गोपनीयता नीति

ItemFits LLC (“ItemFits”, “हम”, “हमें” या “हमारा”) ItemFits का संचालन करती है और इस गोपनीयता नीति में वर्णित व्यक्तिगत जानकारी के प्रसंस्करण के लिए ज़िम्मेदार है। नीचे Shopify अनुभाग व्यापारियों की ओर से डेटा संसाधित करते समय हमारी भूमिका बताता है। हम वह जानकारी एकत्र करते हैं जो आप सीधे हमें प्रदान करते हैं जब आप: • एक खाता बनाते हैं • फ़िट जाँच चलाने के लिए आयाम, वस्तुएँ या स्थान दर्ज करते हैं • विश्लेषण के लिए छवियाँ या फ़ाइलें अपलोड करते हैं • सपोर्ट के लिए हमसे संपर्क करते हैं • प्रोडक्ट अपडेट की सदस्यता लेते हैं • किसी फ़िट निर्णय के बारे में हमारे AI असिस्टेंट के साथ चैट करते हैं इसमें आपका ईमेल पता, आपके द्वारा दर्ज किए गए आयाम और वस्तुएँ, आपके द्वारा उत्पन्न फ़िट जाँच और दृश्य प्रमाण, आपके चैट संदेश और कोई भी फ़ाइलें शामिल हो सकती हैं जो आप अपलोड करना चुनते हैं। हम चाहते हैं कि आप यह जानें: आपकी फ़िट जाँच और चैट संदेश आपके खाते पर संग्रहीत होते हैं ताकि आप उन्हें बाद में देख सकें, और ताकि हम बग और दुरुपयोग की जाँच कर सकें। आप इन सभी को कभी भी Settings → खाता → खतरा क्षेत्र से मिटा सकते हैं।

हम एकत्र की गई जानकारी का उपयोग करते हैं: • आपकी फ़िट जाँच चलाने और दृश्य प्रमाण उत्पन्न करने के लिए • आपकी वस्तुएँ, स्थान और प्रोजेक्ट इतिहास सहेजने के लिए ताकि आप उनके पास लौट सकें • बग की जाँच करने और सेवा के दुरुपयोग को रोकने के लिए • सॉल्वर सटीकता और प्रोडक्ट डिफ़ॉल्ट बेहतर करने के लिए सामूहिक उपयोग पैटर्न देखने के लिए • आपको तकनीकी सूचनाएँ, रसीदें और सपोर्ट उत्तर भेजने के लिए • आपके प्रश्नों और सपोर्ट अनुरोधों का जवाब देने के लिए • कानूनी दायित्वों का पालन करने और अपने अधिकारों की रक्षा करने के लिए हम आपकी व्यक्तिगत जानकारी न तो बेचते हैं और न ही किराए पर देते हैं, और हम इसे तृतीय पक्षों को उनके विपणन उद्देश्यों के लिए साझा नहीं करते।

आपकी जानकारी उद्योग-मानक एन्क्रिप्शन का उपयोग करके ट्रांज़िट और आराम — दोनों में संग्रहीत होती है। हम अनधिकृत पहुँच, परिवर्तन, प्रकटीकरण या विनाश के खिलाफ तकनीकी और संगठनात्मक सुरक्षा उपाय लागू करते हैं। आपकी फ़िट जाँच, सहेजी गई वस्तुएँ और स्थान, और चैट संदेश आपके खाते पर तब तक रहते हैं जब तक आप उन्हें मिटा नहीं देते। जब आप अपना खाता हटाते हैं, तो आपकी पहचान वाले रिकॉर्ड (खाता, ईमेल, IP पता, डिवाइस फ़िंगरप्रिंट, सत्र लिंक) तुरंत मिटा दिए जाते हैं। जहाँ हम — आपसे किसी भी कड़ी के बिना — प्रोडक्ट गुणवत्ता, दुरुपयोग की रोकथाम या कानूनी दायित्वों के लिए अनाम रिकॉर्ड रखते हैं, हम उन्हें GDPR के तहत अनाम डेटा के रूप में मानते हैं। हम आपकी जानकारी केवल तब तक बनाए रखते हैं जब तक सेवा प्रदान करने के लिए आवश्यक हो या कानून द्वारा अपेक्षित हो।

