Privacy Policy & Biometric Data Safeguards

At AI Trial np, security is our foundational pillar. We process full-body photographs solely to render virtual try-ons for fabric fitting. We recognize the sensitivity of facial and body coordinates and enforce the following automated boundaries:

1. BIPA & GDPR Biometric Compliance

We process biometric identifiers (body contours, posture coordinates, and face structures) strictly with your explicit, opt-in consent. Under BIPA and GDPR Art. 9, you have absolute control over your visual profile. Consent can be revoked at any time, and uploads will be rejected without an active acknowledgement.

2. Strict Immediate-Purge Policy

Once you click "Generate Try-On", your source photo is processed by our AI pipeline. The original source photo is immediately deleted from our servers after successful processing. An hourly cleanup job removes any expired session data and generated outputs as an additional safeguard.

3. Cloud Providers

Uploaded references are stored temporarily on our servers and sent to our AI provider only for the requested try-on. Provider processing is governed by the applicable terms of service. The application:

does not expose any API credentials or customer images to the browser;
does not log raw image bytes or private image content;
keeps all storage private and serves results through expiring secure links.

4. Double-Token Session Protection

Sessions use high-entropy tokens stored as hashes in the database. Shopkeepers cannot preview the result image unless the customer actively checks the "Share result with shop dashboard" checkbox upon viewing their preview.

Security Audit Verified

Automated image-deletion systems are audited daily for orphaned session states.