ClothifyInformation in this workspace
Optional dictation uses your browser speech service after you start it and grant microphone access. The browser provider may process audio; recognized text is editable and is never automatically submitted. We process the name and email you provide for an account, authentication records, your brand brief, product concepts, store settings and social drafts. Passwords are hashed by Better Auth. Authentication may also process session identifiers, IP addresses and browser information for account security. Google may share your profile information when you choose those sign-in methods after they are enabled.
Free-offer signups
If you reserve the 7-day $1 Studio offer, we save your email address, the offer, signup source, consent version and signup date in Cloudflare D1. We use this information to manage your reservation and contact you about this offer. This does not create an account, begin a trial or authorize a charge. Signup protection stores a rotating one-hour hash of your network address with an attempt count. Expired attempt records are removed when the endpoint is used again. To request access to or removal of your signup, contact team@clothify.io. We do not subscribe this list to unrelated marketing.
Google sign-in data
When you choose Sign in with Google, Clothify requests your basic identity through the openid, email and profile permissions. Google provides an account identifier, email address, email verification status, display name and profile picture where available. We use these details to create or find your Clothify account, authenticate you and display your account identity. We do not request access to Gmail, Google Drive, Google Calendar, contacts or YouTube. Google passwords are entered only on Google’s own pages and are not collected by Clothify.
How Google data is stored and shared
The hosted app stores Google account identity, provider authentication records and Clothify sessions in its Cloudflare D1 database. Cloudflare processes these records to host and secure the service. Google processes the sign-in request under its own privacy policy. Basic Google identity is not included in the brand brief sent to OpenAI for artwork generation. We do not sell Google user data, use it for advertising or share it with suppliers, social networks or domain services. Access is restricted to the authenticated account and service administration needed to operate and secure the app.
Why information is used
Account information is used to sign you in, keep your workspace private, save your work, take payments, fulfill orders, prevent abuse and support account recovery. We do not use it to serve advertising and we do not sell personal information. Where the law requires a legal basis, we rely on our contract with you, our legitimate interest in running and securing the service, your consent where we ask for it, and our legal obligations.
Where your work is stored
Accounts, workspaces, stores and orders are stored in Cloudflare D1, and images and other files in Cloudflare R2. Clothify is run from the United States, so your information may be processed there and in other countries where our providers operate. Reference files you attach stay in your browser until you start a design that uses them, and setup answers use browser storage until setup is finished.
Analytics and error monitoring
PostHog receives page views and time on page (the page address without search terms, codes or record IDs, the referring website, campaign tags, and browser, device and screen type), plus account, setup and checkout events and a browser identifier stored locally. When you are signed in, these events are linked to your account’s random ID, never your name or email, so we can see how people move through setup and checkout across visits and devices. PostHog is set to discard IP addresses and does not look up your location. Clothify also records page counts, active time and conversion events using a random browser-tab identifier. Landing page and headline tests use signed assignments. Analytics are on by default; you can turn them off at any time on the Cookie preferences page, and we honor the Global Privacy Control signal. These first-party analytics records expire after 90 days; they contain no form text, designs, email addresses or raw IP addresses. We do not send your design content or account email as event properties. Sentry receives redacted browser error details to help us fix problems. Error messages, request data and user details are removed before sending; the Sentry project is configured to prevent storage of IP addresses for new events. Google Analytics receives the same cleaned page addresses, the referring website, campaign tags, browser and device type, and coarse click, reading and checkout events. Google signals and advertising features are off, and Google Analytics does not store IP addresses. In the European Economic Area, the United Kingdom and Switzerland it uses no analytics cookies unless you turn analytics on on the Cookie preferences page. PostHog also records session replays: a rebuilt view of clicks, scrolling and what is shown on screen, so we can find bugs and confusing steps. Anything typed into a field is hidden, and account settings, billing, order, customer list, sign-in and checkout pages are not recorded. Replays are kept for 30 days, and PostHog’s automated review may look through them for errors and friction. In the European Economic Area, the United Kingdom and Switzerland replays start only after you turn analytics on on the Cookie preferences page. For each AI request PostHog receives the model, token counts, cost, timing and any error code, never your ideas, prompts or generated work. It also receives error types, stack traces and short error messages with emails, web addresses and long text removed, and server logs that contain only record IDs, counts and provider codes.
Providers and disclosure
We use these providers to run Clothify: Cloudflare for hosting and storage; Google for sign-in; OpenAI and Google Gemini to generate designs and text from your ideas and reference images; Stripe for subscriptions and store payments; Printful to produce and ship orders, which receives the design, garment and delivery details; Name.com to register domains, which receives the registrant details you enter; Resend to deliver account and store emails; and PostHog, Sentry and Google Analytics as described above. Store owners may add their own analytics or advertising tags to their stores. We share information with these providers only to deliver the service, and we may disclose information if the law requires it.
Additional contact emails
Settings lets you save up to five additional contact email addresses. These addresses are stored privately with your account in Cloudflare D1. Adding an address does not verify it, make it a sign-in alias or grant recovery access. You can ask for a link to verify your sign-in email; verifying confirms the address is yours and does not change how you sign in. Verification and password-reset messages require a configured email sender.
Your controls
Settings lets you download your saved workspace and delete your account and its associated workspace, studio artwork and approvals. Browser reference files can be removed from the draft or through browser site-data settings. Deleting an account does not clear files stored separately in your browser. For access, correction and deletion requests, contact team@clothify.io.
Managing Google access
You can revoke Clothify access from the third-party connections section of your Google Account. Revoking Google access prevents future Google-authorized access but does not itself delete a saved Clothify workspace or end an existing Clothify session. Sign out to end the active session. To delete a Google-only account, sign in again with Google, open Settings, choose Delete account and leave the email-account password blank. A recent sign-in is required. For help or other deletion requests, contact team@clothify.io. Account identity and saved workspace data are retained until account deletion. Backup and log retention is described below.
Retention and security
Saved workspace data stays until you delete it or your account. Authentication tokens expire. Deleting your account deletes your stores and their orders and customer records from Clothify. Stripe keeps payment and tax records and Printful keeps records of the orders it made, under their own policies, and brands keep their own sales records in their Stripe accounts. We keep a small billing record linking a deleted account to its Stripe customer so past charges and refunds can be checked. Backups and operational logs are kept for limited periods, generally no more than 90 days. Access to workspace data is checked against the signed-in account. No system can promise absolute security.
Age requirement
You must be at least 18 to use Clothify. We do not knowingly collect information from anyone under 18. If you believe someone under 18 has an account, contact team@clothify.io and we will delete it.
Changes and contact
Material changes to how we process information will be reflected in an updated policy, with notice where it is required. Clothify is operated by Austin Frankel, 15 Mark Drive, Rye Brook, NY 10573, United States. Support and privacy contact: team@clothify.io.