हम कुकीज़ और समान ट्रैकिंग तकनीकों का उपयोग करते हैं: • आपकी प्राथमिकताओं और सेटिंग्स याद रखने के लिए • साइट ट्रैफिक और उपयोग पैटर्न का विश्लेषण करने के लिए • हमारी वेबसाइट कार्यक्षमता बेहतर बनाने के लिए • वैयक्तिकृत सामग्री और सिफारिशें प्रदान करने के लिए आप अपनी ब्राउज़र प्राथमिकताओं के माध्यम से कुकीज़ सेटिंग्स नियंत्रित कर सकते हैं। हालाँकि, कुछ कुकीज़ अक्षम करने से हमारी सेवा की कुछ सुविधाएँ सीमित हो सकती हैं।

हमारी सेवा तृतीय-पक्ष प्रदाताओं के साथ एकीकृत है: • AI-संचालित स्थानिक विश्लेषण • 3D रेंडरिंग और विज़ुअलाइज़ेशन • फ़िट-जाँच पैक खरीद के लिए भुगतान प्रोसेसिंग • विश्लेषण और प्रदर्शन निगरानी ये प्रदाता गोपनीयता समझौतों से बाध्य हैं और केवल अपनी विशिष्ट सेवाएँ प्रदान करने के लिए आवश्यक जानकारी तक पहुँचते हैं।

आपको अधिकार है: • अपनी व्यक्तिगत जानकारी तक पहुँचने, अपडेट करने या हटाने का • अपनी सहेजी गई वस्तुएँ, स्थान और फ़िट-जाँच इतिहास एक्सपोर्ट करने का • प्रोडक्ट-अपडेट ईमेल से बाहर निकलने का • डेटा पोर्टेबिलिटी का अनुरोध करने का • पर्यवेक्षी प्राधिकरणों के साथ शिकायत दर्ज करने का मिटाने का अधिकार लागू करने का सबसे तेज़ तरीका है Settings → खाता → खतरा क्षेत्र। अन्य अनुरोधों के लिए, support@itemfits.com पर ईमेल करें। जब आप अपना खाता हटाते हैं, तो हम आपकी पहचान को सभी रिकॉर्ड्स (खाता, ईमेल, IP पता, ब्राउज़र फ़िंगरप्रिंट, सत्र लिंक) से स्थायी रूप से हटा देते हैं। चैट संदेशों की टेक्स्ट सामग्री उत्पाद गुणवत्ता और दुरुपयोग की रोकथाम के लिए अनाम रूप में — आपसे किसी भी कड़ी के बिना — बनाए रखी जा सकती है। चूँकि ये रिकॉर्ड अब आपसे नहीं जोड़े जा सकते, इन्हें GDPR के तहत अनाम डेटा के रूप में माना जाता है। यदि आप पसंद करते हैं कि कोई भी रूप में न रखी जाए, तो चैट संदेशों में व्यक्तिगत जानकारी (नाम, पते, फ़ोन नंबर) शामिल न करें।

हमारी सेवा 13 वर्ष से कम उम्र के बच्चों के लिए नहीं है। हम 13 वर्ष से कम उम्र के बच्चों से जानबूझकर व्यक्तिगत जानकारी एकत्र नहीं करते। यदि हम पता लगाते हैं कि हमने 13 वर्ष से कम उम्र के बच्चे से जानकारी एकत्र की है, तो हम इसे तुरंत हटा देंगे।

हम समय-समय पर इस गोपनीयता नीति को अपडेट कर सकते हैं। हम इस पृष्ठ पर नई नीति पोस्ट करके और 'अंतिम अपडेट' तिथि अपडेट करके उपयोगकर्ताओं को किसी भी महत्वपूर्ण परिवर्तन के बारे में सूचित करेंगे। परिवर्तन पोस्ट होने के बाद हमारी सेवा का आपका निरंतर उपयोग अपडेट की गई नीति की स्वीकृति मानी जाएगी।

