Privacy Policy

Last updated: August 1, 2026

This Privacy Policy explains how GEMVIE Hat Studio LLC collects, uses, and shares personal information when you visit or purchase from gemviehat.com.

GEMVIE is operated by GEMVIE Hat Studio LLC, a Colorado limited liability company.

PERSONAL INFORMATION WE COLLECT

When you visit our website, we automatically collect certain information related to your device, including your IP address, time zone, web browser, and cookies. Additionally, we may collect information about the pages or products you viewed, and how you interacted with our site. This information is known as "Device Information."

We use the following methods to collect Device Information:

Cookies: Data files that include an anonymous unique identifier. You can visit https://www.allaboutcookies.org for more information about cookies and disabling them.
Log Files: Record your IP address, internet service provider, browser type, date/time stamps, and referring/exit pages.
Web Beacons, Tags, and Pixels: Electronic files track information about how you browse our website.
When you make a purchase or attempt to purchase from our website, we may collect information such as your name, billing address, shipping address, email address, phone number where provided or required, order details, and payment-related information needed to complete the transaction. Payment card details are handled by the payment providers made available through checkout and are not stored directly by GEMVIE. We refer to this information as "Order Information."

In this Privacy Policy, we use the term "Personal Information" to refer to both Device Information and Order Information.

HOW WE USE YOUR PERSONAL INFORMATION

We primarily use your Order Information to fulfill your orders and process payments, as well as provide order confirmations and invoices. Moreover, we use your Order Information to:

Communicate with you;
Screen orders for potential risks such as fraud;
Provide you with information or advertising about our products or services based on your preferences.
We use your collected Device Information to screen for any potential risks or fraudulent activity and to improve our website by generating analytics regarding customer browsing habits and interactions. Your Device Information also helps us assess the effectiveness of our marketing and advertising campaigns.

SHARING YOUR PERSONAL INFORMATION

We share Personal Information with service-provider categories needed to operate the store, including Shopify as our commerce platform; payment providers displayed at checkout; fulfillment partners and carriers; customer-support providers; and analytics providers. These providers process information for the services they provide to us.

We may share your Personal Information outside of our website as required by applicable laws and regulations, in response to lawful requests, or to protect our rights.

BEHAVIORAL ADVERTISING

We may use Personal Information to measure or provide marketing communications where permitted. The specific partners and controls available may change as services are enabled or disabled. You can use the privacy, advertising, and cookie controls offered by your browser, device, and the relevant service provider.

DO NOT TRACK AND PRIVACY SIGNALS

Browser privacy signals and opt-out mechanisms are handled according to applicable law and the controls available through our storefront and service providers. Because these signals are not implemented uniformly, you may also use the available browser and cookie controls or contact us with a privacy request.

YOUR RIGHTS

Depending on where you live, you may have rights to request access to, correction of, deletion of, or a copy of certain Personal Information, or to object to or restrict certain processing. You may also have the right to withdraw consent or appeal a decision where applicable. These rights may be subject to legal exceptions, and we may need to verify your identity before completing a request. To submit a request, contact us using the information below.

DATA RETENTION

We retain Personal Information for as long as reasonably needed to fulfill orders, provide customer service, maintain business and transaction records, prevent fraud, resolve disputes, and comply with tax, accounting, and other legal obligations. Retention periods vary by the type of information and the purpose for which it is used. We delete or anonymize information when it is no longer needed, unless a longer period is required or permitted by law.

CHANGES

We may update this Privacy Policy at any time to reflect changes to our practices, operational procedures, and legal or regulatory requirements.

MINORS

We do not intend for our website to be used by individuals under the age of 13.

PLATFORM-SPECIFIC ADDENDA

SHOPIFY NETWORK INTELLIGENCE

gemviehat.com is hosted by Shopify, which processes information when you visit or make a purchase from our store in order to provide commerce services to GEMVIE and you. Shopify Network Intelligence is enabled for our store. Through this service, Shopify may use information from your interactions with GEMVIE together with information from your interactions with other merchants and with Shopify to provide enhanced services, including store protection, product and store improvements, analytics, personalization, and advertising-related services. Other merchants cannot access GEMVIE customer data through Shopify Network Intelligence.

To provide these services, Personal Information may be shared with Shopify, service providers, and other third parties, including parties located in countries other than where you live. You can learn more about Shopify's processing and your rights in the Shopify Consumer Privacy Policy.

