PehnAI – Privacy Policy – Shopify

Effective Date: September 14, 2026
Last Updated: September 14, 2026

PehnAI is provided by MakeProSimp LLP (“MakeProSimp”, “we”, “us”, or “our”). This Privacy Policy explains how PehnAI processes information when a Shopify merchant installs or uses the PehnAI app, or when a shopper uses PehnAI’s virtual try-on feature on a merchant’s storefront.

This Privacy Policy applies to the PehnAI Shopify app and its storefront virtual try-on feature. It does not govern a merchant’s own store, Shopify, or an independent third-party service, each of which has its own privacy practices.

1. About Us

MakeProSimp LLP develops software applications and services for eCommerce merchants.

PehnAI is provided by MakeProSimp LLP to help Shopify merchants offer AI-powered virtual try-on experiences to shoppers.

2. Scope

This Privacy Policy applies to information processed when:

  • • A Shopify merchant installs, configures, or uses PehnAI;
  • • PehnAI accesses information through Shopify-authorized APIs;
  • • A shopper interacts with PehnAI’s virtual try-on functionality on a merchant’s storefront;
  • • A merchant or other authorized user communicates with us for support or other App-related purposes.

The information processed depends on the features used and the permissions authorized by the Merchant through Shopify.

3. Information We Collect and Process

A. Merchant and App-Installation Information

When the App is installed or used, PehnAI stores information necessary to authenticate, configure, operate  the app, provide support, communicate important service information, and maintain the App, including:

  • • Email address;
  • • Phone number;
  • • Shopify shop domain;
  • • Shopify permissions granted to the App;
  • • Encrypted Shopify access and refresh tokens;
  • • Token-expiry information;
  • • Installation, activity, and uninstall timestamps;
  • • Shop time zone;
  • • App settings;
  • • Product try-on settings;
  • • Subscription or plan status; and
  • • Usage records.

PehnAI does not obtain or store the Merchant’s name or physical address through its Shopify integration.

B. Store and Product Information

PehnAI may access product information from the Merchant’s Shopify store as necessary to configure and provide the virtual try-on functionality, including:

  • • Product and variant identifiers;
  • • Product titles;
  • • Product type;
  • • Vendor;
  • • Tags;
  • • Product status;
  • • Featured and variant image URLs;
  • • Image dimensions;
  • • Collections; and
  • • Other product-related information necessary to provide the virtual try-on experience.

PehnAI retrieves product information from Shopify when required to identify and configure products eligible for virtual try-on, process product images, generate virtual try-on results, display relevant product information, and provide related App functionality.

PehnAI stores relevant product and variant identifiers and PehnAI-specific configuration rather than maintaining a complete local copy of the Merchant’s Shopify product catalogue.

C. Order Information

PehnAI may access order history for the last 60 days, as permitted by Shopify.

Order information may be processed to provide App functionality, measure performance, understand whether virtual try-on interactions contribute to purchases, provide analytics and reporting to Merchants, troubleshoot issues, and improve the Service.

PehnAI does not store the shopper’s name, email address, shipping address, payment information, or complete Shopify order history.

We only process order information to the extent reasonably necessary for these purposes and as permitted by Shopify.

D. Device and Activity Information

When the App or its storefront functionality is used, we may collect or receive technical and activity information such as:

  • • IP address;
  • • Browser type;
  • • Operating system;
  • • Device information;
  • • General geolocation information derived from an IP address;
  • • App and storefront activity;
  • • Date and time information;
  • • Usage logs;
  • • Error and diagnostic information; and
  • • Information about interactions with PehnAI features.

This information may be used to operate the Service, provide analytics, maintain security, prevent abuse, troubleshoot technical problems, and improve App performance.

E. Virtual Try-On Images and Related Information

When a shopper chooses to use PehnAI’s virtual try-on functionality, the shopper may provide or upload an image for the purpose of generating a virtual try-on result.

Depending on how the feature is used, PehnAI may process:

  • • Images uploaded or provided by the shopper;
  • • Product images selected for virtual try-on;
  • • Generated virtual try-on images or previews;
  • • Product and variant information associated with the try-on;
  • • Try-on status and processing information;
  • • Technical information required to process the request; and
  • • Related session or usage information.

Shopper-provided images are processed for the purpose of providing the requested virtual try-on functionality and related Service operations.

PehnAI does not use shopper-uploaded images to independently identify the individual depicted in the image.

Merchants are responsible for providing appropriate notices to their shoppers and obtaining any consent required under applicable privacy and data protection laws before enabling or using features that involve shopper-provided images.

4. Information We Do Not Intentionally Collect

PehnAI does not intentionally collect information that is unnecessary to provide the Service.

