Riti Privacy Policy

Last updated: 25 August 2026

Riti is a Shopify app that lets shoppers see clothing on themselves using AI-generated imagery. This policy covers two groups: merchants who install Riti on their store, and shoppers who use it on a merchant’s storefront.

For shopper data, the merchant is the data controller and Riti is a processor acting on their instructions.

Shopper data

Your photo is not stored

When you start a try-on, your photo is sent to our servers, forwarded to the AI provider that generates the image, and then discarded. It is never written to a database or to file storage. Within your browser the photo is held in memory only, so that a single browsing session can reuse it without asking again, and it is discarded when you navigate away or close the tab.

Photos are never used to train any model, never sold, and never shared with advertisers.

AI providers

Generating a try-on requires sending your photo and the product image to an AI image provider. In production these are:

Each provider processes the image to return a result and is bound by its own terms. We send the image and the product title; we do not send your email address, your IP address, or any identifier for you.

The generated image

The try-on result is returned straight to your browser and is not stored — with one exception. If you choose to save a look, that generated image is uploaded to our encrypted object storage (Cloudflare R2) so it can be shown to you again later, and the email address you entered is stored alongside it.

Saving a look is optional and requires you to enter an email address and tick a consent box. If you never save a look, no image and no email of yours is stored by Riti at all.

Ticking that box also adds you to the store’s email list. Riti adds your email address to that store’s Shopify customer list, tagged riti-saved-look and marked as subscribed to email marketing, so the store can send you news and offers. Riti itself does not send you marketing email. You can unsubscribe at any time from the link in any of the store’s emails, or by contacting the store. If you already have an account with that store, Riti does not change your existing marketing preference.

When you save a look, Riti emails it to the address you entered: the generated image, the items in it, and a link to view it on the store’s own website. That page shows current prices and lets you add the items to your cart. The email is sent through our email provider, Resend, on the store’s behalf. The link stops working after 180 days, and you can use the Delete this look link in the email or on the page to erase the image and the link. The link stops working at once; copies of the image already cached by your email provider or browser may take up to a day to expire. Deleting a look does not remove you from the store’s email list; unsubscribe from the store’s own emails for that.

What we record about a try-on

For every try-on we store technical and commercial metadata, none of which identifies you by name or email: the shop domain, the product and variant, whether the render succeeded, which provider and model ran it, how long it took, and a salted SHA-256 hash of your IP address. We do not store your raw IP address. The hash exists to enforce abuse and rate limits and cannot be reversed to recover the address.

If you add a try-on item to a cart and that cart becomes an order, we record the order reference, line item, product, quantity and amount so the merchant can attribute the sale. We do not receive or store the customer name, email, or shipping address from that order.

How long it is kept

Try-on records are deleted after 180 days. Before deletion they are rolled up into daily per-product counts, which contain no per-shopper data at all.

Saved looks — the saved image and the email address attached to it — are also deleted after 180 days. The stored image is erased at the same time as the record. They are removed sooner if either of these happens:

Your rights

Riti implements Shopify’s mandatory privacy webhooks, so a request you make to a merchant reaches us automatically:

Because we never store your photo or your raw IP address, there is nothing further of yours to return or erase. You can also contact us directly at the address below.

Your customer record in the store’s Shopify customer list belongs to that store, not to Riti. To have it removed, ask the store; Shopify then notifies us to delete our copy too.

Merchant data

With the permissions you grant at install, we store your shop domain, the access token that authorises our API calls, a hash of your widget token, your app settings, your install and uninstall dates, and your plan and subscription state.

We read your orders in order to attribute purchases to try-ons. We store only the fields listed above — order reference, line item, product, quantity, amount and currency. We do not request or retain your customers’ personal details from those orders. We do not read products, themes, or anything outside the scopes granted at install.

When you uninstall Riti, Shopify notifies us and we erase everything associated with your shop: saved looks and their stored images, try-on records, aggregated statistics, attributed orders, feedback, settings, your merchant record, and your session.

Security

All traffic between your browser, a merchant’s storefront and our servers is encrypted in transit with TLS; our API refuses unencrypted requests. Saved images are held in encrypted object storage and are only ever served through short-lived signed links.

Changes

If we change what we collect or how long we keep it, we will update this page and the date at the top of it.

Contact

Questions about this policy, or a data request: [email protected]