Brix-Tryon Privacy Policy

Brix-Tryon is an AI virtual try-on and AI model photo app for e-commerce stores in India. It runs as a Shopify app and can also be used on other e-commerce platforms and websites that add the Brix-Tryon widget. It is operated by Digifyce.

Merchant account data. For information about merchants and their stores, we decide how and why data is used. We act as the data fiduciary.

Shopper data in a merchant's store. When a shopper uses try-on on a merchant's store, the merchant decides why the data is used and is the data fiduciary. We process it on the merchant's behalf as a data processor, under the merchant's instructions.

This policy covers

• Merchants who install Brix-Tryon from the Shopify App Store, and the shoppers on their Shopify stores
• Merchants who use Brix-Tryon on other platforms or websites and the shoppers on those stores
• Visitors to our website

Where this policy says "store", "Shopify" or "Shopify app", it also covers the equivalent on another platform. We note where a platform makes a difference.

A. Merchants

• Store name and Shopify domain
• Merchant contact details
• Store data we access from the merchant's platform (Shopify or other): products, collections, variants, theme integration and orders for conversion tracking
• App and widget configuration
• Plan and billing information, handled through Shopify or the merchant's platform
• Usage and credit data

B. Shoppers

• The photo the shopper takes or uploads for try-on
• Email address and phone number entered to unlock the full-size result, with the marketing-consent choice and a timestamp
• Product viewed and selected variant
• Device type, browser information and a session identifier
• Actions after a try-on: add to cart, buy now, save image, share on WhatsApp, orders attributed

C. AI Studio

• Product photos merchants upload: front, back and detail views
• Model reference photos merchants upload
• Generation settings such as pose, background and aspect ratio
• Generated images saved to the Asset Library and Saved Models

Brix-Tryon uses AI image processing to create a try-on image of the shopper wearing the product.

Our commitments

• A consent notice is shown before the shopper uploads or takes a photo. The merchant can switch the notice on or off, and we recommend leaving it on.
• The photo is used only to create that shopper's try-on image and is not stored after processing.
• Temporary files may exist briefly while the image is processed. They are deleted automatically.
• We do not sell shopper photos, use them for advertising, or use them to train AI models without explicit permission.
• Merchants see the email, phone number and consent status a shopper enters, not the shopper's photo.

To create the image we send the photo to an AI image-processing provider acting on our instructions.

Before the full-size try-on result is shown, a shopper enters an email address and phone number and accepts the store's privacy policy and terms.

• We pass these details to the merchant. They appear in the merchant's Captured Leads table with the marketing-consent choice and a timestamp.
• The merchant is responsible for contacting shoppers only as their consent allows and in line with applicable marketing, telecom and privacy law.
• We do not use shopper email addresses or phone numbers to market to shoppers ourselves.
• A shopper can ask the merchant, or us, to correct or delete these details or to withdraw marketing consent (see Section 11).

• Merchants own the product photos they upload and the images they generate, subject to our Terms of Service.
• Generated images and saved models stay in the merchant's Asset Library until the merchant deletes them or uninstalls the app (see Section 14).
• A merchant who uploads a photo of a real person as a model reference must have that person's written permission, and must not upload photos of children without verifiable parental consent.
• Merchants are responsible for labelling AI-generated images where the law requires it.
• We do not use merchant uploads or generated images to train AI models without the merchant's explicit permission.

We do not sell personal data. We share it only as follows:

• Shopify and other e-commerce platforms, to run the app, authenticate merchants and process billing.
• The merchant, whose store the shopper is using, for leads and analytics.
• Service providers that process data on our instructions: cloud hosting, AI image processing, analytics and customer support tools.
• WhatsApp, only when a shopper chooses to share a try-on image. That sharing is governed by WhatsApp's own privacy policy.
• Authorities and advisers, where the law requires it or to protect rights and safety, and a successor in a merger or sale of our business, with notice to affected merchants.

The widget and our website record events and use session identifiers, cookies or similar browser storage to work and to report on use:

• Try-ons started and completed
• Add to cart, buy now, save image and WhatsApp share
• Device type (mobile, desktop, tablet)
• A session cookie on our website that limits the free demo try-on to one per visitor

We use this data to give merchants reports and to keep the service working. We do not use it for advertising and do not build advertising profiles. You can block cookies in your browser, but the demo and parts of the widget may stop working.

Brix-Tryon is intended for use by adults. Under India's Digital Personal Data Protection Act, 2023, a child is anyone under 18.

• A shopper under 18 must not use try-on unless a parent or lawful guardian uses it for them or gives verifiable consent.
• We do not store photos of children or adults. A photo used for try-on is processed only to create the try-on image and is not stored by us.
• We do not knowingly collect contact details from children, and we do not track or behaviorally monitor children or show them targeted advertising.
• Merchants who sell children's products must obtain verifiable parental consent before a child's image is uploaded, or turn try-on off for those products. Merchants remain responsible for lawful use of customer data on their stores.
• If you believe a child's data has been collected without consent, contact us using Section 16 and we will delete it.

Under India's Digital Personal Data Protection Act, 2023, you have the right to:

• Get a summary of the personal data held about you and who it has been shared with
• Ask for your data to be corrected, completed, updated or erased
• Withdraw your consent at any time, as easily as you gave it
• Have your grievance addressed
• Nominate another person to exercise these rights if you die or become unable to

Shoppers: the merchant whose store you used is responsible for your data, so please ask them first. You can also write to us using Section 16 and we will act on the request or pass it to the merchant. Merchants: contact us through the app or Section 16. Parents and guardians can make a request for a child.

We respond within the time Indian law requires. If your grievance is not resolved, you may complain to the Data Protection Board of India.

Data is processed and stored in India. We transfer personal data outside India only where the Digital Personal Data Protection Act, 2023 allows it, which means not to any country or territory the Government of India has restricted.

• Encrypted connections (HTTPS) and secure API communication
• Access controls limited to people who need the data
• Automatic cleanup of temporary files
• Protected server environments

No online service can promise absolute security. If a personal data breach affects you, we will notify the affected merchants, individuals and authorities as the law requires.

When a merchant uninstalls Brix-Tryon:

• Shopify access tokens are revoked.
• We delete or anonymise the store's data, including leads, analytics and AI Studio assets, within the period in Section 10.
• We act on Shopify's customer data request, customer erasure and store erasure notices, and on the equivalent notices from any other platform.
• Some billing or legal records may be kept where the law requires it.

We may update this policy. We will change the date at the top and, for material changes, notify merchants in the app or by email before the change takes effect.

This policy follows the Digital Personal Data Protection Act, 2023, the Information Technology Act, 2000 and the rules under them, to the extent they are in force, and is governed by the laws of India. The courts at Coimbatore, India have jurisdiction without limiting any right you have under Indian law.

We acknowledge complaints within 24 hours and resolve them within 3 to 4 days.