A clear view
of the boundaries.
What stays on your device
Seller records, condition close-ups and buyer notes are processed in your browser. Seller drafts and opened inspection records are saved locally in IndexedDB as you work. The personal input photo stays in memory. Completed previews are not stored in source drafts. A separate unchecked choice lets you keep a generated look (which may contain your likeness) in My Rack on this device, up to 50 MB of saved looks. Unchecking that choice, removing the item, or clearing local data removes that saved look; existing downloads remain. Seller-only exports exclude buyer notes and generated personal images.
There is no As-Shown user account, checkout, advertising tracker or automatic cloud photo library. Publishing a seller-only link is a separate explicit action. This does not mean the host or provider has no operational logs.
Quick Try accepts one authorized garment image without requiring a seller record. It explicitly records condition as not supplied. My Rack stores up to 40 source records / 100 MB of source images, with local decisions and named collections. These are your saved pieces, not public inventory or listings for sale.
What leaves your device
After your affirmative approval, your prepared shopper photo and the chosen garment reference pass through our server to Perfect Corp.’s YouCam API. Condition close-ups and buyer notes are not transmitted. The server also receives structural record commitments to bind a task to the selected revision; this does not independently verify withheld evidence. The API credential stays on the server.
The provider’s policy describes USA storage, generally 30-day retention with exceptions, and potential facial or biometric processing. Clearing As-Shown cannot delete provider-held data. We cannot guarantee immediate provider deletion. Read the provider’s API privacy policy.
Operational protection
Live generation requires a server ledger. Request records contain keyed pseudonymous identifiers, digest commitments and task recovery information, expire after 24 hours, and contain no photos, seller descriptions or buyer notes. Session and network rate counters expire after two hours; network identifiers are keyed hashes, not raw IP addresses. A separate aggregate unit counter persists without individual request details. Clearing your browser does not remove these records.
The ledger admits the same request intent only once during its retention window. A failure confirmed before task submission releases its internal allowance once; uncertain submissions retain it. Recovery tokens last two hours. If the provider accepted a task but its response was lost, the app stops rather than silently creating another task; this is not an exactly-once guarantee across independent systems.
A free-credit reserve and verified pricing checks can pause live generation. There is no paid fallback. Provider outages and free-service limits can still interrupt a preview. A completed offline package remains usable.
Optional seller links
With publication permission, a seller-only archive passes through our server to create a separate revision with orientation applied and metadata removed from its photo copies. The copy is stored in private Vercel Blob storage. Buyer notes, choices and personal try-on images are excluded. Original local files are unchanged.
Anyone possessing the full inspection link can access and download that copy until its 24-hour expiry or revocation. Access tokens are in the URL fragment and are sent separately when opening a record. Keep the revocation link private. Link revocation cannot delete recipients’ downloads. Daily cleanup removes expired stored copies; operational publication metadata expires after 48 hours. Free-service quotas may pause publication or access.
A shared collection contains read links for up to eight already-published seller copies. It uploads no extra photos and excludes personal looks, notes and management tokens. Each item retains its own expiry, revocation and transfer quota. Anyone holding the complete collection URL can read those copies while valid; do not publish the link unintentionally.
What the app cannot verify
A generated image can change drape, sleeve placement, texture, marks and body proportions. It is not a sizing recommendation, fit guarantee, condition inspection or authentication. Seller claims can be mistaken or fabricated. Source-region markers are seller-supplied and never automatically transferred to generated images.
File digests check agreement between saved bytes and a supplied manifest. Someone replacing both can recompute them. They do not establish seller identity, a trusted timestamp or a shipped garment’s condition. Review summaries and question drafts are deterministic helpers based on your choices, not AI judgments or legal evidence certification.
Downloads, clearing and recovery
A private decision package may include your likeness and private notes. Store and share it carefully. Clearing local data removes app-local records and task-recovery tokens, not downloads, backups, host logs or provider-held data. Leaving during an upload cannot guarantee cancellation.
Known tasks can be checked without another generation. An uncertain submission is not automatically recreated. Local storage can fail or be cleared by your browser; export important records.
What the example demonstrates
The public example uses a fictional garment, synthetic shopper and controlled synthetic condition images. Its recorded preview is an actual YouCam result. It does not demonstrate automatic defect detection or prove that the provider erased a defect. Initial feasibility used two synthetic shopper framings and one shirt. The reconstructed collection adds a navy knit and ivory shirt with actual YouCam outputs. This is not a real-user accuracy or usefulness study.
This is a free, limited-credit hackathon prototype with explicit upper-body, lower-body, full-body and shoe category handling. Category support is not a promise of accurate fit, body proportions, size or fabric representation. No real-user impact study, broad garment validation, security certification or production-scale load test is claimed. Disclosure version: asshown-2026-10-20.