Vdrobe

Quidity Solutions LLC

Privacy Policy

This policy explains what Vdrobe processes when merchants install the Shopify app and shoppers use live clothing try-on.

Effective November 8, 2026

Who is responsible

Quidity Solutions LLC operates Vdrobe. Contact us at [email protected] or by mail at 30 N Gould St Ste R, Sheridan, WY 82801, United States.

A Shopify merchant controls the storefront relationship with its shoppers. Vdrobe processes data for that merchant to provide the app, while also acting as an independent controller for account security, billing, abuse prevention, and legal compliance where applicable.

Data we process

Merchant and Shopify data

  • Shop domain, installation and authenticated app-session data.
  • App settings, subscription state, quota, and usage records.
  • Whether the Vdrobe theme block is present and whether the store has a privacy policy page, used for the setup guide.
  • Products, variants, availability, and clothing images selected by the merchant for try-on.
  • Operational, audit, support, and error records.

Order data

With the merchant's permission, Vdrobe receives order webhooks so merchants can see whether try-on sessions lead to purchases. From each order Vdrobe stores the order ID, the variants of tracked products, their quantity, value, and currency, and links them to a try-on session through a hashed cart token. Vdrobe does not store the customer's name, email, phone number, or address from an order.

Storefront try-on data

  • A daily salted hash derived from a random browser identifier and request metadata for session limits and abuse prevention.
  • Session state, selected garments, visible-frame progress, stop reason, timing, provider account label, and accounting seconds.
  • Try-on activity for merchant analytics, such as try-on starts, garment switches, and additions to the cart, with the product, variant, and a hashed cart token.
  • If a shopper reaches the anonymous daily limit and submits the contact form, the merchant's shop stores the submitted name, normalized email, marketing consent choice, and consent time as a try-on contact lead. Repeated submissions for the same shop and email update the existing lead instead of creating duplicates.
  • The shopper's camera video is sent through AliRTC to Vidu for live processing. Vdrobe's application servers do not record or store that camera video. Audio capture and publication are disabled.

Marketing site interactions

When enabled, Vdrobe records non-sensitive interactions with the public marketing site, such as an install, demo, or pricing click and the selected page placement. Campaign values from UTM links may be included to understand which public campaigns bring visitors to the site. Vdrobe does not use this event endpoint to collect camera, microphone, contact, or raw network data, and these events are not linked to a shopper account.

Why we process data

  • Provide, secure, and troubleshoot the Shopify app.
  • Run live clothing try-on and garment switching.
  • Show merchants how try-on is used, including additions to the cart and attributed orders.
  • Enforce merchant plans, quota, concurrency, and session limits.
  • Let merchants manage contact leads collected when shoppers request additional try-on sessions, subject to the merchant's own marketing and privacy obligations.
  • Process billing, reconciliation, support, and fraud prevention.
  • Meet legal obligations and Shopify compliance requests.

Service providers and transfers

Vdrobe uses Shopify for commerce and app distribution, Vidu and AliRTC/Alibaba Cloud for live video processing and transport, and Railway for application and database hosting. During a try-on, Vdrobe passes the selected Shopify CDN garment image URL to Vidu and does not persist the merchant's garment image. These providers may process data in countries outside the merchant or shopper's country under their contractual and technical safeguards.

Vdrobe does not sell personal data or use shopper camera video for advertising.

Retention and deletion

  • Anonymous viewer hashes are removed from terminal sessions after 30 days by default.
  • Try-on analytics events, including the order data above, are deleted after 30 days by default.
  • Processed webhook metadata and completed background-job metadata are removed after 30 days by default.
  • Session duration, merchant debit, provider cost, and audit records are retained as needed for accounting, security, disputes, and legal obligations.
  • Try-on contact leads remain available to the merchant until the merchant deletes them, the app is uninstalled, or a deletion request requires removal.
  • Shopify's shop-redaction request deletes the merchant's app data and stored metadata unless retention is legally required.

Your choices and rights

Shoppers can decline camera permission or stop a session at any time. Merchants can disable Vdrobe, remove products, or uninstall the app. To request access, correction, deletion, restriction, or another privacy right, contact the merchant for storefront data or email [email protected]. We may need information that lets us locate the relevant shop and session without requesting camera footage.

Security and changes

Vdrobe uses signed short-lived tokens, Shopify request verification, role-based operational access, encrypted transport, and auditable administrative actions. No system is perfectly secure. We may update this policy as the service, providers, or legal requirements change and will publish the new effective date here.