ItemFits LLC 401 East Jackson Street, Suite 2340, Tampa, FL 33602 यदि आपके इस गोपनीयता नीति या हमारी गोपनीयता प्रथाओं के बारे में प्रश्न हैं, तो कृपया हमसे संपर्क करें: ईमेल: support@itemfits.com विषय: गोपनीयता नीति पूछताछ हम 30 दिनों के भीतर गोपनीयता-संबंधित पूछताछ का जवाब देंगे।

The ItemFits Chrome extension lets you check whether a product on a retailer's page (such as Amazon, IKEA, or Wayfair) will fit through doors, up stairs, into vehicles, or in a room. To provide this feature, the extension collects and transmits the following data to our backend at itemfits.com: • Account and authentication data. If you choose to sign in, we collect your email address. When you sign in with email and password, your password is sent over HTTPS to our authentication provider (Supabase) and is never stored inside the extension. When you sign in with Google, we use Chrome's identity API (chrome.identity.launchWebAuthFlow) to open Google's OAuth consent window and receive your email address and a session token via our authentication provider. Your Supabase session token is stored locally in the extension's chrome.storage.local so you stay signed in across popup opens. • Product page content. When you click "Scan this page" in the extension popup, we run a one-shot content script in the active tab to extract publicly visible product attributes — title, dimensions, price, images, hyperlinks, and structured data (JSON-LD) — and send them to itemfits.com/api/extension/parse-product so our AI can identify the item and its dimensions. The extension never scans pages in the background or without your explicit click. • Chat messages. Messages you type into the extension's chat interface are sent to itemfits.com/api/extension/chat, where they are processed by our AI provider (Anthropic, the maker of Claude) and stored so you can reference past conversations from the extension's History view. • Scan and chat history. We store a per-user history of the products you've scanned and the chat threads you've started so you can revisit them. You can delete individual entries from the History view or request full deletion by emailing support@itemfits.com. • Diagnostic data and device identifier. When a request to itemfits.com fails (for example, a network error or a 500 from our parser), the extension transmits a small, technical error report to itemfits.com/api/extension/telemetry containing: a randomly generated error ID, an error code, the HTTP status code, the request path, and the retailer hostname where the error occurred. The extension also generates a random per-install identifier (UUID) the first time you use it and stores it in the browser's extension storage; it is sent alongside chat requests so our abuse-protection systems can rate-limit the extension separately from the website. Neither the diagnostic reports nor the identifier contain your email address, page contents, or any text you have typed. You can disable diagnostic reports at any time from the extension's Options page (right-click the extension icon → "Options" → Privacy → "Don't send error telemetry to ItemFits"). The identifier is regenerated if you uninstall and reinstall the extension. Subprocessors used by the extension. We share the data above with a limited number of service providers strictly to deliver the extension's single purpose: • Supabase — database and authentication. Stores your account, sessions, scan history, and chat transcripts. • Anthropic (maker of Claude) — AI model provider. Processes chat messages and scanned product data to generate fit assessments. Per Anthropic's commercial terms, data sent via its API is not used to train Anthropic's models. • Stripe — payment processing for premium tier purchases made on itemfits.com. The extension itself does not handle payment information; if you purchase a paid plan, you do so on the web app and Stripe processes the transaction on our behalf. The extension never sees card numbers or banking details. These providers are contractually bound to use the data only to deliver services to ItemFits. What the extension does NOT collect. The extension does not track your browsing history outside of pages you explicitly scan. It does not monitor your clicks, keystrokes, mouse movements, or scroll position. It does not read form fields. It does not access your location, camera, microphone, or files. It does not inject scripts into pages you haven't asked it to scan. It does not sell, rent, or share your data with advertisers or data brokers, and it does not use your data for purposes unrelated to checking whether an item fits in a space.

