GlassFace Try-On for Shopify
Privacy Policy
GlassFace never uploads or stores shoppers' faces or camera images. The camera is processed entirely inside the shopper's own browser. We store only what a merchant's store needs to show try-ons, and anonymous usage counts.
This policy explains what the GlassFace Try-On app ("GlassFace", "we", "us") collects when a merchant installs it on a Shopify store, and when that store's visitors ("shoppers") use the Try on button. GlassFace is operated by Lingquay.
1. Shoppers
Camera and face
When a shopper taps Try on and allows camera access, the video is analysed in their browser on their own device to find the position of the face and draw the glasses. No video, photo, face image, face measurement or face geometry is sent to GlassFace, to the merchant or to anyone else, and nothing is stored after the try-on window is closed.
A shopper may enter their pupillary distance (PD) to improve the size estimate. This number stays in their browser and is not sent to us.
If a shopper uses the camera button to take a picture, the picture is created on their device and is only saved or shared if they choose to do so themselves.
Anonymous usage counts
To give merchants try-on statistics, the store sends us an event when a product page shows the Try on button, when a try-on is opened, and when the add-to-cart or buy button is pressed after a try-on. Each event contains only the store, the product ID and the event type.
To avoid counting the same visitor twice on the same day, we combine the visitor's IP address with a random value and keep the resulting one-way hash in memory for at most one day. IP addresses are never written to disk or linked to a person, and we keep only daily totals per product, for 90 days.
GlassFace does not set cookies, does not use advertising or analytics trackers, does not build shopper profiles and does not receive customer names, emails, addresses or orders.
2. Merchants
When a merchant installs GlassFace, we store:
- the store's myshopify domain and primary domain, and the access token Shopify issues to the app;
- the merchant's GlassFace plan, as reported by Shopify billing;
- for products the merchant imports: the product ID, title, handle, the product photo address, the frame size, and the try-on images we generate from that photo;
- the anonymous try-on counts described above.
The app requests read-only access to products. It does not access customers, orders or payment information. Billing is handled by Shopify; we never see card details.
3. How we use information
Only to provide the service: to generate and show try-ons, to apply the limits of the merchant's plan, to show statistics to the merchant, to keep the service secure and to provide support. We do not sell or rent information, and we do not use it for advertising.
4. Where information is stored and who processes it
- Vultr Holdings hosts our servers (Tokyo, Japan).
- Shopify provides the store platform, app installation and billing.
- Alibaba Cloud (Shanghai, China) receives product photos that merchants import, to separate the glasses from the photo background. Only product photos are sent, never shopper images or personal information. Alibaba Cloud returns the result and keeps it only briefly.
- Let's Encrypt issues our TLS certificates (no personal data is shared).
All traffic to GlassFace is encrypted with HTTPS. Access tokens and data are kept on servers that only we administer.
5. Retention and deletion
- When a merchant uninstalls GlassFace, the access token is invalidated immediately.
- All of the store's data, including generated images and statistics, is deleted when Shopify sends the shop redaction request, which happens 48 hours after uninstalling.
- Usage counts older than 90 days are deleted automatically.
- Because we hold no data about individual shoppers, customer data requests and customer erasure requests from Shopify have nothing to return or delete. We answer them all the same.
6. Your rights
Depending on where you live (for example under the GDPR in the EU and UK, or the CCPA in California), you may have the right to access, correct, delete or export personal information, and to object to processing. Merchants can delete any try-on at any time from the app, or all data by uninstalling. Shoppers: we hold no personal information about you, but you can contact us or the store you visited with any question.
7. Children
GlassFace is a business tool for merchants and is not directed at children. We do not knowingly collect information from children.
8. Changes
If we change this policy, we will update the effective date above and, for material changes, tell merchants in the app before the change takes effect.
9. Contact
Questions or requests: support@lingquay.com.