Effective date: July 29, 2026
Last updated: July 29, 2026
This Privacy Policy explains how Prehook LLC ("Prehook," "we," "us") collects, uses, discloses, retains, and protects personal information in connection with Prehook AI Virtual Try On (the "App").
This Policy has two parts:
- Shoppers: If you use virtual try-on on a store’s website or create a Prehook saved-try-on account, Part 1 applies to you.
- Merchants: If you install or use the App for a Shopify store, Part 2 applies to you.
The App is also governed by our Terms of Service.
Part 1 — Privacy information for shoppers
The short version
- You upload a photo and the App uses artificial intelligence to create a synthetic image of you appearing to wear a product.
- Prehook and its AI provider do not use your photo to identify, recognize, or authenticate you. We do not create or retain a face-geometry template.
- The AI provider states that it does not store input image files or use customer data to train or improve its AI models. Its output delivery files are deleted after up to 72 hours. It may retain limited request metadata, as explained below.
- Unsaved session photos and generated images are deleted within 30 days. Saved photos and images are deleted when you delete them or your account, or after three years of inactivity, whichever occurs first.
- If you enter your email to save try-ons, your email, name if provided, and try-on activity are shared with the store where you used the App.
- To the extent Prehook owns or controls the necessary rights, Prehook licenses your generated try-on image to you for personal, non-commercial use, including sharing through your personal social-media account. The license does not permit advertising, sponsored or other commercial use, or suggesting a commercial relationship with Prehook or the store.
- Your try-on images are made available to a store only after you take a separate, clear action allowing that use. Once enabled for a store, the permission covers all try-on images you generated and later generate on that store. The store’s license is limited to display inside the Recent Try-Ons widget on relevant product pages and does not permit advertising or use elsewhere.
- Prehook uses photos and generated images internally only to operate, host, deliver, moderate, secure, support, troubleshoot, test, and evaluate the quality of the App and its workflows; investigate abuse or errors; comply with law; and honor user requests. Limited authorized human review may occur when reasonably necessary.
- We do not sell your personal information, use your photos or try-on images in advertising, publicly display them without permission, or train or fine-tune AI models on them.
- You may request access, correction, export, or deletion by emailing support@prehook.com.
1. Who is responsible for your information
Depending on the feature, the store and Prehook have different roles:
- The store: The store chooses to offer the App and controls its own use of information it receives, including contact details and try-on activity. The store’s privacy policy applies to its marketing, sales, website, and other independent uses.
- Prehook as the store’s processor or service provider: Prehook processes photos, generates try-on images, operates the storefront experience, and delivers information to the store on the store’s behalf.
- Prehook as an independent controller: Prehook independently controls information needed to operate your optional Prehook saved-try-on account, answer your requests, secure the App, comply with law, and provide features you directly request from Prehook.
2. Information we collect
We collect:
- Uploaded photos: selfies, portraits, or full-body photos you upload or take through the App.
- Generated try-on images: synthetic images created from your photo and a product image.
- Contact details: your email address and, if you provide it, your name.
- Try-on activity: the store, products you tried, liked, allowed to be displayed, or saved, and related interaction timestamps.
- Account information: identifiers and sign-in information needed to operate an optional saved-try-on account.
- Agreement and permission records: the action you took, date and time, store and session identifiers, policy version, and any later permission or withdrawal concerning image display.
- Technical information: IP address, approximate location derived from IP, browser and device type, operating system, referring page, timestamps, diagnostic logs, and security events.
- Cookies and local storage: information strictly needed for security, session continuity, account access, preference storage, and App functionality. Non-essential tracking, if introduced, will be handled through any consent mechanism required by law and the store’s Shopify Customer Privacy settings.
- Communications: information you include in privacy, support, abuse, or legal requests.
We collect this information directly from you and automatically through your use of the App. We do not obtain your address, phone number, or payment information from the store’s Shopify customer records.
3. How AI image generation works
When you select Try It On:
- Prehook securely transmits your photo and the product image to a specialist AI image-generation provider.
- The provider generates a synthetic try-on image and returns it to Prehook.
