Last updated 19 October 2026
Try-On privacy notice
Stillhouse Try-On lets a shopper see a product on themselves from one photo. A photo of a face is biometric data, so this page says plainly what happens to it - for shoppers first, then for the stores that install the app.
Who is responsible
The store you are shopping on is the data controller: it decided to offer try-on. Stillhouse (a sole proprietorship based in British Columbia, Canada) runs the try-on service for that store as its data processor, and only on its instructions. For anything about your data you can ask the store, or write to us at privacy@stillhouselabs.com.
What is collected
- The photo you upload. It shows your face, which makes it biometric data.
- What is made from it to do the job: a prepared reference of you, the area of the photo your face is in, and the try-on images generated of you wearing the product.
- If you choose to save a profile: your email address, and the one-time codes that confirm it is yours.
- A record that you gave consent: when, to which version of the notice, and the two statements you confirmed. It holds no image.
Before any upload you are shown a consent screen. Nothing is ticked for you, and nothing is uploaded until you agree.
One purpose
Your photo is used for one thing only: making try-on images of the store's products on you. It is not used to identify you, to train AI models, for advertising, or for anything else. The store does not get the right to reuse images of you outside your own try-on session.
Every photo is checked by an automated moderation step before use, and a photo that fails it, or that is not clear enough to use, is not used.
How long it is kept
| What | Kept for |
|---|---|
| Your photo, if you do not save a profile | Deleted, with everything made from it, within 24 hours |
| Your photo, if you save a profile | Up to 365 days from the last time you use it, or less if the store sets a shorter period |
| Generated try-on images | 30 days |
| The record that you consented | Seven years, as evidence of consent, with no image attached |
Deletion is permanent: the files are removed, not hidden.
A saved profile
Saving a profile, confirmed by email, means you do not have to upload again. A saved profile can be used on other stores that run Stillhouse Try-On, and each store you use it on is linked to it.
Who else processes it
To run the service we use cloud hosting and object storage, an image-generation model provider, an image moderation provider, and a transactional email provider. They process your photo only to do that job, and the image providers do not train on it. The current list is shown to each store in the app's settings, and stores are told before it changes.
Your rights
You can ask for a copy of your data, or for all of it to be deleted, at any time - from the try-on window, or by writing to privacy@stillhouselabs.com. A deletion is done within 24 hours. Deleting your data does not delete the record that you consented, which has no image in it. Depending on where you live you may also have the right to correct your data, to object, and to complain to a data protection authority - in Canada, the Office of the Privacy Commissioner of Canada or BC's Information and Privacy Commissioner. Try-on is for people aged 18 or over.
For stores: how we process shopper data
Installing Stillhouse Try-On makes this data processing addendum part of the agreement between your store (the controller) and Stillhouse (the processor), alongside the terms of service.
- Subject and nature. We generate try-on images for your shoppers from photographs they upload on your storefront. The data is facial images, which are biometric data; derived reference artifacts; generated images; the email addresses of shoppers who save a profile; and consent records.
- Purpose limitation. We process shopper data only to provide the try-on service, never for our own purposes, including model training or advertising.
- Instructions. We act only on your documented instructions, which are the installation and configuration of the app.
- Consent. Every shopper sees an explicit, blocking consent screen before any upload, held to the strictest applicable standard everywhere, and each consent record is kept for seven years.
- Retention. Anonymous photographs within 24 hours; saved profiles within 365 days of last use, or a shorter period you configure; generated images within 30 days. Deletion is a hard delete.
- Sub-processors. Cloud hosting and object storage, image-generation model providers, image moderation providers and transactional email. The current list is in the app's settings, and you are notified of changes.
- Requests. We honour Shopify's customer data request and customer redaction webhooks and shopper-initiated deletion, and help you with any other request.
- Security. Encryption in transit, and at rest for tokens and email addresses; private object storage with short-lived signed links; each store's data kept apart from every other's; no imagery in logs.
- Termination. All data scoped to your store is deleted within 48 hours of uninstalling, on Shopify's shop redaction request, except consent records.
- Reuse. Generated images contain a shopper's likeness under a single-purpose consent. Your store gets no right to reuse them outside that shopper's own session.