Your Data.
Protected.

OFFTRY is an AI-powered Virtual Try-On SaaS platform that allows e-commerce stores to let their customers virtually try on clothing before purchasing.

This Privacy Policy applies to:

• Merchants who create OFFTRY accounts

• End-customers who use the Virtual Try-On feature on merchant websites

• Visitors to offtry.com, admin.offtry.com, and api.offtry.com

When we refer to 'personal data' or 'personal information,' we mean any information that can identify an individual, such as name, email address, or photographs.

Last Updated: September 2026

OFFTRY is the data controller responsible for your personal information.

Legal Entity Details:

• Operating Name: OFFTRY

• Legal Status: Unregistered business (sole proprietorship)

• Country: Pakistan

• Business Address: Remote/Online only

• Email: offtry.pk@gmail.com

• Privacy Contact: offtry.pk@gmail.com

OFFTRY currently operates virtually without a physical office. All communications are handled electronically.

OFFTRY operates at the following domains:

• offtry.com — Public marketing website and demo

• admin.offtry.com — Merchant admin panel

• api.offtry.com — API endpoints

A. Account Information (Merchants):

• Name

• Email address

• Phone number

• Password (hashed/encrypted)

• Company/Store name

• Store URL/domain

• Shopify Domain and Products

• WooCommerce Products

• Account preferences

B. Billing Information:

Payment information is processed by our third-party payment provider, Paddle. OFFTRY does not receive or store complete payment card numbers.

C. Uploaded Images (Merchant Customers):

When a merchant's customer uses our Virtual Try-On service:

• Photographs of the customer

• Garment/product images from the merchant

• Generated virtual try-on images

Customer images are only stored for 3 minutes. After 3 minutes, our automated system removes the images from the database and third-party storage.

D. Demo Images (OFFTRY Demo Page):

When users test the demo on offtry.com/demo:

• Uploaded photographs may be used to improve AI models

• Users explicitly consent to this by using the demo

E. Usage Data:

• Login/logout activity

• Feature usage

• API requests

• IP addresses

• Browser/device information

F. Communications:

• Support inquiries

• Feedback submissions

OFFTRY processes information for the following purposes:

Under GDPR/UK GDPR, we process personal data on the following legal bases:

Our AI Virtual Try-On process works as follows:

1. User selects/uploads a garment on the merchant's store

2. User clicks the 'Try On' button

3. User uploads a photograph

4. OFFTRY processes the photograph using AI/computer-vision models

5. The system generates a virtual try-on image

6. The result is returned to the user/store

7. Images are deleted after 3 minutes

Important Clarifications:

• OFFTRY does NOT perform facial recognition

• OFFTRY does NOT identify individuals

• OFFTRY does NOT create biometric identifiers

• OFFTRY does NOT make automated decisions about people

• OFFTRY does NOT use merchant customer images for AI training

OFFTRY does not use virtual try-on photographs to identify individuals or authenticate their identity.

Uploaded person images and generated try-on images are retained only for as long as reasonably necessary to provide the requested service.

Note: OFFTRY retains merchant email addresses and subscription details even after account deletion so that merchants do not need to go through the full registration process if they return. These can be deleted upon request, but invoices and subscription details are retained for legal and accounting purposes.

OFFTRY does not store payment card details — these are handled exclusively by Paddle.

This section clarifies how OFFTRY uses data to improve its AI models.

OFFTRY does NOT use customer-uploaded photographs or generated try-on images from merchant websites to train or improve its AI models.

The ONLY exception is:

• Demo try-ons on OFFTRY's demo page (offtry.com/demo)

• Users of the demo version explicitly consent to their images being used for AI training

This means:

• ✗ Merchant customer photos → NOT used for AI training

• ✗ Merchant product images → NOT used for AI training

• ✗ Generated try-on images from merchants → NOT used for AI training

• ✓ Demo try-on images → MAY be used for AI training (with consent)

This policy ensures that merchant customer privacy is protected while allowing OFFTRY to improve its technology through demo usage.

OFFTRY uses the following service providers to deliver its services:

AI Technology:

OFFTRY uses open-source AI models that we have modified and optimized for virtual try-on. These models are hosted on Modal's GPU infrastructure. No merchant customer images are used to train these models — only demo data from offtry.com/demo may be used with explicit user consent.

For more information about our AI technology, please contact us at offtry.pk@gmail.com.

Your personal information may be processed in countries other than the country in which you reside.

OFFTRY is based in Pakistan, and our servers and databases are located in Europe. Our service providers operate in:

• United States (AWS, Modal, MongoDB Atlas)

• Other jurisdictions as required

Where required by applicable law, we use appropriate safeguards for international data transfers, such as standard contractual clauses or other legally recognized transfer mechanisms.

We implement reasonable technical and organizational measures designed to protect personal information against unauthorized access, alteration, disclosure, loss, or destruction.

