Legal
Privacy Policy
Draft. This policy describes how Silhou currently handles data. Have it reviewed by counsel for your jurisdictions before launch, and fill in the bracketed details.
Who we are
Silhou (“Silhou”, “we”, “us”) provides an AI virtual try-on app for Shopify stores. Contact: [CONTACT EMAIL], [LEGAL ENTITY NAME AND ADDRESS].
When a shopper uses Silhou on a store, we process their data on behalf of that store (the merchant), who decides how Silhou is used there. When a shopper creates a Silhou profile to reuse photos across stores, Silhou is responsible for that profile.
What we collect
- Photos shoppers provide: the photo uploaded or taken for a try-on, and the generated try-on image.
- Product details: the product, variant, title and product image from the store, used to build the try-on.
- Sharing choice: whether the shopper agreed that the store may feature the look in lookbooks and marketing.
- Silhou profile (optional): the shopper’s email address, up to two saved photos (a face photo and a full-body photo), and sign-in sessions for each device.
- Abuse prevention: a salted, one-way hash derived from the shopper’s store customer ID or IP address, used only to enforce try-on limits. We do not store the IP address itself.
- Store data: the store’s domain and name, app settings, and the access token Shopify issues so the app can read product information.
- Website early-access signups: email address and, optionally, store URL.
If a shopper is signed in to the store’s customer account, the store may pre-fill their email when they choose to sign in to a Silhou profile. We still send a one-time code to confirm the email belongs to them.
How we use it
- To generate the try-on image the shopper asked for and show it to them.
- To let the store feature a look in its lookbooks, only if the shopper opted in.
- To let a shopper reuse their saved photos on other stores that use Silhou, if they created a profile.
- To enforce usage limits, prevent abuse, and operate and secure the service.
We do not sell personal data. We do not use shopper photos to train AI models. We do not create facial recognition templates or other biometric identifiers from photos.
What stores can see
The store can see try-ons made on its own store, including the generated image and, for photos uploaded there, the original photo, until those are deleted. A store cannot see a shopper’s Silhou profile, saved photos or email address, and cannot see try-ons made on other stores.
How long we keep it
- Try-ons the shopper did not share: deleted automatically after the store’s retention period (7 days by default, set by the store between 1 and 365 days).
- Shared looks: kept for the store’s lookbooks until the store deletes them or uninstalls Silhou.
- Silhou profiles: saved photos and device sign-ins are deleted after 180 days without use. Shoppers can delete a photo or their whole profile at any time from the try-on window.
- Sign-in codes: expire after 10 minutes and are stored only as a hash.
- Store data: when a store uninstalls Silhou, we delete its sessions. All of the store’s data is deleted when Shopify sends the shop redaction request (48 hours after uninstall).
Service providers
We use these providers to run Silhou. They process data only on our instructions:
- Convex: database and file storage.
- [RunPod / Alibaba Cloud Model Studio]: AI image generation. Photos are sent to generate the try-on and are not retained by us there.
- Resend: sending sign-in codes by email.
- Shopify: app platform and store data.
- Netlify: hosting for this website.
Data may be processed in the United States and the European Union. [Describe transfer safeguards, e.g. Standard Contractual Clauses.]
Your choices and rights
- Try-on is always optional, and sharing a look is off unless you tick the box.
- You can delete saved photos, sign out on a device, or delete your Silhou profile from the try-on window.
- Depending on where you live, you may have rights to access, correct, delete or port your data, or to object to processing. For try-ons on a store, contact that store or us. For Silhou profiles, contact us at [CONTACT EMAIL].
Children
Silhou is not intended for children under 16, and we do not knowingly collect their data.
Security
Data is encrypted in transit. Store requests to Silhou are signed by Shopify and verified. Access tokens and profile sign-in tokens are stored securely, and profile tokens only as hashes.
Changes
We’ll update this page when our practices change and revise the date above.