Privacy Policy

What fitcheck Processes

fitcheck processes the photo you upload, the product URL you submit, product page metadata, product images, generated try-on images, account email addresses, billing state, and saved fit-check records.

How It Is Used

Your uploaded photo and product images are sent to the configured AI provider through Vercel AI Gateway to create the try-on result. Product URLs are fetched by fitcheck to identify page images and product details.

Every AI request containing your uploaded photo or generated identity media requires Zero Data Retention routing through Vercel AI Gateway. If no eligible provider is available for the selected model, fitcheck fails the request instead of relaxing that requirement.

Scrape and render requests require current-version photo consent, and fitcheck records the consent version in operational logs without storing the uploaded source photo.

fitcheck also records anonymous usage analytics (event name, source shop domain, and timings where relevant) and error reports (error type and message, scrubbed of emails and URLs) — never photos, prompts, or account identity — processed by PostHog in the EU; visitor identifiers are single-use or rotate daily, and cannot be linked across days.

Storage

fitcheck does not store the uploaded source photo in application storage. Generated try-on images are stored in private Vercel Blob storage when configured and are served only through authenticated fitcheck result URLs; local development can return generated images directly to the browser as data URLs. Saved fit-check records store product page context, generated result links, and owner identifiers so signed-in users can reopen the fit-checked page later.

When you use the browser extension with a signed-in account, fitcheck can store a non-reversible shopper-photo fingerprint, a canonical product-image key, and the private generated-result reference. This lets the extension restore an exact prior result on later visits without uploading or storing the source shopper photo as account data.

Account cookies are signed and HttpOnly. Account cookie email payloads and temporary sign-in challenge email payloads are encrypted. Usage limits, paid entitlements, and webhook replay records may be stored in Upstash Redis when production storage is configured.

Retention

Anonymous session-owned generated images and saved fit-check records are scheduled for cleanup after 30 days. Signed-in account saved fit checks and reusable browser-extension result mappings are kept so you can reopen or restore them until you delete saved account data. Deleting one saved fit check does not remove an extension mapping that still reuses the same generated result.

Third Parties

AI generation requests are processed by the configured AI provider through Vercel AI Gateway. Product pages and product image hosts receive normal HTTP requests when fitcheck fetches submitted URLs. fitcheck can also use Vercel Blob for private result storage, Upstash Redis for usage and entitlement records, Resend for sign-in emails, and Stripe for checkout, billing portal sessions, and webhook events.

The optional browser extension runs only after you activate it on a page. It sends selected public product media URLs, page context, and your locally stored shopper photo to fitcheck for rendering, and may prepare affiliate shopping redirects after an explicit confirmation.

User Controls

You can download saved account data, delete individual saved fit checks, clear all saved fit checks, or delete saved account data from the app. Deleting saved account data signs you out and removes saved fit checks, browser-extension replacement mappings, public shares, and private generated result images that are no longer referenced. Billing remains managed through Stripe or support.

Deleting the extension's local shopper photo stops that device from resolving photo-scoped results, but does not claim to delete generated account data. Use Delete saved data in the app when you want the server-side mappings and results removed too.

You can also report a problematic fit check for safety review. Reports include bounded page/result context, but not the uploaded source photo or generated image bytes.

For privacy, deletion, billing, or account help, contact support@justfitcheck.com.

Private Beta Gate

If the deployment configures a private beta code, fitcheck sends the code only to its own API routes for authorization. The code is not included in product page fetches.

Your Responsibilities

Only upload photos you have the right to use, and do not upload photos of another person without their consent.