This Privacy Policy explains how Crew Shirts (“we,” “us,” or “our”) collects, uses, shares, and protects information about you when you visit our website at getcrewshirts.com, create an account, design or purchase apparel through our service, or otherwise interact with us. By using Crew Shirts, you agree to the practices described here.
We are operated by Crew Shirts, based in Louisville, Kentucky, United States.
1. Information we collect
We collect the following categories of information:
1.1 Information you give us
- Account details: your email address, name, and a password we store as a one-way hash.
- Design inputs: the business name, trade or category, phone number (when included), and any prompts or imagery references you provide to generate a design.
- Order details: shipping address, contact email, and shirt size and quantity selections.
- Payment information: processed by Stripe; we do not store full card numbers on our servers. We retain only the transaction reference IDs Stripe returns to us.
- Communications: messages you send us via email or forms.
1.2 Information we collect automatically
- Usage and device information: pages visited, links clicked, approximate location (derived from IP), browser and device type, and similar diagnostic data.
- Cookies and similar technologies:we use cookies for authentication and for product analytics. See “Cookies” below.
- Generated content: the AI-generated design files produced from your inputs are stored alongside the metadata used to create them.
2. How we use information
- To provide, operate, and improve the Crew Shirts service.
- To generate designs, fulfill orders, deliver physical apparel, and handle returns or support requests.
- To process payments, prevent fraud, and meet our tax and accounting obligations.
- To send you transactional emails (order confirmations, shipping updates, password resets) and, with your consent, occasional product updates or marketing emails. You can opt out of marketing at any time.
- To analyze how the service is used so we can improve it, debug issues, and prevent abuse.
- To comply with legal obligations and enforce our agreements.
3. How we share information
We do not sell your personal information. We share data only as described here, and only to the extent necessary for the services listed.
- Service providers: we share information with carefully selected vendors who help us operate the service:
- Stripe: payment processing
- Printful: apparel production and shipping
- Resend: transactional and marketing email delivery
- Supabase: database and authentication hosting
- Vercel: application hosting
- OpenAI and other AI model providers: generation of designs
- PostHog: product analytics
- Legal compliance: we may disclose information to comply with applicable law, court orders, or government requests, or to protect our rights, property, or safety, or that of others.
- Business transfers: if Crew Shirts is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.
4. AI-generated designs
When you use Crew Shirts to design apparel, your inputs (business name, prompts, imagery references) are sent to one or more AI providers to generate the design files. We retain the resulting designs in your account and use them to fulfill your orders. We may also use anonymized or aggregated data (never identifiable) to evaluate and improve our prompts and the quality of generated designs. Designs themselves remain associated with your account.
5. Your rights and choices
- Access, correction, and deletion: you can view and update most account information at any time from your account page. To request access to or deletion of other personal data we hold, contact us at [email protected].
- Marketing opt-out: every marketing email contains an unsubscribe link. Opting out of marketing does not stop transactional messages tied to your account or orders.
- California residents: if you are a California resident, you may have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect about you and the right to request deletion. Contact us to exercise these rights.
- EU and UK residents: if you are in the EEA or UK, you may have rights under the GDPR or UK GDPR including access, rectification, erasure, restriction, portability, and objection. Our current legal basis for processing is the performance of our contract with you and our legitimate interests in operating and improving the service.
6. Data retention
- Account and design data: retained while your account is active. Deleting your account removes your profile and designs within a reasonable period.
- Order records: retained for at least seven (7) years to meet tax and accounting requirements.
- Marketing data: retained until you unsubscribe or delete your account.
- Analytics data: typically aggregated; raw event data retained for up to 24 months.
7. Cookies and tracking
We use cookies and similar technologies that are strictly necessary for the site to function (authentication, security), and analytics cookies that help us understand how the site is used. You can control cookies through your browser settings, though doing so may affect site functionality.
8. Security
We use industry-standard measures including TLS encryption in transit, encryption at rest on our database provider, scoped access tokens, and the principle of least privilege for our internal staff. No method of transmission or storage is 100% secure, but we work hard to protect your information.
9. Children
Crew Shirts is not directed to children under 13, and we do not knowingly collect personal information from anyone under 13. If you believe a child has provided us information, please contact us so we can remove it.
10. International transfers
Our services are operated from the United States. If you use Crew Shirts from outside the U.S., your information will be transferred to and processed in the U.S., which may have data protection laws different from those of your country.
11. Changes to this policy
We may update this Privacy Policy from time to time. When we do, we will update the “Effective” date at the top and, for material changes, notify you by email or a notice on the site. Your continued use of Crew Shirts after a change means you accept the updated policy.
12. Contact us
If you have questions, requests, or concerns about this Privacy Policy or your data, please contact us at [email protected].