In particular, we do not intentionally collect:

  • • Payment card or banking information through the virtual try-on functionality;
  • • Shopify customer account passwords;
  • • Government identification documents; or
  • • Information unrelated to providing, securing, supporting, or improving PehnAI.

Users should not upload images or other content containing unnecessary sensitive or confidential information.

5. How We Use Information

We may use information collected or processed through PehnAI to:

  • • Provide and operate AI-powered virtual try-on functionality;
  • • Process shopper-provided and product images to generate virtual try-on results;
  • • Identify and configure products eligible for virtual try-on;
  • • Display virtual try-on functionality on Merchant storefronts;
  • • Maintain Merchant settings and App configuration;
  • • Provide usage, performance, and conversion analytics;
  • • Understand interactions with virtual try-on features;
  • • Monitor usage and applicable App limits;
  • • Diagnose and resolve errors or technical problems;
  • • Improve the performance, reliability, usability, and security of the App;
  • • Detect, prevent, and investigate fraud, abuse, or unauthorized activity;
  • • Respond to Merchant support requests;
  • • Communicate important App, account, billing, or service information;
  • • Enforce applicable agreements and policies; and
  • • Comply with applicable legal obligations.

PehnAI does not use shopper photos to independently identify a person, create a customer profile, or make automated decisions that have legal or similarly significant effects.

6. AI Processing

PehnAI uses artificial intelligence and related image-processing technologies to provide virtual try-on functionality.

When a shopper requests a virtual try-on, relevant shopper-provided images and product images may be processed by automated systems to generate a visual representation of how the selected product may appear.

Virtual try-on results are generated representations and may not perfectly reflect actual appearance, fit, size, color, texture, or other physical characteristics of a product.

Where third-party infrastructure or AI service providers are used to provide this functionality, information is shared only as reasonably necessary to process the requested functionality and subject to applicable contractual, privacy, and security requirements.

7. Legal Basis for Processing

Where the GDPR, UK GDPR, or similar privacy laws apply, we process personal information based on one or more applicable legal bases, including:

  • • Performance of a contract;
  • • Legitimate business interests;
  • • Compliance with legal obligations; and
  • • Consent where consent is required by applicable law.

For shopper information processed on behalf of a Merchant, the Merchant may act as the data controller or business, and MakeProSimp LLP may act as a processor or service provider, as applicable under relevant law.

8. Sharing and Disclosure of Information

We may share information with third-party service providers where reasonably necessary to provide and support PehnAI, including:

  • • Cloud hosting and infrastructure providers;
  • • AI and image-processing service providers;
  • • Analytics and monitoring providers;
  • • Security and fraud-prevention providers;
  • • Customer-support providers; and
  • • Professional advisers where necessary.

We may also disclose information when reasonably necessary to:

  • • Comply with applicable laws or regulations;
  • • Respond to valid legal processes or governmental requests;
  • • Protect our rights, property, users, Merchants, or others;
  • • Investigate fraud, abuse, security incidents, or violations of our terms; or
  • • Facilitate a permitted business transaction as described below.

We do not sell Merchant or shopper personal information.

9. International Data Transfers

Information may be processed in countries other than the country in which the Merchant or shopper is located.

Where required by applicable law, we use appropriate contractual, technical, and organizational safeguards for international transfers of personal information.

10. Data Retention

We retain information only for as long as reasonably necessary to:

  • • Provide and maintain PehnAI;
  • • Fulfill the purposes described in this Privacy Policy;
  • • Maintain security and prevent abuse;
  • • Resolve disputes;
  • • Meet contractual requirements; and
  • • Comply with applicable legal obligations.

By default, both a submitted shopper photo and a generated virtual try-on image have a 24-hour expiry period. Background cleanup processes are intended to remove submitted photos that have expired or have been marked for deletion by the shopper. After a generated try-on image reaches its expiry time, PehnAI no longer serves that image through the storefront result endpoint.

PehnAI may retain try-on session records, usage records, feedback records, conversion records, provider-attempt records, privacy-webhook records, operational logs, and Merchant configuration until they are no longer needed for operation, security, billing, legal compliance, or dispute resolution, or until applicable deletion processes run. When Shopify sends a shop-redaction webhook, PehnAI deletes the shop record and records linked to it through applicable database relationships.

Following App uninstallation, information that is no longer required may be deleted or anonymized within a reasonable period unless continued retention is required for legal, security, accounting, fraud-prevention, or dispute-resolution purposes.

Information processed by third-party service providers may also be subject to their applicable retention requirements and our agreements with those providers.

11. Security

We implement reasonable administrative, technical, and organizational safeguards designed to protect information processed through PehnAI.

