Privacy Policy

Information we collect

• Account info: name, email, phone, business/shop details, and login credentials, managed by Supabase Auth. We never see or store your raw password.
• Order data synced from Shopify: customer name, email, phone, shipping address, and order/line-item contents.
• Uploaded content: artwork files, design mockups, and product photos you upload to build products or fulfill orders.
• Production and business data: blank/garment selections, pricing, proof approvals, tracking numbers, invoices, and messages exchanged between a shop and its factory.
• Payment information: handled directly by Stripe. We never receive or store your full card number, bank account number, or other raw payment credentials.
• Basic technical data: IP address, browser type, and pages visited, used only for security and diagnosing problems.

How we use it

Solely to operate the platform: routing orders to production, generating invoices and payouts, sending status/SLA/payment notifications, displaying order status to shop owners and their customers, and providing customer support when you contact us.

AI and automated processing

Some features use third-party AI-based automated processing rather than a human reviewing your content. Today that means: optional artwork vectorization (converting a raster image to a vector file via a third-party AI image-processing service) when you choose to use it. We do not use your uploaded content to train any AI model, ours or a third party's. If we add AI-based features that go further than automated image/file processing, we'll update this section first.

Who we share it with

Service providers acting on our behalf, each only for their specific function: Shopify (order sync), Supabase (database and file storage), Vercel (hosting), Resend (transactional email), Stripe (payments and payouts, once a factory connects an account), and, where a factory has configured them, Vectorizer.ai (AI artwork vectorization), Twilio (SMS), Invoice2go (invoicing), and Uber Direct (delivery quotes). A shop's order and artwork data is also shared with the specific factory(ies) that shop connects to, since that's required to produce and ship the order. We do not sell your data to anyone, and we do not share it for advertising purposes.

How your files are stored

Uploaded artwork, mockups, and design files are stored in cloud storage (Supabase) under randomly-generated file paths that aren't published, linked from any public page, or indexed by search engines. Access in practice is limited to your own account and the factory fulfilling your order. We are actively working to move all uploaded files to fully access-controlled storage (requiring an authenticated, authorized request for every file, with no exceptions); until that work ships, treat any file URL as something you shouldn't share outside people who should see it.

Retention and deletion

Order and account data is retained for as long as your account is active, plus a reasonable period for tax/accounting records. You can delete individual uploaded artwork files yourself at any time from within the product builder. For full account data deletion, email contact@tesuko.dev. We'll delete your account data, including uploaded content, within 30 days, subject to records we're legally required to keep (e.g. completed order/tax records).

Children's privacy

TESUKO is a business tool for shop owners and fulfillment factories. It is not directed at, and we do not knowingly collect information from, anyone under 16.

International transfers

Our infrastructure providers (Supabase, Vercel) may process and store data in the United States or other countries where they operate. By using TESUKO you consent to this transfer.

Your Privacy Choices (California residents)

TESUKO does not sell or share personal information for cross-context behavioral advertising, so there is nothing to opt out of on that front. California residents still have the right to know what personal information we hold, request a copy of it, request correction or deletion, and not be discriminated against for exercising these rights. To exercise any of these, contact us below with "CCPA request" in the subject line. We'll respond within the timeframe required by law.

Changes to this policy

If we make a material change to how we handle your data, we'll update the date at the top of this page and, where required, notify you directly.

Contact

Questions, requests, or full data deletion: contact@tesuko.dev.