- Prehook displays the result and stores it only as described in Section 8.
The provider states that:
- it does not use customer inputs or outputs to train or improve its AI models;
- it does not store input image files;
- if an input is supplied by URL, limited request metadata—including the submitted URL—may remain in request history even after the underlying image is no longer available; and
- generated output files delivered through its content-delivery network are automatically deleted after up to 72 hours. More privacy-protective delivery modes may retain output data in memory for a shorter period.
Prehook does not control the provider’s systems, but contractually restricts service providers to processing information for the services they provide to us.
AI-generated result: A try-on image is a synthetic prediction, not a photograph of you wearing the product. It may inaccurately represent fit, size, color, material, shape, proportions, drape, or product details.
No identification or authentication: Prehook does not use your photo for facial recognition, identity verification, biometric categorization, emotion recognition, or account login. We do not create or retain a faceprint, face-geometry template, or other identifier used to recognize you.
4. Biometric-information notice and retention policy
Some laws regulate scans or measurements derived from images of a person’s face or body. Prehook does not use images to identify or authenticate anyone and does not create or retain biometric templates. Out of caution, we nevertheless apply the following protections to uploaded photos and generated try-on images:
- Purpose: We collect and process them to generate and display the try-on you request; support session recovery; operate, moderate, secure, support, troubleshoot, test, and evaluate the quality of the App and its workflows; investigate abuse or errors; provide saved try-ons when you request them; and, after store-wide permission, display your generated images inside that store’s Recent Try-Ons widget.
- Retention: Unsaved session photos and images are destroyed within 30 days. Saved photos and images are destroyed when you delete them, delete your account, or after three years without interaction with the App, whichever occurs first.
- No sale or profit from biometric data: We do not sell, lease, trade, or otherwise profit from biometric identifiers or biometric information.
- Limited disclosure: We disclose photos only to contracted providers needed to generate, host, secure, or store the App, or where law requires disclosure. We do not disclose your uploaded source photo to the store.
- Recent Try-Ons permission: Your generated images are made available for display only after you take a separate, clear action for the identified store. Once granted, the permission covers all current and future try-on images you generate on that store until you withdraw it. It never covers images generated on another store.
5. Why we use information and our legal bases
We use personal information to:
- generate and display try-on images you request;
- maintain sessions and saved try-ons;
- use photos and generated images internally as reasonably necessary to operate, host, store, deliver, moderate, secure, support, troubleshoot, test, and evaluate the quality of the App and its workflows, investigate abuse or errors, comply with law, and honor user requests;
- permit limited access by authorized personnel and contracted providers when reasonably necessary for those internal purposes;
- use your email address and name, if provided, to create, administer, secure, and facilitate your use of a Prehook shopper account;
- deliver your email, name if provided, and try-on activity to the store when you enter your email and save your try-ons;
- make all current and future try-on images you generate on a store available inside that store’s Recent Try-Ons widget after you take the separate action allowing store-wide display;
- send transactional messages, such as a sign-in link, saved-result link, security alert, or response to your request;
- secure the App, prevent fraud and abuse, troubleshoot errors, and enforce the Terms;
- comply with legal obligations and protect rights and safety; and
- understand performance through aggregated or de-identified statistics that do not include photos or reasonably identify you.
Where law requires a legal basis:
- Consent or affirmative agreement: saved-try-on account creation where consent is required and store-wide permission to display your try-on images in Recent Try-Ons.
- Contract: processing the photo you upload, providing features you request, and administering your account.
- Legitimate interests: security, fraud prevention, moderation, troubleshooting, support, service reliability and quality evaluation, and de-identified analytics, balanced against your rights.
- Legal obligation: records and processing required by law.
You may withdraw consent at any time. Withdrawal does not affect processing that occurred before withdrawal. If processing is necessary to provide a feature, withdrawing permission for that processing means we can no longer provide that feature.
