Privacy Policy

The data controller is Texhub LLC, 82 Wendell Ave. STE 100, Pittsfield, MA 01201, USA. For anything in this policy — including exercising your rights — contact admin@texhub.ai.

• —Account & profile data — name, email, password (hashed), role (brand/factory), company details, country, and contact numbers you provide.
• —Business content — design specs and tech packs, RFQs, quotes, orders, messages, and file attachments you upload or exchange.
• —Billing data — where you hold a paid agreement with us, the records relating to it. Any card details are collected and processed by our payment provider; we never store card numbers.
• —Usage & device data — log data, IP address, browser and device information, and pages/actions used, collected for security and to operate the Service.
• —Enquiry data — the name, work email, company, role, optional volume, and message you send through our contact form, kept so we can reply and keep a record of the conversation.
• —Waitlist data — name, email, and answers you submit through our waitlist form.

• —To provide the Service (contract performance) — accounts, matching RFQs to factories, delivering quotes and messages, processing orders, and administering any paid agreement you hold with us.
• —To respond to you (legitimate interests) — answering enquiries you send us through the contact form or by email.
• —To keep the platform safe (legitimate interests) — vetting factories, preventing fraud and abuse, securing accounts, bot protection on our public forms, audit logging.
• —To improve the product (legitimate interests) — understanding aggregate usage.
• —To communicate with you (contract / legitimate interests / consent) — service notifications, and product updates you can opt out of.
• —To comply with law (legal obligation) — tax, accounting, and lawful requests.

AI processing: when you use AI features (for example extracting a structured spec from an uploaded tech pack), the relevant content is processed by our AI providers to deliver that feature.

We share personal data only as needed to run the Service:

• —Counterparties on the platform — the point of Texhub: your RFQ content is shown to matched factories, quotes are shown to the requesting brand, and messages are shared with the conversation counterparty. Direct contact details are kept private and are not shown to counterparties.
• —Infrastructure providers — Supabase (database, authentication, file storage) and Google Cloud (application hosting).
• —Payment provider — where you hold a paid agreement, to process payments under it.
• —AI providers — to deliver AI features, as described above.
• —Cloudflare — Turnstile, the bot check that protects our sign-in, sign-up, password-reset, and contact forms. It is deliberately cookieless: it sets no cookie and does not track you across sites.
• —Form provider — Tally, for the pre-launch waitlist form.
• —Authorities — where required by law or to protect rights, safety, or the integrity of the Service.

We operate from the United States, and our providers may process data in the US and other countries. Where data of EU/UK residents is transferred internationally, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses (and the UK equivalents) or adequacy decisions.

Account and business content is retained while your account is active and for as long as needed to provide the Service to you and your counterparties. Log data is kept for a limited period for security. Enquiries sent through the contact form are kept while we are in conversation with you and for a reasonable period afterwards as a record of it; ask us and we will delete yours.

You can ask us to delete your account from Account → Security. We erase the data that identifies you: your name and contact details, your company name and website, and your login, which is closed permanently.

Your past orders, quotes and requests are kept. The brand or factory on the other side is a party to those records and needs them, and we are required to keep accounting records. Once your details are erased those records no longer identify you. How long they are kept is set by the legal, tax and dispute-resolution periods that apply to them, after which they are deleted.

Deletion requests are reviewed by our team before anything is erased, and we cannot accept one while an order is still in progress or under dispute, or while you still hold credit on your account — you will be told which of these applies. You can withdraw a request at any time before it is approved.

Data is encrypted in transit, access is role-restricted and enforced at the database layer (row-level security), files live in access-controlled storage, and we apply least-privilege principles internally. No system is perfectly secure — please use a strong, unique password.

Depending on where you live, you may have the right to access, correct, delete, receive a copy of, or restrict or object to the processing of your personal data, and the right to withdraw consent where processing is based on consent.

• —EU/EEA & UK (GDPR / UK GDPR): all of the above, plus the right to lodge a complaint with your supervisory authority (or the UK ICO).
• —California (CCPA/CPRA): the rights to know, delete, and correct, and the right to opt out of any “sale” or “sharing” of personal information as defined by the CCPA — exercisable at any time by emailing admin@texhub.ai. We do not discriminate against you for exercising your rights.
• —Other jurisdictions: we honour analogous rights under applicable local law.

Two of these you can exercise yourself, immediately, from Account → Security: Download my data gives you a machine-readable copy of the personal data we hold about your account, and Request account deletion starts the process described in section 06b.

For anything else, email admin@texhub.ai. We may need to verify your identity, and we respond within the timelines applicable law requires.

We use only essential cookies — the authentication/session cookies required to keep you signed in and the Service secure. We do not use advertising or cross-site tracking cookies. Because these cookies are strictly necessary, they do not require a consent banner under EU rules.

The Service is for business users aged 18 or over. We do not knowingly collect data from children; if you believe a child has provided us data, contact admin@texhub.ai and we will delete it.

We will update this policy as the product and law evolve. Material changes will be announced on the platform or by email; the date at the top reflects the latest revision.