Store Apps privacy policy

Store data

When a store installs an App, it grants access to its products. The App reads each product's title, description, type, tags, SKU and photos to create images and videos, and writes to the store only what the merchant chooses to publish.

We keep the store's address, its encrypted access credentials, the App's settings, the generations made and the credit purchases made through Shopify. The Apps do not ask for access to the store's orders, customers or payments.

Trama account

Each App works linked to a Trama studio. A studio admin confirms the link, and every generation uses that studio's credits. The studio's history records who linked the store and when.

Shopper photos in the try-on

Trama Virtual Try-off adds a try-on to the product page. A shopper sends a photo only after ticking the consent box. The photo is used only to create that try-on and is processed by the image generation services Trama engages for it.

The photo and the result expire 24 hours after the try-on. A scheduled cleanup, which runs every few minutes and retries when it fails, then deletes the files. The result link works for one hour; once the try-on has expired and its files are deleted, the link stops working and the App does not create another.

What remains is a record of the try-on with no images: the store, the product and its category, the try-on's status and error message, if any, the dates, internal identifiers of the studio, the generation and the deleted files, and a cryptographic digest (hash) of the visitor, which limits the number of try-ons per hour. The generation also stays in the studio's history, without the images.

On Shopify, that digest comes from the customer ID when the shopper is logged in to the store, or from a random ID kept in the browser. On VTEX, it comes from a digest of the visitor's IP address, computed before it reaches Trama. We do not keep the ID or the IP address, nor the shopper's name, email or any other customer data.

Privacy requests

Shopify forwards to the Apps the data access and deletion requests made by customers and stores (customers/data_request, customers/redact and shop/redact). The Apps keep no customer names, emails, addresses or orders, and try-on photos expire after 24 hours and are deleted shortly after.

When an App is uninstalled, its connection loses the access credentials at once. When Shopify asks us to delete a store's data, we delete the connection and what it holds. Credit purchases stay in the Trama studio's history as a billing record.

Contact

To ask for access to, correction of or deletion of data, write to trama@nobuzz.io.