Security measures include:

• Encryption in transit (HTTPS/TLS)

• Encryption at rest where applicable

• Access controls and authentication

• Secrets management

• Logging and monitoring

• Backups

• Least-privilege access

• Infrastructure isolation

We do not claim that your data is 100% secure. No method of transmission or storage is completely secure.

If we become aware of a security incident involving personal information, we will:

• Assess the incident

• Provide notifications to affected individuals where required by applicable law

• Notify customers where required

• Notify regulators where required

Notification will occur in accordance with applicable legal requirements.

Depending on your jurisdiction, you may have the following rights:

GDPR / UK GDPR Rights:

• Right of access — You can request a copy of your data

• Right to rectification — You can correct inaccurate data

• Right to erasure — You can request deletion of your data

• Right to restriction of processing — You can limit how we use your data

• Right to object — You can object to certain processing

• Right to data portability — You can request your data in a structured format

• Right to withdraw consent — You can withdraw consent at any time

• Right to complain — You can lodge a complaint with a supervisory authority

To exercise any of these rights, contact us at offtry.pk@gmail.com.

If you are a California resident, you have the following rights under CCPA:

• Right to know — What personal information we collect, use, and share

• Right to delete — Request deletion of your personal information

• Right to correct — Correct inaccurate information

• Right to opt out — Of sale/sharing of personal information

• Right to limit — Use of sensitive personal information

• Right to non-discrimination — We will not discriminate against you for exercising your rights

OFFTRY does NOT sell personal information.

OFFTRY does NOT share personal information for cross-context behavioral advertising.

To exercise your CCPA rights, contact us at offtry.pk@gmail.com.

For UK and EU residents, this policy covers:

• Controller identity (OFFTRY)

• Purposes of processing (Service delivery, account management)

• Lawful basis (Contract, legitimate interests, consent)

• Recipients of data (Third-party providers listed above)

• International transfers (EU → US with safeguards)

• Retention periods (As specified in Section 7)

• Your rights (As specified in Section 13)

• Consent withdrawal (Contact privacy@offtry.com)

• Complaints to supervisory authority

• Automated decision-making (AI try-on, not significant decisions)

Important: When a customer uses OFFTRY through a merchant's website:

• The merchant is the data controller for customer data

• OFFTRY acts as the data processor

• The merchant's privacy policy also applies

Essential Cookies (Required for platform functionality):

• refreshToken — Used for authentication and session management (HTTP-only, 30 days)

• merchantRefreshToken — Used for merchant authentication (HTTP-only, 30 days)

Session Storage (Not cookies, stored in browser session):

• activeStoreId — Stores which store you are currently viewing

• loginEmail — Temporary email storage during login flow

• redirectPath — Stores where to redirect after login

• settingsHasChanges — Tracks unsaved changes in settings

• settingsFormData — Temporarily stores form data for settings

Local Storage (Not cookies, stored persistently):

• offtry_has_shown_sync_modal — Prevents duplicate modal displays

Third-Party Cookies:

• Paddle — Payment processing uses its own cookies for checkout functionality

OFFTRY does NOT use:

• Google Analytics

• Meta Pixel

• Third-party advertising trackers

• Cross-site tracking cookies

You can control cookie preferences through your browser settings. Disabling essential cookies may affect platform functionality.

OFFTRY currently does NOT send promotional or marketing emails.

The only emails you will receive are transactional:

• Account verification

• Subscription updates

• Invoice notifications

• Security alerts

Should we ever introduce marketing communications in the future, we will update this policy and provide a clear opt-out mechanism.

OFFTRY is not directed to children under 18.

We do not knowingly collect personal information from children under 18.

If you believe a child has provided us with personal information, contact us at offtry.pk@gmail.com and we will delete it.

OFFTRY uses automated AI processing to generate virtual try-on images.

This processing:

• Provides a visual representation of clothing on a person

• Does NOT make decisions about eligibility for employment, credit, housing, insurance, healthcare, education, or other significant matters

OFFTRY does NOT use uploaded photographs for facial recognition or to uniquely identify individuals.

To request deletion of your personal information, contact us at:

• Email: offtry.pk@gmail.com

• Subject: 'Data Deletion Request'

We will process deletion requests within 30 days.

What gets deleted on request:

• Account information (name, phone, preferences)

• Email address (though we retain invoices/subscriptions for legal reasons)

What is retained (for legal/accounting reasons):

• Invoices and subscription details (required for tax and accounting compliance)

Note: Customer try-on images are automatically deleted after 3 minutes. Merchant product images are retained until account deletion (plus 90 days).

We may update this Privacy Policy from time to time.

When we make material changes, we will provide appropriate notice as required by applicable law.

Continued use of OFFTRY after changes constitutes acceptance of the updated policy.

Last Updated: September 2026

For all privacy-related inquiries, please contact us:

Privacy Inquiries:

• Email: offtry.pk@gmail.com

General Support:

• Email: offtry.pk@gmail.com

WhatsApp: +92 344 595 9967

We aim to respond to all privacy inquiries within 7 business days.