6. When and with whom we share information
| Recipient | Information | Purpose |
|---|---|---|
| The store where you used the App | Email address, name if provided, products tried or liked, and related activity after you enter your email and save your try-ons | To provide the lead and product-interest features requested by the store. The store becomes independently responsible for its use. |
| The store, after your separate store-wide display action | All try-on images you generated and later generate while using the App on that store | To display them solely inside the Recent Try-Ons widget on relevant product pages as AI-generated examples. Images generated on other stores are not included. |
| The store’s connected providers | Contact and try-on activity the store directs us to send | To operate integrations such as the store’s customer or email platform. The store is responsible for marketing permission. |
| AI image-generation provider | Uploaded photo, product image, and limited request metadata | To generate the requested try-on image. |
| Cloud, storage, security, monitoring, and transactional-email providers | Information necessary to perform their contracted function | To host, secure, monitor, store, and communicate for the App. |
| Professional advisers | Information reasonably necessary for advice or claims | Legal, compliance, insurance, audit, and accounting purposes under confidentiality duties. |
| Authorities or affected parties | Information required or reasonably necessary | To comply with valid legal process, enforce rights, investigate abuse, or protect people and the Service. |
Business transactions: If Prehook is involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, account and business records may transfer subject to this Policy. Uploaded source photos and generated images will not transfer for a buyer’s independent use. They must remain subject to the same purpose and restrictions, be deleted, or be transferred only after any consent required by law.
We do not sell personal information or share it for cross-context behavioral advertising.
7. Generated-image licenses and store display
Your license: To the extent Prehook owns or controls the rights needed to authorize use of a generated try-on image, Prehook grants you a limited, non-exclusive, worldwide, royalty-free license to download, save, display, and share your image for personal, non-commercial purposes. This includes sharing through your personal social-media account.
Your license does not permit you to sell or license the image; use it in paid advertising, sponsored content, product promotion, merchandising, or another commercial activity; or use it in a way that states or implies that you are employed, sponsored, endorsed, or commercially affiliated with Prehook or the store unless the relevant party expressly agrees in writing.
Public display is optional and is never required to use the try-on. The App may offer a separate action such as Allow store to show my try-ons in Recent Try-Ons.
Scope of permission: Once you take that action for a store, you authorize Prehook and that store to display any or all try-on images you have generated and later generate while using the App on that store. The permission is store-specific, continues until you withdraw it, and never includes images generated on another store.
The store’s license: To the extent Prehook owns or controls the rights needed to authorize the use, Prehook grants the store a limited, non-exclusive, non-transferable, non-sublicensable, and revocable license to display those images solely inside the Recent Try-Ons widget on the relevant product pages of that store’s own online storefront.
- the store may not display or use the images anywhere outside the Recent Try-Ons widget, including elsewhere on a product page or storefront;
- the store may not use them in paid or unpaid advertising, email, SMS, social media, sponsored content, printed materials, marketplace listings, or other marketing; and
- the store may not use the images to identify, profile, track, or contact you.
The store receives no broader commercial, promotional, endorsement, or advertising license.
You may withdraw the store-wide permission through your saved try-ons or by emailing support@prehook.com. Prehook will stop making your try-on images available for display in that store’s Recent Try-Ons widget and notify the store. The store must remove all of your displayed try-on images within five business days. Because the store controls its own systems, it is independently responsible for completing removal.
8. Retention and deletion
| Information | Default retention |
|---|---|
| Unsaved uploaded photos and generated images | Deleted within 30 days after the try-on session. |
| Photos and images saved to your account | Until you delete them, delete the account, or three years after your last interaction with the App, whichever occurs first. |
| Email, name, account information, and try-on activity | Until account deletion or three years after your last interaction, whichever occurs first, except limited records required for security, legal compliance, or dispute resolution. |
| Display-permission and agreement records | For as long as reasonably needed to demonstrate and honor your choices and meet legal obligations. |
| Technical and security logs | A limited rolling period appropriate to security and support, then deleted or de-identified unless needed for an active incident or legal obligation. |
| Support and privacy communications | For the time needed to answer the request and maintain appropriate compliance records. |
Backups are isolated from ordinary use and age out according to backup schedules. If immediate removal from a backup is not technically feasible, the information remains protected and is deleted when that backup expires or is restored.
