Privacy Policy

What we collect

When you sign in we receive your name, email address and profile picture from Google. When you generate a try-on image we store the garment or portrait photo you upload and the rendered output image. Payment details are handled by Stripe or our merchant-of-record payment partner, so TryOnPic never sees your full card number.

How we use it

Your uploaded garment and portrait photos are used solely to synthesize the virtual try-on or ghost mannequin image you request. We use your email to operate your account, send receipts and service notices, and answer support requests. We do not send unsolicited marketing email, never sell personal data, and never use your uploaded photos to train external AI models.

Storage and retention

Files are stored with our cloud infrastructure provider in encrypted form. Uploaded source photos are deleted automatically 7 days after upload and generated try-on images are kept for 30 days after they finish, unless you delete them or your account sooner. Order and payment records are kept as required for tax and accounting compliance. When you delete your account we keep only a one-way hash of your email address so the same email cannot claim the sign-up bonus twice.

A photo you pick before signing in or buying credits is kept only in your browser and deleted once a render starts or after 24 hours. A photo sent from your phone by QR code passes through our server encrypted, is deleted as soon as it reaches your computer, and is kept for 1 hour at most.

Safety checks

Before an uploaded photo is processed it may be checked by an automated content-safety classifier solely to enforce our acceptable use policy. Public endpoints are protected by Cloudflare Turnstile bot detection, which processes your IP address and browser signals to enforce our 2-render-per-day guest rate limit. Finished try-on images that fail safety checks are not delivered and any deducted credits are refunded automatically.

Cookies and analytics

The site uses a few cookies and similar browser storage that it needs to work, such as your sign-in session and your light or dark theme preference.

We also set a first-party cookie (vt_attr, kept for 90 days) that records how you first and most recently reached us, such as a referring website or campaign link. We use it only to see which channels lead to sign-ups and purchases, and we do not share it with advertising networks.

If you open a friend’s invite link, we set a cookie (vt_ref, kept for up to 30 days and removed once you sign up) so the invite can be credited. To prevent abuse of invite rewards, we store a salted hash of your IP address with the invite, not the address itself. Neither of you can see the other’s account details.

We do not use third-party analytics or advertising cookies.

Service providers

We rely on a small number of processors, including cloud hosting, encrypted storage and email delivery, our multimodal AI image synthesis provider (Google AI Studio Gemini 3.1 Flash Image) that processes your photos solely for your request, a content-safety classifier, and Stripe or our merchant-of-record payment partner.

Children

TryOnPic is not directed to children under 13 and requires users to be 18 or older. We do not knowingly collect personal data from children under 13. If we learn that we have, we delete it immediately. Email support@tryonpic.com if you believe a child has given us personal data.

Your rights

You can download or delete your generated try-on images at any time. In Settings you can export a copy of your data as JSON or delete your account permanently. For any other privacy or DMCA request, email support@tryonpic.com.