Privacy Policy for WNDWShop Chrome Extension

Last Updated: August 2025

1. Introduction

WNDWShop ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Chrome extension (the "Extension").

2. Information We Collect

Information You Provide

• Account Information: Email address, first name, and last name when you create an account
• Authentication Data: Authentication tokens when you use Single Sign-On (SSO) services like Google

Information Automatically Collected

• Product Information: When you visit clothing product pages, we may collect:
  • Product titles and descriptions
  • Product images
  • Product URLs
  • Page metadata (when available)
• Usage Data: Information about how you interact with our extension
• Technical Information: Browser type, extension version, and device information

3. How We Use Your Information

• Virtual Try-On: To enable the virtual try-on feature by processing clothing images and your avatar
• Product Tracking: To save and display your clothing history
• User Authentication: To verify your identity and maintain your account
• Service Improvement: To improve functionality and fix technical issues

4. Information Sharing and Disclosure

We do not sell, trade, or otherwise transfer your personal information to third parties except:

• Service Providers: AWS (for data storage and authentication), Google (for SSO services)
• Legal Requirements: When required by law or to protect our rights

5. Data Storage and Security

• User Data: Stored securely in AWS DynamoDB
• Images: Stored in AWS S3 with appropriate access controls
• Security: Data is encrypted in transit and at rest

6. Your Rights and Choices

You have the right to:

• Access and correct your personal information
• Delete your account and associated data
• Disable the extension at any time
• Request a copy of your data in a portable format

7. Data Retention

• Account Data: Retained while your account is active
• Clothing History: Retained until you delete your account or individual items
• Usage Data: Retained for up to 2 years for service improvement

8. Third-Party Services

• Google Services: SSO authentication and fonts (subject to Google's Privacy Policy)
• AWS Services: Data storage, authentication, and hosting
• E-commerce Websites: We only collect publicly available information necessary for functionality

9. Children's Privacy

Our extension is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your information.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy and updating the "Last Updated" date.

13. Legal Basis for Processing (EU Users)

If you are in the European Union, our legal basis for processing your personal information includes consent, contract performance, legitimate interest, and legal obligation.

14. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know, delete, and opt-out of the sale of personal information. We do not sell personal information.