These terms are an agreement between Custom DTF (“we”) and the business that installs T-Shirt Designer (“the app”) on its Shopify store (“you”). You accept them in the app before using it. Part B, the Data Processing Addendum, governs the personal data of your customers that the app processes for you. The privacy policy describes the same processing for everyone else.
Part A — Terms of Service
1. The service
The app lets your customers design products on your store, prices those designs, and turns orders into print files and gang sheets. We may improve or change features; we will not remove core functions you pay for without notice.
2. Plan and billing
The plan and any usage fees are shown on the app's Plan & billing page and charged by Shopify on your Shopify bill. You can cancel at any time by uninstalling the app; Shopify handles any proration under its own rules.
3. Your responsibilities
- You are responsible for the products you sell and for having the rights to the designs, images and fonts you add to the app (for example in the Library).
- You are responsible for your relationship with your customers, including your own privacy notice, and for content your customers submit through your store. Use the app's blocked-words setting and review orders as your business requires.
- You will not use the app to process unlawful content or to infringe anyone's rights.
4. Availability and liability
We run the app with reasonable care but cannot promise it will be uninterrupted or error-free; check print files before production. To the extent the law allows, our total liability for any claim relating to the app is limited to the fees you paid us in the three months before the claim, and neither party is liable for indirect or consequential loss. Nothing here limits liability that cannot be limited by law.
5. Ending the agreement
You may stop at any time by uninstalling the app. We may suspend the service for non-payment or misuse after notice. On uninstall, your data is deleted as described in Part B.
6. Changes
When these terms change in substance we publish a new version here and ask you to accept it in the app.
Part B — Data Processing Addendum
1. Roles
For the personal data of your customers and store visitors processed through the app, you are the controller and we are your processor. We process that data only on your documented instructions, which are these terms and the way you configure and use the app.
2. Subject matter, nature, purpose and duration
- Purpose: running the designer on your store, pricing designs, producing print files and gang sheets for your orders, verifying checkout prices, and billing you through Shopify.
- Data subjects: your customers and visitors who use the designer.
- Personal data: designs (uploaded images, text, AI prompts and generated images), the Shopify customer ID of signed-in customers or a random session ID, order numbers, the ordering customer’s name (printed on the order’s gang sheet) and the designed line items, and technical data (a keyed hash of the IP address for rate limiting). We do not store customer email addresses, phone numbers or postal addresses.
- Duration: while the app is installed, subject to the retention periods below.
3. Retention
- Designs that were never ordered — uploads, AI images, drafts, unpurchased designs, previews and share links: 30 days.
- Print files and gang sheets: 90 days after the order (the design is kept, so they can be made again).
- Ordered designs, the images they use, and order line records: 12 months after the order.
- Designs a customer saved to their account, and the images they use: 12 months after they were last saved, or as soon as the customer deletes them.
- Activity log: 180 days.
- Rate-limit records (keyed hash of the IP, never the address): minutes.
- Everything held for a store: 48 hours after the app is uninstalled.
- Daily database backups, encrypted with AES-256: 30 days — data deleted from the app is gone from the backups 30 days later.
4. Confidentiality and security
Only people who need access to run the service have it, and they are bound to confidentiality. Data travels over HTTPS; stored files are kept in private storage encrypted at rest and reached through signed links; access tokens and signing keys stay on our servers.
5. Sub-processors
We use Shopify (platform and billing), our hosting provider (application and database), Cloudflare R2 (file storage), OpenAI (AI images, only when you switch AI on and a customer uses it), removal.ai (background removal, only when used) and Sentry (error reports). We impose data protection obligations on them that are no less protective than these terms, and we will update this list before adding a new sub-processor; you may object by uninstalling the app.
6. International transfers
Where personal data is transferred outside the European Economic Area, the UK or Switzerland, the transfer relies on an adequacy decision or the standard contractual clauses offered by the sub-processor.
7. Data subject requests
Shopify passes your customers' access and erasure requests to the app. For an access request we assemble what we hold for that customer for you to hand over; for an erasure request we delete the customer's uploads, designs, drafts, previews, print files and gang sheets for the orders named. We will help you answer other requests within the limits of what the app holds.
8. Personal data breaches
We will tell you without undue delay, and where feasible within 72 hours, after becoming aware of a personal data breach affecting your data, with the information you need to meet your own obligations.
9. Deletion at the end
When you uninstall the app, Shopify asks us to erase your store's data 48 hours later and we delete everything we hold for your store, including stored files.
10. Information and audits
On reasonable request we will provide the information needed to demonstrate compliance with this addendum.
Contact
Questions about these terms or a data protection request: support@customdtf.com. Custom DTF, 11725 Cloverland Ct Suite A, Baton Rouge, Louisiana 70817, United States.