If a store uninstalls the App or sends a valid redaction request, Prehook deletes the copy processed for that store within 30 days. If you separately created a Prehook account, Prehook keeps the account copy under your direct relationship with Prehook but removes its association with that store, unless you also request account deletion.
9. Your optional Prehook account and communications
A Prehook account is created only when you enter your email address and select the action to save your try-ons:
- the account lets you return to your saved try-ons, including outside the original storefront;
- your email, name if provided, and try-on activity will be shared with the store where you used the App; and
- service messages such as sign-in links and saved-result links are necessary to operate the account.
Prehook may use your email address and name, if provided, to create, administer, secure, and facilitate your use of the account, including authenticating access, retrieving your saved try-ons, and sending necessary account and service messages.
Prehook does not send its own promotional marketing emails based solely on creation of a saved-try-on account. If Prehook later offers promotional email, it will request a separate affirmative marketing action where required by law, and every message will include an unsubscribe method.
Your account may show personalized suggestions based on your own saved try-ons. Suggestions appear only in your Prehook account area, not inside another merchant’s storefront. A suggested store receives no information about you unless you choose to visit and use the App on that store.
10. Your privacy rights
Wherever you live, you may email support@prehook.com to request:
- access to personal information we hold about you;
- correction of inaccurate information;
- deletion of information or your account;
- a portable copy of information;
- restriction of or objection to certain processing; or
- withdrawal of a permission you previously gave.
We will verify the request and respond within the period required by applicable law. We may retain limited information where legally required or necessary to establish, exercise, or defend legal claims.
EEA, United Kingdom, and similar jurisdictions: You may have rights to access, correct, erase, restrict, object, and receive portable data, and to complain to your local data-protection authority. Where Prehook acts only for the store, the store is the controller and we will assist it. Where Prehook operates your account or handles a direct request, Prehook is the controller.
California and other U.S. states: Depending on the law that applies, you may have rights to know, access, correct, delete, and obtain a portable copy, and to appeal a denied request. You have the right not to be discriminated against for exercising a privacy right. We do not sell personal information, share it for cross-context behavioral advertising, or use sensitive information to infer characteristics about you.
You may use an authorized agent where law permits. We may require proof of authorization and verification of your identity.
11. International processing
Prehook is a U.S. company. We and our providers process information in the United States and other countries where they operate, which may have different privacy laws from your country.
Where required, we use safeguards such as contractual processing restrictions, the European Commission’s Standard Contractual Clauses, and the applicable UK transfer addendum. Merchants receive the relevant contractual terms through the Data Processing Addendum in the Terms of Service.
12. Children
The App is for adults and may be used only by people who are at least 18. Do not upload a photo of a child. If we learn that we collected a child’s information through the App, we will delete it. A parent or guardian may contact support@prehook.com.
13. Security
We use administrative, technical, and organizational safeguards appropriate to the information, including encryption in transit and at rest, access restrictions, production access logging, separation of production and test environments, encrypted backups, and incident-response procedures.
No online system can guarantee absolute security. If a breach affects your information, we will provide notices required by applicable law.
Part 2 — Privacy information for merchants
1. Our roles
For personal information Prehook processes to provide the App for your store:
- You are the controller or business.
- Prehook is your processor or service provider.
- The Data Processing Addendum in Part 4 of the Terms of Service applies automatically.
Prehook is an independent controller for merchant account administration, billing-related records received from Shopify, support communications, security, legal compliance, and information shoppers directly provide to create and use an optional Prehook account.
The same photo or generated image may exist in two contexts. The store-linked copy is processed for you. A copy the shopper intentionally saves in a Prehook account is held under Prehook’s direct relationship with that shopper.
2. Information we collect
Through Shopify and the App installation:
- store name, domain, store identifier, contact email, locale, plan and billing status, installation status, and permissions;
- product titles, identifiers, variants, images, and related information required to create try-ons;
- App configuration, integration settings, and usage events; and
- data Shopify provides for billing, compliance, support, or platform operations.
