Using Lookvert
Terms of Service
Last updated: 2 November 2026
These terms govern your use of Lookvert, a Shopify app that generates virtual try-on images for fashion stores. Installing the app means you accept them. Part B is the data processing agreement that applies whenever Lookvert processes personal data on your behalf.
"We", "us" and "Lookvert" refer to the independent developer who operates the Lookvert service. "You" means the merchant who installs the app. For questions about these terms, contact support@lookvert.com.
Part A — Service terms
1. What the service does
Lookvert reads the product photos and product information in your store and generates try-on images and outfit composites from them. Images are produced by third-party AI providers on our instruction. Output is generated, not photographed: it approximates how a garment may look and is not a guarantee of fit, colour accuracy, or availability.
2. Your content and your rights to it
You confirm that:
- You own or are licensed to use the product images you make available to the app, including any rights needed for a model appearing in them, and that generating derivative images from them is permitted.
- You will not supply images of people under 18. The app screens product photos and will reject images it judges to show a minor, but that screening is a safeguard, not a substitute for your own checks.
- You will not use the app to produce misleading product representations.
You keep all rights in your product images. You also own the generated images for use in your store. We may process them as needed to run the service.
3. Shopper-uploaded photos
If you enable the feature that lets shoppers upload a photo of themselves, you are responsible for telling shoppers that this happens and for having a lawful basis to collect it. Our handling of those photos is set out in our Privacy Policy and in Part B.
4. Charges
Generation is metered. Charges are billed through Shopify under the plan shown in the app. A generation is charged when it succeeds; failed and blocked generations are not charged.
5. Availability and limits
The service depends on third-party AI providers. Those providers may refuse to produce an image for a given input, and we cannot override that. We do not warrant uninterrupted availability or that every product will produce a usable image.
6. Liability
To the extent permitted by law, our aggregate liability arising from the service is limited to the fees you paid for it in the three months before the claim. We are not liable for lost profits or indirect losses.
7. Termination
You may uninstall at any time. We may suspend the service for non-payment or for use that breaches clause 2. On uninstall, your data is deleted as described in Part B, clause B8.
8. Changes
We may update these terms. Material changes will be announced in the app or by email to the address on your Shopify account before they take effect.
Part B — Data processing agreement
This Part applies where we process personal data on your behalf. You are the controller; we are the processor. Where it conflicts with Part A, this Part prevails for data protection matters.
B1. Subject matter and duration
We process personal data only to provide the service described in Part A, for as long as the app is installed, plus the retention periods in B8.
B2. Scope of processing
| Categories of data subject | Types of personal data |
|---|---|
| Your shoppers who are logged in | Shopify customer ID |
| Your shoppers who use the upload feature | A photograph of themselves and the images generated from it |
| Your shoppers generally | A pseudonymous session identifier generated by the app, and widget interaction events linked to it |
| You and your staff | Store domain and app session credentials |
The app does not process shopper names, email addresses, phone numbers, postal addresses, or order data, and it does not request the permissions that would give access to them.
This Part does not cover emails you send to our support team. We handle support correspondence as a controller, as described in the Privacy Policy. Please do not include shopper information unless we need it to handle your request.
B3. Our obligations
- We process personal data only on your documented instructions, which these terms and your use of the app constitute.
- We do not sell personal data. We do not train models on shopper data. Our AI providers' use of submitted content is governed by their own terms; we use API tiers under which submitted content is not used for model training.
- Anyone with access is bound by confidentiality.
- We keep the security measures in B5 and will not materially weaken them.
B4. Sub-processors
You authorise the following sub-processors:
| Sub-processor | Purpose |
|---|---|
| Google (Gemini API) | Image and text generation |
| OpenAI | Image generation for outfit composites |
| Cloudflare (R2) | Object storage for photos and generated images |
| Vercel | Application hosting |
| Neon | Database hosting |
| Resend | Transactional email to merchants |
We will give notice before adding or replacing a sub-processor. If you object on reasonable data protection grounds, you may uninstall and we will refund any prepaid, unused fees.
B5. Security
- All data is transmitted over TLS.
- Shopper photos and the images generated from them are held in a private store that is not publicly readable.
- App session credentials are encrypted at rest. Database and object storage are encrypted at rest by the providers in B4.
- Requests from your storefront are signed and verified; webhooks from Shopify are verified by HMAC signature.
- Public image addresses are randomised so they cannot be guessed or enumerated.
- Development, staging and production run on separate databases and separate storage. We do not use live shopper data for testing.
B6. Assisting you with data subject requests
Requests reach us automatically through Shopify's mandatory privacy webhooks, and we act on all three:
| Request | What we do |
|---|---|
| Access | Return the shopper's try-on records, remaining allowance, and how many photos are held. We do not return image files; see our Privacy Policy for why. |
| Erasure | Delete that shopper's records, allowance, and stored objects, including stored generated images. |
| Store erasure | Delete your store's data, other than the records in B8(3). |
If you receive a request we cannot action through those webhooks, contact privacy@lookvert.com and we will assist.
B7. Personal data breach
We will notify you without undue delay, and in any event within 72 hours of becoming aware, of a personal data breach affecting data processed for you, with the information you need to meet your own notification duties.
B8. Retention and deletion
- Shopper-uploaded photos are deleted as soon as generation ends, whether it succeeds or fails. A storage lifecycle rule schedules remaining uploaded photos for expiration after 1 day and generated images for expiration after 7 days. Lifecycle deletion runs in the background and can complete after the expiration time. Shoppers can delete their generated images earlier in the widget.
- After uninstall, Shopify sends us a store erasure request approximately 48 hours later. We process that request to delete your store’s configuration and usage data, except for records retained as described below.
- Billing records are retained after deletion to meet accounting and tax obligations, as permitted by GDPR Art. 17(3)(b).
B9. International transfers
The sub-processors in B4 operate globally and personal data may be processed outside your country, including in the United States. Transfers rely on the transfer mechanisms those providers make available in their own data processing terms.
B10. Audit
On reasonable written request, and no more than once a year, we will provide the information needed to demonstrate compliance with this Part.
Who we are
Lookvert is operated by an independent developer. We do not have a postal address for correspondence; please contact us by email.
Contact
Terms and service: support@lookvert.com
Data processing and privacy: privacy@lookvert.com.
We reply to data requests within 30 days.