Scope and responsibility. ItemFits LLC (“ItemFits,” “we,” “us,” or “our”) operates the ItemFits Shopify app, including merchant-branded and white-label experiences. This section applies to merchants using the ItemFits Shopify app and to their customers, prospective customers, and store visitors. It takes precedence over general descriptions elsewhere on this page for Shopify shopper data. The merchant determines why its shoppers' data is processed; ItemFits processes that data to provide the merchant's requested fit-check and reporting services. ItemFits also processes merchant account, billing, support, and security information to operate its own service. Our Shopify Merchant Data Processing Terms explain the parties' responsibilities. Data and purposes. ItemFits processes the following information: • Merchant and catalog information: shop domain, installation and access credentials, merchant contact information, billing/plan state, product and variant identifiers, titles, images, categories, SKUs, dimensions, publication eligibility, and synchronization status. We use it to connect the store, maintain its eligible product catalog, configure the widget, manage the app subscription, and support the merchant. We also use the merchant's own contact email address to send account and onboarding email about the app — for example a welcome message with setup instructions after the app is installed. That address is read from Shopify at the time the message is sent and is not stored for this purpose; we retain only a record of the send (store domain, installation reference, time, and outcome). Every such message carries an unsubscribe link, and opting out does not change how the app works. This is email to the merchant, not to shoppers. • Fit-check and conversation information: product and variant references, measurements entered, fit results, explanations, language, timestamps, and messages submitted to the widget. We use it to answer shoppers' fit questions, support conversation history, and let the merchant understand questions and product fit problems. Free-form messages can contain personal information entered by a shopper; please do not enter contact details or other unnecessary personal information. • Activity and identifiers: browser/visitor, session, conversation, operation, and fit-check identifiers; recorded widget opens, check attempts and outcomes, and ItemFits cart actions. These support service operation, troubleshooting, and merchant analytics. For signed-in shoppers, a Shopify-authenticated customer identifier may be recorded with a fit check for supported history and order linking. Where the shopper has allowed analytics and marketing, Shopify's cart identifier may be recorded with a fit check, stored only as a keyed hash. These identifiers can relate to an individual and are personal data, even when no name or email is present. This processing is not anonymous merely because an identifier replaces a name. • Storefront commerce activity, where the merchant enables it: with the merchant's permission ItemFits registers a Shopify web pixel that records product views, cart additions and removals, checkouts started, and completed checkouts across the whole storefront, not only on ItemFits surfaces. For each event we record the product and variant identifiers, quantity, the time, and for completed checkouts the order identifier, currency and order total. Shopify's visitor identifier and checkout token are stored only as keyed hashes. We do not record names, email addresses, phone numbers, postal addresses, payment details, discount codes, or line-item titles. Shopify withholds these events entirely where the shopper has not allowed analytics, and that permission is the basis for this collection. We use them to show the merchant how fit checks relate to storefront browsing and purchasing, such as how many shoppers viewed a product without checking fit. These identifiers can relate to an individual and are personal data, even when no name or email is present. • Order attribution, where Shopify access is permitted and the feature is enabled: order and customer identifiers, order timestamps and paid/test status, currency, order totals, and purchased product/variant identifiers, quantities, and prices, and, where enabled, refund, cancellation and return status, amounts and Shopify-provided return reason categories for those orders. We link an eligible paid order to the most recent qualifying fit check during the preceding attribution window (currently seven days), using the signed-in customer identifier or, where the shopper allowed analytics and marketing, a keyed hash of Shopify's cart identifier. Withdrawn permission ends linking. The stored assisted-order record contains the order, fit-check reference, timestamps, currency, gross amount, and product lines. It does not need customer names, email addresses, phone numbers, or postal addresses. Reports show partial coverage and association, not proof that ItemFits caused a purchase. The seven-day attribution window is not a seven-day deletion period. Shopify access. The app requests write_products for catalog/metafield operations, read_themes to check theme-extension setup, read_orders for eligible order reporting, and, where storefront commerce measurement is enabled, write_pixels to register the ItemFits web pixel and read_customer_events to receive the storefront events that pixel subscribes to. Requested permissions do not by themselves enable access to protected customer data. Order notifications depend on Shopify's required access approval or development-access configuration and feature activation. We do not request the optional protected name, email, phone, or address fields for order analytics. Merchant contact details and