T-Shirt Designer (“the app”) is a Shopify app made by Custom DTF. It lets a store’s customers design garments on the store’s product pages and turns their orders into print files. This policy explains what the app collects, why, who else handles it, how long it is kept and how to have it deleted. The store that installed the app (“the merchant”) decides how the app is used in their store; for anything about a store’s own handling of your data, contact that store.
What we collect
From merchants
- The store’s Shopify domain, currency and language, and the access token Shopify issues when the app is installed.
- What the merchant sets up in the app: blank products and their photos, print areas, colours, sizes, prices and discounts, Library images and categories, settings (logo URL, accent colour, blocked words, gang sheet sizes).
- Billing state from Shopify (plan, trial, billing cycle) and the per-order usage records the app creates.
From the store’s customers
- Designs: images customers upload, text they type, AI prompts and the images generated from them, and the finished design with its previews.
- Identifiers: the Shopify customer ID when the customer is signed in to the store, otherwise a random session ID. The designer itself does not ask for names, email addresses, phone numbers or postal addresses.
- Orders: when a designed item is ordered, Shopify sends the order to the app. We keep the order number and ID, the customer’s name, the designed line items (design, size, colour, quantity, price) and the print files and gang sheets we produce from them. The name is printed on the order’s gang sheet and shown to the merchant next to the order, so the print room can match each film to its parcel. Other order details Shopify includes (such as the customer’s email, phone or address) are not stored.
- Technical data: the IP address, used only for a few minutes to limit abusive request rates, and usage events from the designer (for example “design added to cart”) recorded against the store, not the person.
On the customer’s own device
The designer keeps the last design, chosen product and colour, recent uploads and AI images in the browser’s local storage so work is not lost on a reload. It never leaves the device unless the customer adds the design to the cart or shares it. The designer sets no advertising or tracking cookies.
Why we use it
- To run the designer, price designs and add them to the store’s cart.
- To produce print-ready files and gang sheets for orders, and to show them to the merchant.
- To check that the price charged at checkout is the one the app calculated.
- To bill the merchant through Shopify for their plan and usage.
- To keep the service secure and working (rate limiting, error reports).
We do not sell personal data, use it for advertising, or build profiles of customers.
Who else handles it
- Shopify — the platform the app runs on, including checkout and billing.
- Our hosting provider — runs the app and its database.
- Cloudflare R2 — stores uploaded images, previews, print files and gang sheets.
- OpenAI — only when the merchant has AI designs switched on and a customer uses them: the prompt (and a reference image if the customer adds one) is sent to generate the image.
- removal.ai — only when a customer uses “Remove background”: that image is sent to have its background removed.
- Sentry — error reports from our servers, which may include technical request details.
Merchants accept our Terms of Service and Data Processing Addendum before using the app; under it we process their customers’ data only on their instructions. These providers process the data on our behalf and only for the purposes above. Some of them process data outside the European Economic Area; where they do, transfers rely on the safeguards they offer, such as standard contractual clauses.
How long we keep it
Data is deleted automatically after these periods (a scheduled job enforces them):
- Designs that were never ordered — uploads, AI images, drafts, unpurchased designs, previews and share links: 30 days.
- Print files and gang sheets: 90 days after the order (the design is kept, so they can be made again).
- Ordered designs, the images they use, and order line records: 12 months after the order.
- Designs a customer saved to their account, and the images they use: 12 months after they were last saved, or as soon as the customer deletes them.
- Activity log: 180 days.
- Rate-limit records (keyed hash of the IP, never the address): minutes.
- Everything held for a store: 48 hours after the app is uninstalled.
- Daily database backups, encrypted with AES-256: 30 days — data deleted from the app is gone from the backups 30 days later.
Error reports follow Sentry’s retention. Data the merchant sets up in the app (products, Library, settings) is kept while the app is installed.
Your rights
Customers can ask the store they bought from to see, export or delete their data. Shopify forwards those requests to the app: for a data request we assemble everything we hold for that customer and give it to the merchant; for a deletion request we erase the customer’s uploads, designs, drafts, previews, print files and gang sheets for the orders named. Merchants can ask us the same for their store at any time. Depending on where you live you may also have the right to object to or restrict processing and to complain to your data protection authority.
Security
Data travels over HTTPS. Stored files are kept in private storage and print files are reached through signed links. Access tokens and signing keys stay on our servers; the price-signing key is stored in the store as app-owned data that the storefront cannot read.
Children
The app is a tool for merchants and is not directed at children.
Changes and contact
We will update this page when the app’s data handling changes; the date at the top shows the latest version. Questions or requests: support@customdtf.com.
Custom DTF, 11725 Cloverland Ct Suite A, Baton Rouge, Louisiana 70817, United States.