OMG AI Shop The Look Privacy Policy

Last updated: 14 November 2026

1. Who we are

OMG AI Shop The Look (the "App") is a Shopify app that turns a store's products into AI-generated outfit images and shows them on the storefront as shoppable looks. It is operated by Vandelay SRL, a company registered in Romania ("we", "us", "our").

This policy explains what personal information the App collects, why we use it, who we share it with, how long we keep it, and the rights you have. It applies to merchants who install the App ("you") and to shoppers who visit a store that uses it.

We act in two roles:

• For merchant account information (your store and contact details, billing and support requests), we decide how it is used and are responsible for it as a controller.
• For information about a store's shoppers (order details), we process it only on the merchant's behalf and under the merchant's instructions, as a processor. The merchant's own privacy policy also applies to that information.

Our commitments for shoppers' information. When we process shoppers' information on your behalf, we use it only to show you the sales your looks drove, and only on your instructions. Only the people who run the App can access it, and they keep it confidential. We protect it as described in section 9, share it only with the providers in section 5, help you answer shoppers' privacy requests, and delete it as described in section 7. If a breach affects it, we'll tell you without undue delay and help you meet any duty to notify authorities or shoppers. For that information, this policy is our data processing agreement with you.

2. Information we collect

We collect only what the App needs to create looks, show them on your storefront and bill for them.

What we don't collect. The App doesn't collect or store shoppers' names, email addresses, phone numbers, postal addresses or payment details. Our order webhook is limited to the fields listed above. When Shopify forwards a privacy request about a shopper, it includes that shopper's email or phone number; we use it only to handle the request and then delete it.

Why the App has access to shoppers' contact details. Shopify requires apps that show its sales reports to have permission to read shoppers' names, email addresses, phone numbers and addresses. The App has that permission only for its sales charts (section 3). The charts show totals, load straight from Shopify into your Shopify admin and never reach our servers. The App never requests, shows or stores a shopper's contact details.

3. How we use information

We use the information above only to provide and support the App, never for advertising, and we never sell it.

• Creating looks. We send your selected product images, product details and reference photos to our AI provider to generate look images, titles and color swatches (see section 4).
• Showing looks on your storefront. We save your looks, images and style settings to your own Shopify store, as files and app data, so your theme can display them.
• Sales reporting. When a shopper buys a product added from a look, we mark that order in your store with an app order field and an "OMG AI Shop The Look" tag, and keep a summary of the order so the App can show you the sales your looks drove. The App's charts are Shopify's own sales reports for your store, limited to orders from looks; they show totals only (see section 2).
• Plans and credits. We check your plan with Shopify to grant image credits, apply trials and decide which features your storefront shows.
• Support. We use your name, email and message to answer setup and support requests.
• Keeping the App working and secure. We use error reports, logs and usage records to fix problems, prevent abuse, and track what each image costs us to make. We may also look at the product images the App sent to our AI provider, to check that it picked the right ones.

We process merchant information to perform our agreement with you and for our legitimate interest in running a reliable, secure service. We process shopper order details on the merchant's instructions, so the merchant can see the sales the App drove. We never use shoppers' information for profiling, marketing or automated decisions about them.

4. AI image generation

The App creates images with a third-party AI provider, under terms that don't allow it to use the content we send to train or improve its models.

• What we send. For each image: the product images and product details you selected, the reference photos you chose or uploaded, and our instructions. We send no shopper information.
• How our provider handles it. It processes this content only to return the result. It may keep prompts and results for a limited time, only to detect abuse.
• Photos of people. If you upload a photo of a real person, you must have their permission to use it this way. Don't upload photos of children or images you don't have the rights to.
• Your images. We don't claim ownership of the images you create. Review them before you publish: AI output can contain mistakes.

5. Who we share information with

We share information only with Shopify and the types of service providers below, each bound by contract to use it only to provide their service to us.

We may also disclose information if the law requires it, to protect the rights and safety of our users or of others, or as part of a merger or sale of our business, in which case this policy continues to apply. We don't sell or rent personal information, and we don't share it for advertising.

