) |
We do not collect or store credit card numbers or any payment instrument data. All payments are processed exclusively by Shopify through the Shopify Billing API. See our Terms of Service for billing details.
3. How We Process Photos
When a shopper uploads a photo:
- The photo is stored in our secure cloud storage (Supabase).
- The photo URL is sent to our AI processing partner (KIE.AI or FAL.AI) to generate the try-on result.
- The generated image is saved back to our storage.
- Both the uploaded photo and the generated image are automatically deleted within 30 days.
We do not use shopper photos for AI model training.
4. Third-Party Sub-Processors
| Processor | Purpose | Data Shared | Their Retention |
|---|---|---|---|
| KIE.AI (NEXUSAI SERVICES LLC) | AI try-on generation | Shopper photos | Uploaded files: 3 days; Generated: 14 days |
| FAL.AI | AI try-on generation | Shopper photos | Temporary uploads: 1 day |
| Supabase Inc. | Database and file storage | All app data | Per our retention policy below |
| Shopify | E-commerce platform | Standard OAuth data | Per Shopify's Privacy Policy |
| Google Ireland Limited (Google Analytics) | Visitor analytics on tryvio.ai — only with your consent | Pages viewed, device, approximate location | At most 14 months |
| Meta Platforms Ireland Limited (Meta pixel) | Ad measurement and audiences — only with your consent | Pages viewed and actions on the site | Per Meta's Privacy Policy; audiences at most 180 days |
5. Cookies and Analytics on tryvio.ai
This section is about our website, tryvio.ai — not the try-on widget in our merchants' stores, which never loads these tools.
The cookies the site needs to work are always set. Analytics and marketing cookies are set only if you accept them in the cookie banner; until then Google and Meta receive nothing from the site. You can change or withdraw your choice at any time with Cookie settings at the bottom of every page — withdrawing deletes their cookies from your browser.
| Cookie | Set by | Purpose | Lifetime |
|---|---|---|---|
tryvio-site-locale | Tryvio | Remembers the language you picked (necessary) | 1 year |
ttn_consent | Tryvio | Remembers your cookie choice (necessary) | 6 months |
ttn_attr | Tryvio | Only after you follow a link from one of our emails or partners: which link led to an app install | 30 days |
_ga, _ga_* | Google Analytics — only with your consent to analytics | Counts visits, which pages and languages are read, and whether visitors go on to our Shopify App Store listing | 13 months |
_fbp, _fbc | Meta pixel — only with your consent to marketing | Measures our ads and builds audiences of site visitors to show them to | 90 days |
We also keep a few settings in your browser's local storage — for example that you closed our offer pop-up. They never leave your device.
Google Analytics
Google Ireland Limited processes the analytics data on our behalf, as our processor. It sees the pages you view, your approximate location, your device and browser, and the buttons you use (for example “Install on Shopify”); Google Analytics 4 does not store IP addresses. User- and event-level data is kept for at most 14 months. Legal basis: your consent (Art. 6(1)(a) GDPR). Google may transfer data to Google LLC in the United States under the EU–US Data Privacy Framework.
Meta pixel
For the pixel, we and Meta Platforms Ireland Limited are joint controllers for collecting the data and sending it to Meta, under Meta's Controller Addendum; what Meta does with it afterwards is governed by Meta's Privacy Policy. The pixel sees the pages you view and what you do on them (viewing pricing, clicking install, sending a contact form), which lets us measure our ads and show them to people who visited. Audiences built from site visits keep a visitor for at most 180 days. Legal basis: your consent (Art. 6(1)(a) GDPR). Meta may transfer data to Meta Platforms, Inc. in the United States under the EU–US Data Privacy Framework.
Besides Cookie settings, you can also opt out with Google's browser add-on and in your Meta ad preferences.
6. Data Retention
| Data Type | Retention Period |
|---|---|
| Shopper uploaded photos | 30 days, then permanently deleted |
| Generated try-on images | 30 days, then permanently deleted |
| Email addresses | Until deletion request |
| Analytics events | 12 months |
| Merchant store data | While app is installed + 30 days after uninstall |
| Shopify access tokens | Deleted immediately on app uninstall |
7. Your Rights (GDPR)
If you are in the European Economic Area (EEA), you have the right to:
- Access — request a copy of the personal data we hold about you.
- Rectification — ask us to correct inaccurate data.
- Erasure — ask us to delete your personal data.
- Restriction — ask us to restrict how we process your data.
- Data Portability — receive your data in a machine-readable format.
- Objection — object to processing based on legitimate interest.
To exercise any right, email tryvioai@gmail.com with your email address or store name and the specific request. We will respond within 30 days.
8. Security
- All data is transmitted over HTTPS/TLS.
- Files in Supabase Storage are not publicly accessible without a signed URL.
- Access tokens are encrypted at rest.
- We comply with Shopify's API security requirements.
9. Changes to This Policy
We will update the "Last updated" date at the top when our practices change. Continued use of the app after changes constitutes acceptance of the updated policy.
10. Contact
Tryvio Privacy
Email: tryvioai@gmail.com
You may also contact your local data protection authority if you have an unresolved complaint.