Directly from merchant personnel:
- name, email, role, account details, configuration choices, support communications, and feedback.
Directly from shoppers through the storefront App:
- uploaded photos, generated try-on images, email address, name if provided, products tried or liked, saved items, agreement and display-permission records, and technical information described in Part 1.
We request the minimum Shopify API access needed to provide the App. We do not retrieve addresses, phone numbers, or payment information from Shopify customer records for virtual try-on.
3. How we use merchant and shopper information
We use information to:
- install, configure, operate, secure, and support the App;
- retrieve product information and generate requested try-on images;
- maintain shopper sessions and saved try-ons;
- use a shopper’s email address and name, if provided, to create, administer, secure, and facilitate the shopper’s use of an optional Prehook account;
- deliver shopper contact details and try-on activity to the merchant and its configured integrations;
- make approved generated images available solely inside the Recent Try-Ons widget on relevant product pages;
- manage merchant plans and Shopify billing status;
- respond to privacy, support, legal, and security requests;
- comply with Shopify requirements and applicable law; and
- improve reliability using aggregated or de-identified statistics.
We do not:
- sell merchant or shopper personal information;
- use merchant data, product data, shopper photos, or try-on images to train AI or machine-learning models;
- use merchant or shopper information for competitive benchmarking;
- provide one merchant’s identifiable data, customer list, or store analytics to another merchant;
- expose a shopper’s uploaded source photo in the merchant dashboard; or
- treat a delivered contact as subscribed to marketing.
4. The optional Prehook shopper account
A shopper may choose to create a saved-try-on account by entering an email address and selecting the save action.
That account:
- is based on information the shopper provides directly through the App;
- uses the shopper’s email address and name, if provided, to create, administer, secure, and facilitate use of the account;
- lets the shopper return to saved try-ons, including outside the original storefront;
- may show suggestions based only on the shopper’s own saved activity inside the Prehook account area;
- does not use the merchant’s customer lists, order data, sales data, conversion data, or store analytics; and
- does not disclose the shopper to a suggested store unless the shopper visits and uses the App there.
Every email captured through the merchant save flow is delivered to the originating merchant regardless of whether the shopper uses other Prehook account features. Delivery does not represent marketing consent.
5. Information merchants receive and merchant responsibilities
The App may provide the merchant with:
- shopper email address and name if provided;
- products tried or liked and related activity;
- integration delivery status; and
- the shopper’s current and future try-on images from your store only after the shopper separately grants store-wide permission for display inside the Recent Try-Ons widget.
Once received, the merchant controls its independent use. Merchants must:
- update their store privacy policy to disclose virtual try-on and the data flows;
- obtain a lawful basis before sending marketing communications;
- configure connected tools so a delivered profile is not automatically treated as subscribed unless the merchant separately obtained valid permission;
- use approved images only inside the Recent Try-Ons widget on relevant product pages;
- remove all displayed images associated with a shopper within five business days after withdrawal notice;
- avoid enabling the App on child-directed stores; and
- comply with applicable privacy, biometric-information, marketing, consumer-protection, and AI-transparency laws.
6. Service providers and sub-processors
Prehook uses the following categories of providers:
| Category | Purpose | Information involved |
|---|---|---|
| Specialist AI image-generation provider | Generate try-on results | Uploaded photo, product image, and limited request metadata. |
| Cloud infrastructure and storage | Host the App, databases, files, backups, and delivery services | Information necessary to operate and store the App. |
| Transactional email | Deliver sign-in links, saved results, security notices, and service communications | Email address and message-delivery information. |
| Security, monitoring, and support tooling | Detect incidents, diagnose errors, and provide support | Technical logs and information needed for the incident or request. |
| Professional advisers | Legal, compliance, insurance, accounting, and audit | Information reasonably necessary for the engagement, under confidentiality duties. |
These providers may process information in the United States and other countries where they operate. They are contractually restricted to the services they provide to Prehook.