personal information voluntarily entered in support or chat are separate from those optional Shopify customer fields. Limits on use. Shopify shopper data is used for the services and purposes described here, including merchant reporting and service support/security. We do not sell it, share it for targeted advertising, use identifiable Shopify shopper data to train models, or use it to market to shoppers. We do not combine it across merchants to build advertising profiles. Sending a question to an AI provider to answer it is distinct from using it to train a model. Fit guidance and assisted-order reports do not determine credit, insurance, employment, eligibility for essential services, or other decisions with legal or similarly significant effects. Merchants remain responsible for their own decisions and must not use these reports as a substitute for required human review. Aggregated statistics. We may create aggregated statistics from the information described here, such as counts and rates of widget views, fit checks and results, orders linked to a fit check, refunds, returns and service costs. Aggregated statistics do not identify a shopper. Figures shown to other merchants never identify a store: they combine at least five stores, and small groups are withheld. We use aggregated statistics to operate, secure and improve the service and to show merchants how their results compare with other stores. We do not sell them. A store's own aggregated statistics are kept until the store uninstalls ItemFits and its data is erased; cross-store figures that already include a store are not recalculated after that store's erasure. Consent and choices. Installing the app or granting Shopify API permissions is not the same as obtaining a shopper's consent to analytics. Merchants must provide appropriate notices and establish a lawful basis for the processing they enable. Where a customer's consent is required, optional analytics must not be used unless the customer's choices can be honored. A storefront cookie banner alone does not establish that ItemFits applies that choice. Contact support before enabling processing that depends on consent to confirm the available controls. Shoppers may ask the merchant, or contact us with the store domain, to request access, correction, deletion, or an applicable restriction or objection. We verify and scope requests before acting. We do not require unnecessary identity documents or contact information. Service providers. Shopify supplies the store platform and authenticated app interfaces. Supabase hosts the database and authentication services; Vercel hosts application/API delivery. Anthropic processes relevant product text, shopper questions, and fit context to provide AI-assisted extraction and answers. Resend delivers internal operational email to ItemFits (such as app install and uninstall notices and service alerts), which can include store name and contact details, and also delivers account and onboarding email to the merchant's own contact address; we do not use it to email shoppers. Data may be processed outside the shopper's country, including in the United States. Providers are used to deliver the service, not to sell shopper data or provide advertising audiences. Contact support for information about processing locations, applicable provider terms, or transfer arrangements for your store; this page does not represent that a particular transfer mechanism has been executed for every merchant. Security. Merchant report access uses authenticated Shopify sessions and store-scoped queries. Shopify webhook signatures are checked before their payloads are accepted. Service credentials are handled on the server. Public app/API connections use HTTPS. Database storage and infrastructure protection depend on our hosting providers and deployed configuration; we do not describe these safeguards as end-to-end encryption or claim that every field is separately encrypted. Access to identifiable data is limited to service delivery, authorized support, security, and fulfilling requests. Contact support to report a suspected disclosure or security issue. Retention and deletion. Catalog and installation records support the ongoing store connection. Fit history, conversations, activity, and any enabled order-attribution records support the service and merchant reports. Some records may remain for the duration of an installation; there is not currently a uniform automatic age-based deletion period covering all Shopify datasets, including assisted-order records. A report's date filter does not delete underlying data. Merchants and shoppers can request earlier deletion or restriction by contacting support. Uninstall revokes the app's ongoing store access; Shopify also sends a shop-erasure notification separately. We process that notification and customer access/erasure requests, with support review where automated coverage is incomplete. Uninstall is not a guarantee that every record or backup is erased within 48 hours. Any necessary legal retention or limitation on fulfilling a request will be explained to the requester. This policy does not promise that removing an account identifier alone anonymizes free-text messages. Contact and requests. ItemFits LLC, 401 East Jackson Street, Suite 2340, Tampa, FL 33602, United States. Email support@itemfits.com with the subject “Shopify privacy request” and the relevant store domain. Shoppers may also ask their merchant to initiate a request through Shopify. Include only the information needed to locate the relevant records. We will explain verification, available data, and the applicable response timeline; request rights depend on the law that applies to the request. For security reports, use the subject “Shopify security report”.

