FitMirra AI Privacy Policy

This Privacy Policy explains how FitMirra AI collects, uses, shares, retains, and protects information when merchants install and use the FitMirra AI application (the “App”), and when shoppers interact with FitMirra AI features on a merchant’s storefront (the “Services”).

1) Roles and scope

  • Merchants (store owners/admin users): When a merchant installs and uses the App, we process certain information to provide the Services.

  • Shoppers (end customers): When a shopper uses storefront features (such as virtual try-on, size guidance, styling assistance, or “Complete the Look” recommendations), we may process information to deliver those features.

Depending on the context, we may act as a data processor/service provider on behalf of the merchant for shopper data, and as a controller/business for limited data we collect for our own operational purposes (for example, security logs).

2) Information we collect

A. Merchant and store information (from Shopify and the merchant)

When you install or use the App, we may collect:

  • Store and account details (for example: store name, myshopify domain, email, billing address, store location, and other details associated with the Shopify account)

  • App and admin-user activity (for example: app configuration settings, feature toggles, and installation/uninstallation events)

  • Product and catalog data required to power features (for example: product titles, descriptions, images, variants, sizes, pricing, availability, and collections)

  • Theme/app embed context needed to render widgets (limited technical data)

Shopify notes that installed apps can access certain account information, and may request additional access depending on functionality.

B. Shopper information (from storefront interactions)

Depending on how the merchant configures FitMirra AI and which features are enabled, we may process:

  • Shopping context (for example: product viewed, variant/size selected, and “Complete the Look” interactions such as clicking recommended items)

  • Inputs provided by the shopper for sizing or styling (for example: measurements, fit preferences, and style preferences if the feature requests them)

  • User content if the shopper uploads or provides it for virtual try-on (for example: a photo or image supplied by the shopper), where enabled by the merchant

We do not need or request payment card data to provide FitMirra AI’s features; checkout and payment processing remain within Shopify and the merchant’s payment provider.

C. Technical and usage data

We may collect:

  • Device and browser data (for example: IP address, browser type, operating system, timestamps)

  • Performance data (for example: page load and widget performance metrics)

  • Cookies/local storage identifiers used for essential functionality and analytics (where enabled)

3) How we use information

We use information to:

  • Provide and operate the App and its features (virtual try-on, AI style assistant, AI size guidance, “Complete the Look” recommendations)

  • Generate recommendations and storefront experiences requested by the merchant

  • Maintain security, prevent fraud/abuse, troubleshoot issues, and debug

  • Provide merchant support and respond to inquiries

  • Improve and optimize the App (for example: performance and reliability)

4) How we share information

We may share information in the following circumstances:

A. With service providers (sub-processors)

We may use vetted vendors to host infrastructure, deliver content, monitor performance, provide analytics, and operate AI/ML processing components. These providers process data under contractual confidentiality and security obligations.

B. With Shopify and the merchant

  • Shopify provides the platform APIs used to deliver the App.

  • The merchant can access data and settings related to their store and App configuration.

  • Storefront outputs (recommendations, widgets) are displayed to shoppers as part of the merchant’s storefront experience.

C. Legal, safety, and business transfers

We may disclose information if required by law, to protect rights and safety, to enforce agreements, or as part of a merger, acquisition, or asset sale.

We do not sell personal information. If you use the term “sale” as defined in some privacy laws, we do not “sell” personal information in that sense.

5) Data retention

We retain information only as long as necessary to provide the Services, comply with legal obligations, resolve disputes, and enforce agreements.

Retention periods can vary by data type and merchant configuration. For example:

  • Merchant account and billing records may be retained as required for accounting and compliance.

  • Logs and security records may be retained for a limited period for security and auditing.

  • Shopper-provided inputs and images (if used) are retained only as needed for the feature and operations, and consistent with the merchant’s configuration and our minimization practices.

6) Security

We implement administrative, technical, and physical safeguards designed to protect information, including access controls, encryption in transit, and least-privilege practices where appropriate. No method of transmission or storage is 100% secure; we cannot guarantee absolute security.

7) International transfers

We may process and store information in countries other than the merchant’s or shopper’s country of residence. Where required, we use appropriate safeguards for cross-border transfers.

8) Privacy rights and requests

Shopify requires public apps to provide privacy rights for all personal data regardless of where an individual is located.

Depending on your role:

A. Merchants

You can request access, correction, export, restriction, or deletion of your information by contacting us at privacy@fitmirra.ai

B. Shoppers

In most cases, the merchant is the primary point of contact for shopper privacy requests because the merchant controls the storefront and customer relationship. If a shopper contacts us directly, we may direct them to the relevant merchant or assist the merchant in fulfilling the request, as appropriate.

To submit a request, contact: privacy@fitmirra.ai with:

  • The merchant store domain (if known)

  • The nature of the request

  • Any relevant details to help verify and locate the data

9) Cookies and tracking

We may use cookies or similar technologies for essential functionality (for example: maintaining session state) and, where enabled, for analytics to understand App and widget performance. Merchants may be responsible for obtaining any required shopper consent on their storefront, depending on applicable law.

10) Children’s privacy

FitMirra AI is not directed to children, and we do not knowingly collect personal information from children. If you believe a child has provided personal information, contact us and we will take appropriate steps.

11) Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in the App, legal requirements, or our practices. We will update the “Effective date” and, if changes are material, provide reasonable notice.

12) Contact

For questions, complaints, or requests regarding this Privacy Policy or FitMirra AI’s data practices, contact:
Email: privacy@fitmirra.ai