Privacy Policy

Last updated: April 23, 2026

1. Introduction

Drapify ("we", "us", "our") provides an AI-powered virtual try-on and shopping assistant service to Shopify merchants. This Privacy Policy explains what personal data we collect, how we use it, and your rights regarding that data.

2. Who We Are

Drapify is operated by Drapify AI.
For privacy questions, contact: privacy@drapify.ai

3. Whose Data This Applies To

  • Merchants — store owners and staff who install Drapify from the Shopify App Store
  • Shoppers — end customers who interact with the Drapify widget on a merchant's storefront
  • Website visitors — visitors to drapify.ai

4. Personal Data We Collect

From Merchants

  • Store name, store domain, contact email, country
  • Subscription and billing status (managed by Shopify)
  • App configuration and settings

From Shoppers (via the merchant's storefront)

  • Photos uploaded for virtual try-on (face/body images)
  • Optional measurements entered for size recommendations
  • Email address if voluntarily provided for try-on results or account creation
  • First and last name if associated with a Shopify customer account
  • Order information (order number, status, shipping city/region/country) for AI assistant order lookup
  • Anonymous identifiers (browser fingerprint, session ID) for quota tracking
  • Conversation history with the AI shopping assistant

Automatically Collected

  • IP address, browser type, device type, operating system
  • Pages visited, features used, timestamps
  • Aggregated usage analytics

5. How We Use Personal Data

Purpose Data Used
Generate virtual try-on images Shopper photos, product images
Provide AI shopping recommendations Conversation, measurements, browsing context
Look up orders on shopper request Email + order number
Provide size recommendations Optional measurements
Personalize shopper experience Loyalty status, past interactions
Operate, secure, and improve the service Usage logs, error reports
Communicate with merchants Contact email
Comply with legal obligations All categories where required

6. Legal Basis for Processing (GDPR)

  • Contract — to provide the service merchants and shoppers requested
  • Legitimate interests — to secure, operate, and improve our service
  • Consent — for optional features such as marketing email opt-in
  • Legal obligation — where required by applicable law

7. Data Sharing

We do not sell personal data. We share data only with:

  • The merchant whose store the shopper is using
  • Shopify, where required to provide the integration
  • Trusted infrastructure and AI service providers that process data on our behalf under strict confidentiality and data-processing agreements
  • Legal authorities, where required by law

8. International Transfers

Personal data may be processed in regions outside your country, including the United States. Where required, we use Standard Contractual Clauses or equivalent safeguards.

9. Data Retention

  • Try-on uploads (shopper photos): automatically deleted within 24 hours
  • Generated try-on results: automatically deleted within 24 hours unless the shopper saves them
  • Shopper profiles, conversations, and merchant configuration: deleted immediately when the merchant uninstalls Drapify, with a verification sweep performed within 48 hours in line with Shopify's GDPR shop/redact requirement
  • GDPR shopper deletion requests: processed within Shopify's required timeframe, typically within 30 days
  • Audit logs and security event records: retained for up to 12 months for security and compliance purposes, then deleted
  • Backups: automatically expire on rolling schedules and are deleted no later than 30 days after creation

10. Security

We protect personal data using industry-standard safeguards including encryption at rest and in transit, access controls, monitoring, and regular review. See our Security Policy for detailed practices, and our Security Incident Response Policy for breach handling.

11. Your Rights

Depending on your location, you may have the right to:

  • Access the personal data we hold about you
  • Correct inaccurate data
  • Request deletion ("right to be forgotten")
  • Object to or restrict processing
  • Withdraw consent at any time
  • Request data portability
  • Lodge a complaint with a data protection authority

Shoppers: please direct requests to the merchant whose store you used. They control your data and we act on their behalf.
Merchants: contact privacy@drapify.ai.

12. Children's Data

Drapify is not directed at children under 16. We do not knowingly collect data from children. If you believe we have, contact us immediately.

13. Cookies

We use essential cookies to operate the widget and admin dashboard. See our Cookie Policy.

14. Changes to This Policy

We may update this Policy. Material changes will be communicated via the Drapify admin dashboard and/or by email. The "Last updated" date above always reflects the current version.

15. Contact

Email: privacy@drapify.ai

Related Policies