ItemFits measures use of the merchant setup walkthrough to understand setup progression, friction and processing wait, including when optional shopper reporting is skipped. ItemFits determines this service-improvement purpose independently. This measurement does not enable shopper analytics or change shopper permission choices. We record the store domain, opaque installation and setup-attempt identifiers, screen and action codes, timestamps, and bounded foreground and processing-wait durations. We do not collect merchant names, email addresses, shopper identifiers, product text, measurements, full URLs or session tokens for this purpose. Opening a storefront test is not recorded as a successful fit interaction. Development, internal and test stores are excluded. Raw setup events expire 30 days after they are received. An hourly cleanup removes expired events, subject to verified legal holds and active privacy requests; cleanup failures or backlogs can delay removal. Reviewed shop-erasure requests include these events. Minimal deletion keys and digests remain in the restricted rights and restore journal under its separate evidence policy, so a backup restore cannot silently resurrect erased events. Backups and requests follow the limitations described in the Shopify privacy notice. Events are handled by ItemFits through Vercel and Supabase. They are not sent to advertising providers or used to identify shoppers. Contact support@itemfits.com with your store domain to request access, correction, deletion, restriction or to object to this measurement.

Fit consultations are on for every store unless the merchant turns them off (a store that has not set them up offers sending photos, never a phone number it was not given). When a fit check on a store cannot confirm an item will fit, when the chat has no answer it can give, or when the shopper asks in the chat to talk to the store, the shopper is offered the store's furniture consultant instead: the store's phone number, sending photos of the space, or asking for a call back. Each of these opens a consult case with a reference number. ItemFits processes this information for the merchant, so the merchant's consultant can follow up with the shopper. Nothing is collected unless the feature is on for that store and the shopper chooses one of these options. What a consult case holds: • The fit check it came from: the store, product and option, the sizes that were checked, the space, the result, which screen it came from, and when it was opened. • From the chat, why the consultant was offered (the shopper asked to talk to the store, or the chat had no answer), and whether the shopper said a part of the item comes off (which part, such as the legs or the back) or that it is delivered in a box. These are stored as a choice from a fixed list; the shopper's own words are not kept in the case. • Photos, if the shopper sends them (up to five per case, with an optional label such as "doorway"). Photos are re-encoded in the shopper's browser before upload, which removes camera and location metadata. They are stored privately and shown to the merchant only through links that expire after 5 minutes. • With photos, how the store can reach the shopper: the name they type and an email address or a phone number (at least one is required to send photos), and the sentence shown with those fields, which names the store. • A call-back request, if the shopper asks for one: the name and phone number the shopper types and an optional best time to call. Typing a number and asking for the call is the request to be called by the store about that item. Requests made before 8 October 2026 also kept the consent sentence shown with the form then, which named the store. • For a shopper signed in to the store's customer account, Shopify's customer identifier, so a customer data-erasure request from Shopify can find their cases. No identifier is stored for guests. • When the shopper tapped the store's number, and the case's status and any notes the merchant's staff add. Who sees it. The merchant's staff see consult cases in the ItemFits app inside Shopify admin. A small number of ItemFits staff can also open a case, including its photos and contact details, to support the merchant with it and to check that the fit check behind it answered correctly; they see it beside the store conversation it came from, and they do not contact the shopper. When photos are sent or a call back is requested, ItemFits emails the merchant (the address it set, else the store's own email) the reference, the product and the result, with a link to the case; that email never contains the shopper's name, email address, phone number or photos. Photos are not analysed by AI and are not shared with anyone other than the merchant and those ItemFits staff. How long it is kept. Uploads that were started but never sent are removed after 24 hours. Photos, the contact details sent with them (name, email address and phone number) and call-back details (name, phone number and best time) are erased 90 days after the case opened. The rest of the case is erased after 400 days. A Shopify shop erasure request erases the store's cases, and a customer erasure request erases the cases of that signed-in customer. Erasure runs daily, so removal can take up to a day after its time; verified legal holds and backups follow the limitations in the Shopify privacy notice. A guest's contact and call-back details cannot be matched to an erasure request by name, email address or phone number, which is why they are erased after 90 days for everyone; a shopper can also ask the merchant, or support@itemfits.com with the store's domain and the reference number, to remove them sooner. Where it is handled. Cases and photos are stored with Supabase; the service runs on Vercel; merchant emails are delivered by Resend. None of it is used for advertising or sold.