These measures may include, where appropriate:

  • • Encryption in transit;
  • • Authentication and access controls;
  • • Restricted and least-privilege access;
  • • Infrastructure and application monitoring;
  • • Logging and security controls;
  • • Secure development practices; and
  • • Other safeguards appropriate to the nature of the information processed.

However, no method of electronic transmission or storage can be guaranteed to be completely secure.

12. Merchant Responsibilities

Merchants using PehnAI are responsible for their own compliance with applicable privacy and data protection laws.

This may include responsibility for:

  • • Maintaining an appropriate privacy policy for their Shopify store;
  • • Informing shoppers that AI-powered virtual try-on functionality is being provided;
  • • Explaining how shopper images and related information may be processed;
  • • Obtaining consent where required by applicable law;
  • • Providing any required notices before a shopper submits an image;
  • • Ensuring that they have the appropriate rights to product images and other content processed through PehnAI; and
  • • Responding to applicable customer privacy requests.

13. Shopper Responsibilities

Shoppers should only upload images that they are authorized to use.

Shoppers should not upload images of another individual without appropriate authorization or consent and should not submit images containing unnecessary confidential or sensitive information.

14. Cookies and Similar Technologies

PehnAI may use cookies, local storage, or similar technologies where reasonably necessary to provide functionality, maintain sessions, protect the Service, understand usage, or improve performance.

Our websites may also use cookies and similar technologies for analytics, diagnostics, security, and service improvement.

Where required by applicable law, appropriate notice or consent should be provided before non-essential cookies or similar technologies are used.

15. Privacy Rights

Depending on where you live and applicable privacy law, you may have rights concerning your personal information, including the right to:

  • • Request access to personal information;
  • • Request correction of inaccurate information;
  • • Request deletion of personal information;
  • • Request restriction of certain processing;
  • • Request data portability;
  • • Object to certain processing; and
  • • Withdraw consent where processing is based on consent.

Where PehnAI processes shopper information on behalf of a Shopify Merchant, shoppers should generally submit privacy requests directly to the Merchant whose store they used. We will assist Merchants with applicable requests as required by law and our contractual obligations.

16. Children’s Privacy

PehnAI is a service provided to businesses and is not designed or directed toward children under the age of 13, or a higher minimum age where required by applicable law.

We do not knowingly collect personal information from children in violation of applicable law.

Merchants are responsible for determining whether PehnAI is appropriate for their audience and for obtaining any parental or guardian consent required under applicable law.

17. Third-Party Services

PehnAI integrates with Shopify and may use third-party infrastructure, AI processing, analytics, monitoring, security, and support services necessary to operate the App.

Third-party providers may process information on our behalf only as necessary to provide their respective services and subject to applicable agreements.

Third-party websites and services have their own privacy practices, and this Privacy Policy does not govern services operated independently by third parties.

18. Business Transfers

If MakeProSimp LLP is involved in a merger, acquisition, financing, restructuring, sale of assets, or similar business transaction, information covered by this Privacy Policy may be transferred as part of that transaction, subject to applicable law.

19. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to PehnAI, our information-processing practices, technology, legal requirements, or other operational requirements.

When we update this Privacy Policy, we will revise the Last Updated date above.

Where required by applicable law, we will provide additional notice regarding material changes.

20. Contact Us

For questions about this Privacy Policy, PehnAI’s privacy practices, or requests concerning personal information, please contact:

MakeProSimp
Email: [email protected]
Website: https://www.makeprosimp.com

Appendix A – Categories of Data Processed

CategoryExamples
MerchantEmail address and phone number
Store DataShopify shop domain, Shopify permissions granted to the App, App settings and configuration, product try-on settings, subscription/plan status, and usage records
Product DataProducts, variants, collections, product images, and related product information
Order DataShopify order history for the last 60 days, as authorized by Shopify
Virtual Try-On DataShopper-provided images, product images, generated previews/results, processing status, and related session information
Device & Activity DataIP address, browser, operating system, general geolocation, device/activity information
Analytics DataTry-on activity, successful/failed try-ons, product/variant activity and related performance information
Technical DataLogs, diagnostics, errors, timestamps, and security information
Support DataSupport requests and communications

The exact information processed depends on the permissions approved by the Merchant and the PehnAI features used.

Appendix B – Shopify Permissions

PehnAI requests access to certain Shopify data necessary to provide its functionality. Depending on the permissions approved during installation, this may include:

Customer data

  • • Device and activity data;
  • • Geolocation;
  • • IP address;
  • • Browser; and
  • • Operating system.

Staff and contributor data

  • • Email address;
  • • Phone number.

Store data

  • • Products;
  • • Collections; and
  • • Order history for the last 60 days.

PehnAI accesses and processes Shopify data only as authorized by the Merchant and as reasonably necessary to provide, secure, support, analyze, and improve the Service.