Privacy
Privacy Policy
This page covers how Chic Studio handles merchant account data, uploaded assets, API credentials, generated outputs, and connected commerce workflows.
1. Scope
This Privacy Policy explains how Chic Studio collects, uses, stores, and shares information when merchants use the dashboard, hosted try-on widget, public API, and connected commerce integrations.
If you use the widget or API to collect shopper-submitted photos, you are responsible for providing any notices and consents required under applicable law.
2. Information we collect
We may collect information you provide directly, information created through product usage, and information received from connected services.
- Account information such as name, email address, company name, and profile details.
- Referral partner codes and the account, payment, discount, refund, and payout records needed to attribute introductions and reconcile referral commissions.
- Uploaded assets such as product photos, campaign references, model images, and try-on source photos.
- Generated outputs and related metadata such as prompts, model selections, request IDs, export history, and generation status.
- Integration data such as Shopify store domain, granted scopes, product identifiers, and publish activity.
- Developer access data such as API credential metadata, embed token usage, and request timestamps.
- Technical and security information such as logs, device context, browser data, and service diagnostics.
3. How we use information
We use information to operate, secure, improve, and support the service.
- Authenticate users and manage access to the merchant dashboard.
- Generate imagery, virtual try-on results, and related assets.
- Store files, refresh signed asset URLs, and maintain generation history.
- Connect to Shopify and publish approved outputs to merchant product media.
- Issue, validate, and monitor public API credentials and hosted widget access.
- Prevent abuse, investigate incidents, and maintain service reliability.
- Provide support, onboarding, and product communications.
- Attribute referrals. When you follow a referral link, we store its code in your browser for up to 30 days and link an eligible referral to your account after sign-in. Referrers can see their own commission balances, payment types, payment dates, and completed payout amounts. We do not show referred customer names, email addresses, or provider billing identifiers to referrers. Detailed customer and transfer reports are restricted to authorized administrators.
4. Virtual try-on and personal images
Virtual try-on may involve photos of real people. Those images are processed to create requested try-on outputs and to support the feature workflow.
If you submit images of customers, employees, contractors, or talent, you are responsible for having the rights and permissions needed to upload and process those images.
5. Public API and embedded widget
When you create API keys or embed tokens, we store credential metadata and hashed token values, not the full secret in reusable form.
Requests sent through the public API or hosted widget are associated with the merchant account that issued the credential.
6. Shopify and connected services
If you connect Shopify, we store the store domain, granted scopes, encrypted access token material, and operational metadata needed to keep the connection working.
We use Shopify data only to support connection management, product search, and publishing generated media to merchant-owned products.
7. How we share information
We do not sell personal information. We may share information with service providers and partners only as needed to operate the service.
- Cloud hosting, database, file storage, monitoring, and analytics providers.
- AI generation providers used to create requested outputs.
- Payment, authentication, and email support providers.
- Commerce platforms such as Shopify when a merchant chooses to connect them.
- Authorities, advisers, or counterparties when required by law or necessary to protect rights and safety.
Analytics and advertising measurement
Analytics is off until you select Allow analytics in Analytics preferences. One choice controls PostHog, Meta, and TikTok. This covers service use and advertising effectiveness. To change or withdraw your choice later, use the Analytics preferences control in this section. Your choice does not affect access to the service.
PostHog receives selected page visits, successful registrations and sign-ins, upload or deletion types and sizes, subscription categories and prices, and selected feature-use categories. It also receives your IP address and browser request information. After sign-in, it can receive an opaque account identifier and subscription category. We do not send account names, email addresses, uploaded content, or arbitrary event properties. We use explicit requests without automatic collection, session recording, or an analytics retry queue.
Meta and TikTok receive selected public page visits, successful email registrations, and verified purchase or trial events. Purchases include the amount after discounts and before tax, and the currency. We do not send account identifiers, names, email addresses, or raw payment references to these advertising providers.
Provider requests use approved page paths without query strings, fragments, invitation tokens, or document referrers. Meta receives your IP address and browser request information and may use its cookies. TikTok receives your browser user agent through our server relay. We do not forward your IP address to TikTok. We do not load either advertising provider’s JavaScript SDK.
Withdrawal stops new requests. Requests already submitted cannot be recalled. Your choice lasts 180 days in this browser. Earlier Meta-only choices require a new choice. Browser conversion references last up to 90 days. We also keep a hashed checkout claim on our server to prevent replay from another browser.
These providers process information under their own privacy policies: PostHog at https://posthog.com/privacy, Meta Platforms Ireland Limited at https://www.facebook.com/privacy/policy/, and TikTok at https://www.tiktok.com/legal/page/eea/privacy-policy/en. Processing can involve international transfers. Browser privacy settings and blockers can prevent measurement.
8. Retention
We retain information for as long as reasonably necessary to provide the service, maintain security, resolve disputes, comply with legal obligations, and enforce agreements.
Retention periods may vary depending on asset type, support needs, billing records, and whether a merchant keeps an account active.
9. Security
We use reasonable technical and organizational measures intended to protect data against unauthorized access, loss, misuse, or alteration.
No system is perfectly secure, and you should also protect your own account credentials, API keys, and internal operational processes.
10. International transfers and rights
Your information may be processed in countries other than the one where you are located. Where required, we use appropriate safeguards for cross-border transfers.
Depending on applicable law, you may have rights to access, correct, delete, export, or restrict certain information.
11. Contact
For privacy questions or requests, use the contact channel below and include your company name, account email, and enough detail for us to verify and process the request responsibly.
Effective date
October 13, 2026
Applies to
Dashboard, public API, hosted widget, and Shopify connection
Merchant data
Account details, uploaded assets, generation metadata, and support context.
Try-on images
Processed to create requested outputs and to maintain generation history.
Commerce connections
Encrypted Shopify credentials and connection metadata needed to publish media.
Built for fashion operators
Chic Studio helps clothing brands generate product photographs, styled looks, and campaign imagery, then review and organize the results in one workspace.
Address131 Continental Dr, Suite 305, Newark, Delaware