Scope and responsibility. This section applies to merchants who add the ItemFits app to a Wix site and to the visitors of those sites. It takes precedence over general descriptions elsewhere on this page for Wix site visitors. The merchant decides why its visitors' information is processed; ItemFits processes it to provide the fit checks, chat answers and reports the merchant asked for. ItemFits also processes the merchant's own account, support and security information to operate its service. What the app reads from Wix. The app asks Wix only for permission to read the store's products (titles, descriptions, options, prices, images, product and package sizes) and basic information about the app installation (the site and installation identifiers, whether Wix Stores is installed, and the site owner's email address, name, language and email preferences). It cannot read or change orders, contacts or customers, and it never writes to the store's products. Wix gives the app a short-lived token on each request; ItemFits checks it with Wix and identifies the store by its Wix installation, never by a cookie. Emails to the merchant. ItemFits uses the site owner's email address only to send the store's own ItemFits emails: a welcome, product-size reports, a notice when a visitor sends photos or asks for a call back and the merchant set no other address for it, and, after the app is removed, one short survey asking why. It sends none of these when Wix reports that the owner has opted out of email, and every one has an unsubscribe link. To send that survey, ItemFits keeps the address while the app is installed and deletes it right after the survey is decided, or 7 days after removal at the latest. The owner's name and email preferences and the store's name and language are kept with the store's other information and erased when the merchant asks. A survey answer (a reason and an optional note) is erased after 400 days. What the app records. On a store's site, ItemFits records every fit check, chat message and answer, and every use of the widgets (opening and closing them, starting a check, entering sizes, viewing a result, adding an item to the cart), for every visitor. This recording does not depend on the visitor's cookie choices, because it is how the merchant and ItemFits review whether answers were right. What is kept: the question and the answer the visitor saw, the product and option, the sizes that were checked, the result, the time, the device type, and whether a site member was signed in (never who). ItemFits does not store a visitor identifier, a Wix member identifier, a name or a page address with these records, and email addresses and phone numbers typed into a chat are removed before the text is stored. Fit consultations. Fit consultations are on unless the merchant turns them off. When they are on, a visitor can choose to send photos of a space or, when the merchant gave a phone number, ask the store to call back. Each choice opens a consult case with a reference number. A case holds the fit check it came from and what the visitor chose to give: photos (re-encoded in the visitor's browser, which removes camera and location details), a name, an email address or phone number, and a best time to call. The merchant's staff see the case in the ItemFits dashboard, and a small number of ItemFits staff can open it to support the merchant; photos are not analysed by AI. How long it is kept. Recorded checks, chats and widget activity are erased after 400 days, and consult cases after 400 days. Consult photos and the contact details sent with them are erased 90 days after the case opened. Product sizes, settings, branding and other information the merchant entered are kept by ItemFits, not by Wix, for as long as ItemFits operates the service, including after the app is removed from the site, so that adding the app again picks up where the merchant left off. They are erased when the merchant asks. Erasure runs daily, so removal can take up to a day after its time; data under a verified legal hold is kept until the hold is released. Access, correction and erasure. Wix does not send apps a notice when a site visitor or a merchant asks for their data or for its deletion, so these requests come to ItemFits directly. A merchant can file one in the ItemFits dashboard on Wix (Privacy requests): a copy of a visitor's data, erasure of a visitor's data, or erasure of the information ItemFits keeps for the store (everything except the record of the request itself, the installation record that identifies the store, its plan and usage-limit records, and any legal hold placed on the store's data). Because ItemFits keeps no visitor accounts, a visitor is found only by the email address or phone number they gave in a consult case, or by the case reference; the request stores the email address and phone number only as a keyed hash (a fingerprint computed with a secret key that only ItemFits holds), plus the merchant's email address for our reply, and all of these are cleared once the request is finished. ItemFits confirms each request by email and completes it within 30 days of receiving it. A visitor can also ask the merchant, or write to support@itemfits.com with the store's site address. We verify a request before acting on it and do not ask for unnecessary identity documents. Limits on use and service providers. Wix site data is used only for the purposes described here. We do not sell it, share it for targeted advertising, use it to train models, or use it to market to visitors. Wix provides the site platform and the app's sign-in and permissions. Supabase stores the data; Vercel runs the service; Anthropic processes product text, visitor questions and fit details to produce answers; Resend delivers email to the merchant and to ItemFits. Data may be processed outside the visitor's country, including in the United States. Contact support@itemfits.com for questions about this section.