Depending on your location, you may use our data-sharing opt-out page or a recognized Global Privacy Control signal to opt out of processing that may be treated as a sale or sharing of personal information or targeted advertising. Where available, you can use Cookie Preferences on gemviehat.com to give, refuse, or withdraw consent for non-essential cookies and similar technologies. You may also use the Shopify Privacy Portal to exercise choices concerning Shopify's processing for Enhanced Services, or contact GEMVIE through our Contact Us page with a privacy request.

GOOGLE ANALYTICS AND GOOGLE TAG

GEMVIE uses Google Analytics and the Google tag to understand how visitors use gemviehat.com, measure site performance, and measure shopping interactions. When these services run, Google may receive the page URL and IP address and may process first-party cookies or similar identifiers, browser and device information, approximate location, and information about pages and interactions.

Google explains how it uses information from sites or apps that use its services at https://policies.google.com/technologies/partner-sites. You can opt out of Google Analytics in supported browsers by using the Google Analytics Opt-out Browser Add-on.

META BUSINESS TOOLS

When GEMVIE enables Shopify's Enhanced data sharing setting for Facebook & Instagram by Meta, the integration uses the Meta Pixel, Advanced Matching, and the Conversions API to measure interactions with gemviehat.com, match events, analyze performance, attribute transactions and, when advertising services are used, support ad targeting, delivery, and personalization. The browser-based Meta Pixel may send events such as PageView, ViewContent, Search, AddToCart, InitiateCheckout, AddPaymentInfo, and Purchase, together with event details such as the relevant page or product and order value where applicable. The Conversions API may send a purchase event between Shopify and Meta servers.

Information used for matching may include your name, location information, email address, and phone number when you provide those details, together with your browsing and shopping activity on our online store. Browser settings or advertising blockers may affect browser-based Pixel activity, but they do not necessarily stop server-to-server transfers.

Meta may process information received through its business tools for matching, measurement, analytics, campaign attribution, security, product improvement and, where applicable, ad targeting, delivery, and personalization under the Meta Business Tools Terms and Meta Privacy Policy. Depending on your location and the services running, you may use Cookie Preferences on gemviehat.com, our data-sharing opt-out page, or a recognized Global Privacy Control signal. You can also manage applicable choices through activity off Meta technologies, AdChoices, or the controls offered by your browser or device, and you may contact GEMVIE through our Contact Us page with a privacy request.

META COMMERCE INTERACTIONS

When you view a GEMVIE product listing on Facebook or Instagram, send GEMVIE a message through a Meta commerce feature, or follow a listing to gemviehat.com, Meta may process information about your activity on its services under Meta's own terms and privacy policy. GEMVIE may receive information you choose to provide in a message or support request, such as your name, contact details, message content, and a product or order reference.

GEMVIE uses information received through these interactions to respond to inquiries, provide product or order support, prevent fraud or misuse, and maintain service records. We do not add contact details received through a Meta commerce interaction to our email marketing list unless you separately choose to subscribe.

If a Facebook or Instagram listing directs you to gemviehat.com, information collected on our website and during checkout is handled as described in this Privacy Policy and the terms shown on gemviehat.com. You can review Meta's own privacy practices at https://www.facebook.com/privacy/policy/.

CONTACT US

If you have any inquiries pertaining to our privacy policies, desire to make any changes, or have any questions, please email us at support@gemviehat.com.

GEMVIE AI CONTENT OPS

App addendum updated: October 28, 2026

GEMVIE Hat Studio LLC uses Gemvie AI Content Ops to support the operation of its authorized Meta business assets. This includes preparing and publishing content on GEMVIE's Facebook Page and Instagram professional account, reading the resulting content to verify publication, and authorized advertising account and measurement tasks.

For content publishing and verification, GEMVIE processes relevant business account and Page identifiers, account names, captions, media files or media links, platform content identifiers, publication times, links to published content, and API status and verification records. Advertising-related records can include asset identifiers, account status, currency, time zone, aggregate performance information, and the configuration or status of connected advertising data sources and audiences.

Content and relevant account information are sent to Meta when needed for authorized publishing or other Meta operations. Media used in published content may be hosted through Shopify. GEMVIE uses operational tools and records to prepare content, verify publication, prevent duplicate publication, troubleshoot errors, and support security. Authorized access credentials are handled separately from public content and publication reports.

