Privacy policy

Data we process

Shopper photos and derived body measurements, processed transiently for the render. Session analytics (widget opened, render completed, confidence score, size selected) without direct identifiers.

Merchant account data: name, work email, store URL, platform and billing contact.

Legal bases

Shopper photo processing relies on the shopper's explicit consent, captured in the widget before upload. Merchant account processing relies on contract performance and legitimate interest for security and fraud prevention.

Retention

Photos and derived measurements: for the render session only. Rendered images: up to 24 hours behind a signed URL. Aggregate session analytics: 24 months. Merchant account records: for the contract term plus 12 months.

Sharing

We share data only with sub-processors necessary to run rendering, hosting and support, under written data-processing terms. We do not sell personal data and do not use shopper photos for advertising or model training.

Your rights

Access, correction, deletion, restriction, objection and portability, exercisable by emailing privacy@omnyfit.com. Where OmnyFit acts as processor for a merchant, we route requests to that merchant and assist with fulfilment.

International transfers

Transfers outside the EEA and UK rely on Standard Contractual Clauses and the UK Addendum, with regional pinning available on request.