A merchant-configured platform such as an email or customer-management provider acts for the merchant under the merchant’s agreement with that provider, not as Prehook’s sub-processor. A current sub-processor list is available to merchants by emailing support@prehook.com.
7. Retention, Shopify compliance, and deletion
- Store-linked shopper data: Deleted within 30 days after a verified customer-redaction request, when no longer needed to provide the App for the merchant, or after Shopify’s applicable deletion event.
- Shop uninstall: Store-associated personal information is deleted within 30 days after uninstall, except limited billing, security, or legal records. Separately created shopper-account data is disassociated from the store and remains governed by Part 1.
- Data requests: Prehook provides a machine-readable copy of personal information processed for the merchant so the merchant can respond to a valid request.
- Saved shopper data: Subject to deletion by the shopper or three years of inactivity, whichever occurs first.
- Unsaved photos and images: Deleted within 30 days after the session.
- Merchant account data: Deleted within 30 days after uninstall except information needed for legal, billing, security, fraud-prevention, or dispute purposes.
The App subscribes to and verifies Shopify’s mandatory compliance webhooks applicable to public apps, including customer data requests, customer redaction, and shop redaction.
8. Security and incidents
Prehook uses the safeguards described in Part 1, Section 13 and the Data Processing Addendum.
If Prehook becomes aware of an actual or suspected compromise of merchant data, it will notify Shopify within the period required by Shopify’s API terms and notify the affected merchant without undue delay after confirming a personal-data breach, as described in the Data Processing Addendum.
9. AI-generated content
Try-on results are synthetic, AI-generated images rather than photographs of a shopper actually wearing the product. Merchants must not falsely or misleadingly present them as authentic photographs of the shopper wearing the product.
10. International transfers
Prehook and its providers may process information in the United States and other countries. Where transfer safeguards are required, the Data Processing Addendum incorporates the applicable Standard Contractual Clauses and UK transfer terms.
11. Merchant data-processing commitments
When Prehook processes personal data for a merchant, Prehook:
- follows documented instructions;
- limits access to personnel bound by confidentiality;
- maintains appropriate security measures;
- engages sub-processors under written data-protection obligations;
- assists with rights requests, impact assessments, regulator consultations, security obligations, and breach response;
- provides compliance information and audit rights as described in the Data Processing Addendum; and
- returns or deletes personal data at the end of the relationship, subject to legal obligations and the separately created shopper-account distinction.
The complete contractual terms are in Part 4 of the Terms of Service.
Suggested wording for the merchant’s store privacy policy
Virtual try-on. Our store offers virtual try-on powered by Prehook AI Virtual Try On (Prehook LLC). If you choose to use it, Prehook and its contracted AI provider process a photo you upload to create an AI-generated image of you appearing to wear our product. Prehook may use uploaded photos and generated images internally only to operate, moderate, secure, support, troubleshoot, test, and evaluate the quality of the service and its workflows; investigate abuse or errors; comply with law; and honor user requests. Prehook does not use those images for advertising or AI-model training. Prehook explains its retention periods, service providers, and deletion process in the Prehook Virtual Try On Privacy Policy available through the try-on interface. If you save your try-ons, we receive your email address, name if provided, and the products you tried or liked. We use that information as described in this policy and do not treat it as marketing consent unless we separately obtain the permission required by law. If you take a separate action allowing our store to show your try-ons in Recent Try-Ons, Prehook and our store may display any or all current and future try-on images you generate on our store solely inside the Recent Try-Ons widget on relevant product pages. The permission does not extend to images generated on another store, and you may withdraw it at any time.
Merchants should adapt this wording to their own practices, connected providers, and applicable laws.
Changes to this Policy
We may update this Policy to reflect changes in the App, law, or our practices. We will update the date above. Before a material change applies, we will provide notice through the App, storefront interface, or email as appropriate. We will not materially expand the use of previously collected photos or generated images without a lawful basis and any permission required by law.
Contact us
Prehook LLC Email: support@prehook.com
Use the subject Privacy Request for access, correction, export, deletion, withdrawal, or appeal requests. For a current postal contact address, email us with the subject Legal Notice.
Recent Comments