For Platform Data received from Meta, GEMVIE responds promptly to requests from Meta or the relevant user to update or delete that data. We delete Platform Data as soon as reasonably possible when it is no longer necessary for an authorized purpose or when deletion is requested, unless applicable law or regulation requires us to keep specific data. If retention is legally required, we explain the relevant data category and legal basis. For Meta Platform Data, the requirements in this section take precedence over any broader retention wording elsewhere in this policy. Retention of other storefront or transaction records is addressed separately in the applicable sections of this policy. Requests to access, correct, or delete personal data associated with Gemvie AI Content Ops can be sent to support@gemviehat.com with the subject “Gemvie AI Content Ops — Data Request”. Identify the relevant account, Page, content, or interaction. Do not send passwords, access tokens, or two-factor authentication codes. Requests are handled manually, and GEMVIE may ask for information reasonably necessary to verify the request and locate the relevant records.

For the deletion-request procedure and its scope, see the Gemvie AI Content Ops data deletion instructions. The other applicable sections of this policy continue to cover storefront, website measurement, and commerce or support interactions. Meta's independent processing and platform account controls are described in Meta's Privacy Policy.

VIRTUAL HAT TRY-ON AND OPTIONAL IMPROVEMENT SAMPLES

Try-on addendum updated: November 11, 2026

When you choose Create my try-on, GEMVIE processes your uploaded photograph, chosen hat, the head circumference you enter, and any temporary photo-shape information used to select a fitting reference. We use these inputs to create an AI visual preview. The photo is sent to our AI image service provider for this purpose. A photograph does not reliably establish head circumference or physical fit: measurements must be taken by you, and the preview is not a size guarantee.

We keep encrypted working copies on our service while the task is processed. Without the separate improvement permission described below, the input photograph and its temporary features are deleted after processing completes or fails. The generated preview is available for download for 24 hours after completion, then removed from the active service. You may delete stored photos earlier using your private preview link. Technical task records and salted abuse-prevention identifiers are used to prevent duplicate generation and enforce usage limits. No portrait is stored in the browser's persistent storage; it stores a private task access key so that you can return to your task. Keep that key and your private preview link confidential.

Optional delivery email. If email delivery is offered and you enter your own email address, you request a transactional email containing your finished image and private preview link. This is optional; you can wait on the page instead. It does not subscribe you to marketing. Our email delivery provider processes the address and attachment to deliver that message. The address is removed from the try-on task after the delivery attempt, or when the task ends without a result. Copies already delivered to an inbox cannot be recalled by deleting the task. Email availability is shown on the try-on page. Our current transactional email provider is Resend. Its service can retain message content and delivery records for 30 days under the plan we use; see Resend’s privacy policy. This delivery retention is separate from GEMVIE’s optional improvement-sample retention. Deleting your try-on task does not recall a delivered message or remove copies already processed by the email provider.

Separate, optional improvement permission. The improvement checkbox is off by default. Only if you choose it may GEMVIE retain your input photograph, entered head measurement, hat selection and generated preview for internal evaluation and improvement of hat proportions, reference selection and generated image quality. Permission is recorded separately from permission to create this preview. Declining does not affect access to try-on. This permission does not authorize public use of your portrait, advertising, identification of you, or training a third party's general-purpose model.

Each authorized sample is retained for no longer than 12 months from that authorization. We delete it earlier when enough samples have been collected for the relevant evaluation, it is no longer needed, or you withdraw. Samples are stored encrypted with restricted access and are not automatically added to a public library or used as public examples. After 24 hours the online preview download expires even when a separately authorized improvement sample remains.

Withdrawal and deletion. Keep your private preview link. Open it and select Withdraw sample permission & delete sample to end the optional retention; the ordinary 24-hour result download may remain. Select Delete stored photos to delete the service's input and output copies and cancel any pending task. Processing already started at a service provider may not be reversible. If you lose the link or need assistance, email support@gemviehat.com with the subject “Virtual Try-On — Privacy Request”, the approximate request date, and the job identifier if available. Do not email passwords or access keys. We may ask for information reasonably necessary to locate the task and verify your request.

We use service providers for hosting, secure network delivery, AI image processing and, when available, transactional email. The AI image processor currently used is OpenAI through its API; the exact model can change. Its independent service retention rules may apply to requests already processed. Our optional improvement permission is permission for GEMVIE's internal evaluation, not permission for a provider's own training. Material changes to these purposes or retention periods require updated notice and, where applicable, new permission. The other applicable sections of this Privacy Policy continue to apply.