6. On your storefront

The App's widget sets no cookies, uses no local storage or tracking pixels, and sends nothing about shoppers to our servers. Because it doesn't track shoppers, it works the same whatever a shopper chooses in your store's cookie or privacy settings.

• Displaying looks. The widget loads looks, images and products from your own Shopify store, and talks only to Shopify's standard storefront features (such as the cart).
• Adding to cart. When a shopper adds a product from a look, the widget adds a hidden line-item property (_ai_shop_the_look_app) holding the look's ID. It travels with the cart and order inside Shopify, and is how the App recognizes the orders its looks drove.
• In the theme editor. Only while a merchant edits their theme, the widget reads the theme's colors and fonts and sends them to us, so the App can match your store's style. This happens in no shopper's browser.

7. How long we keep information

We keep your information while the App is installed, and delete it about 48 hours after you uninstall, apart from the few records listed below.

• When you uninstall. We immediately delete our copies of your generated images and the App's AI usage records.
• Images on our servers. Images the App generates, and the product images it sends to our AI provider, stay on our servers for 7 days at most and are then deleted automatically. Images you save to a look are stored in your Shopify store.
• 48 hours later. When Shopify sends its store deletion request, we delete your attributed order records and the rest of your store's data, and erase the store owner's contact details. If you reinstall within those 48 hours, nothing is deleted.
• What we keep after that. A record of your store (its domain, name and store settings) with its plan, trial and credit history, without the owner's contact details, so free credits and trials can't be claimed twice. We also keep image cost totals no longer linked to your store, and a log of the privacy requests we handled (their type and dates).
• Shopper requests. When Shopify forwards a shopper's deletion request, we delete that shopper's attributed order records within 30 days.
• Support tickets stay in our support system while we need them to support you. Error reports and server logs are deleted automatically after a limited period.
• Backups. Our database is backed up automatically, and backups are encrypted. Older backups are replaced on a schedule, so information we delete is gone from them within 90 days.

Images and order tags the App saved in your Shopify store stay in your store, under your control, until you delete them from your Shopify admin.

8. Your rights

Depending on where you live, you can ask us to access, correct, delete, export or restrict the use of your personal information, or object to how we use it. Email us at the address in section 10 and we'll reply within 30 days.

• Merchants can make these requests directly to us. Uninstalling the App also starts the deletion described in section 7.
• Shoppers should contact the store they bought from. The store controls its shoppers' data, and Shopify passes their requests to us; we answer within 30 days. If you contact us directly, we'll forward your request to the store.
• EEA, UK and Swiss residents can also complain to their local data protection authority, or to ours: Romania's National Supervisory Authority for Personal Data Processing (ANSPDCP, dataprotection.ro).
• California residents have the right to know, delete and correct their information, and not to be treated differently for using these rights. We don't sell personal information or share it for cross-context behavioral advertising.

We may need to confirm your identity, or that you own the store, before acting on a request.

9. Transfers, security, children and changes

International transfers. Vandelay SRL is based in the EU. Some of our service providers process information outside the EEA, for example in the United States. Where they do, we rely on recognized safeguards, such as adequacy decisions, the EU-U.S. Data Privacy Framework or Standard Contractual Clauses.

Security. All traffic to and from the App is encrypted with TLS, and our hosting provider encrypts the App's database, stored images and backups at rest. The App signs in through Shopify's session tokens, keeps each store's data separate, and keeps API keys on our servers, never in your storefront. Test and production data are kept in separate environments, and only the people who run the App can access production systems. No system is perfectly secure; if a breach affects your information, we'll tell you without undue delay.

Children. The App is a business tool for merchants and isn't directed at children under 16. We don't knowingly collect their information.

Changes. We'll post any update here and change the "Last updated" date. If a change materially affects how we use your information, we'll tell you in the App or by email before it takes effect.

10. Contact us

For questions about this policy or to make a privacy request, email support@typefolly.zendesk.com.

Vandelay SRL, Romania