Privacy Policy · Texhub.AI

01Who is responsible

The data controller is Texhub LLC, 82 Wendell Ave. STE 100, Pittsfield, MA 01201, USA. For anything in this policy, including exercising your rights, contact admin@texhub.ai.

02What we collect

Account & profile data: name, email, password (hashed), role (brand/factory), company details, country, and contact numbers you provide.
Business content: design specs and tech packs, RFQs, quotes, orders, messages, and file attachments you upload or exchange.
Billing data: where you hold a paid agreement with us, the records relating to it. Any card details are collected and processed by our payment provider; we never store card numbers.
Usage & device data: log data, IP address, browser and device information, and pages/actions used, collected for security and to operate the Service.
Page view counts: we count page views on texhub.ai in our own database. A count holds the day, the page, the site that linked to it and the kind of device; it uses no cookie and holds no IP address or anything else that identifies you or your device.
Enquiry data: the name, work email, company, role, optional volume, and message you send through our contact form, kept so we can reply and keep a record of the conversation. When you write to us from your account (signed in on texhub.ai, or in the app), the message is sent with your account’s name, email, role and company and linked to your account, and our answers and your replies are kept with it as one conversation.
Browser notification data: if you turn on browser notifications on a device, the delivery address and encryption keys your browser gives us for that device, and the browser name, so we can send alerts there.
App notification data: if you turn on notifications in the Texhub app, your phone’s push token and whether it is an iPhone or an Android phone, so we can send alerts there.

03Why we use it (and the legal bases)

To provide the Service (contract performance): accounts, matching RFQs to factories, delivering quotes and messages, processing orders, and administering any paid agreement you hold with us.
To respond to you (legitimate interests): answering enquiries you send us through the contact form or by email.
To keep the platform safe (legitimate interests): vetting factories, preventing fraud and abuse, securing accounts, bot protection on our public forms, audit logging.
To improve the product (legitimate interests): understanding aggregate usage.
To communicate with you (contract / legitimate interests / consent): service notifications by email and in the app, browser notifications on devices where you switch them on (consent, which you withdraw by switching them off), and product updates you can opt out of.
To comply with law (legal obligation): tax, accounting, and lawful requests.

AI processing: when you use AI features (for example extracting a structured spec from an uploaded tech pack), the relevant content is processed by our AI providers to deliver that feature. When the Studio draws a garment, the request to OpenAI, with any photos it carries, may be stored by OpenAI so that an interrupted drawing can resume; a stored request is kept for OpenAI's retention period.

04Who we share it with

We share personal data only as needed to run the Service:

Counterparties on the platform: the point of Texhub: your RFQ content is shown to matched factories, quotes are shown to the requesting brand, and messages are shared with the conversation counterparty. A factory matched to a brand, in a conversation with it or making its order also sees the brand’s name, country, website and the month it joined, and that brand sees the factory’s name, country, website and the month it joined. Direct contact details are kept private and are not shown to counterparties.
Infrastructure providers: Supabase (database, authentication, file storage), Google Cloud (application hosting) and Resend (email delivery: sign-in codes, account notices and notifications).
Payment provider: where you hold a paid agreement, to process payments under it.
AI providers: to deliver AI features, as described above. OpenAI's models power the Studio's assistant and drawings, and fal and Replicate run its image models. Requests to OpenAI's models may instead go through provider.texhub.ai, an OpenAI-compatible gateway, to the providers behind it.
Cloudflare: its network sits in front of texhub.ai, delivers the website and blocks attacks on it; to do that it sees each request, including your IP address. It also runs Turnstile, the bot check that protects our sign-in, sign-up, password-reset, and contact forms, on the website and in the app. Cloudflare sets no cookie, and Turnstile does not track you across sites.
Browser push services: if you turn on browser notifications, they are delivered through your browser maker’s push service (for example Google for Chrome, Mozilla for Firefox, Apple for Safari). Each alert is encrypted end to end under the Web Push standard, so the push service cannot read it. You can turn them off at any time in Account → Notifications or in your browser.
Expo: if you turn on notifications in the Texhub app, they are delivered through Expo’s push service, which passes them to Apple’s or Google’s. Each alert says only what your Texhub inbox shows, the kind of event and a link, never a message’s text. You can turn them off in the app or in your phone’s settings.
Authorities: where required by law or to protect rights, safety, or the integrity of the Service.

05International transfers

We operate from the United States, and our providers may process data in the US and other countries. Where data of EU/UK residents is transferred internationally, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses (and the UK equivalents) or adequacy decisions.

06How long we keep it

Account and business content is retained while your account is active and for as long as needed to provide the Service to you and your counterparties. Log data is kept for a limited period for security. Enquiries sent through the contact form, and messages you send us from your account with our answers to them, are kept while we are in conversation with you and for a reasonable period afterwards as a record of it; ask us and we will delete yours. A browser notification address is kept until you turn notifications off on that device, your browser withdraws the address, or your account is deleted. A phone’s push token is kept until you sign out of the app on that phone, the token stops working, or your account is deleted.

06bWhat happens when you delete your account

You can ask us to delete your account from Account → Security. We erase the data that identifies you: your name and contact details, your company name and website, and your login, which is closed permanently. The messages you sent us are deleted, both those from your account, with our answers to them, and contact-form enquiries sent with your account’s email address.

Your designs are deleted when the request is approved. That is every project you own in the Studio, with its files, chat, references and history, your brand kit and your saved shapes. People you shared a project or a shape with lose it, and your access to projects and shapes others shared with you ends; what you added to someone else’s project stays with their project. A tech pack you sent from the Studio that no request was opened on is deleted too.

Your past orders, quotes and requests are kept, with their tech packs, messages and files. The brand or factory on the other side is a party to those records and needs them, and we are required to keep accounting records. Once your details are erased those records no longer identify you. How long they are kept is set by the legal, tax and dispute-resolution periods that apply to them, after which they are deleted, files included.

Deletion requests are reviewed by our team before anything is erased, and we cannot accept one while an order is still in progress or under dispute, or while you still hold credit on your account. You will be told which of these applies. You can withdraw a request at any time before it is approved.

07Security

Data is encrypted in transit, access is role-restricted and enforced at the database layer (row-level security), files live in access-controlled storage, and we apply least-privilege principles internally. The links and codes we email to confirm an address, sign you in, or reset or change your password expire after 15 minutes, and each code is 10 digits. No system is perfectly secure, so please use a strong, unique password.

08Your rights

Depending on where you live, you may have the right to access, correct, delete, receive a copy of, or restrict or object to the processing of your personal data, and the right to withdraw consent where processing is based on consent.

EU/EEA & UK (GDPR / UK GDPR): all of the above, plus the right to lodge a complaint with your supervisory authority (or the UK ICO).
California (CCPA/CPRA): the rights to know, delete, and correct, and the right to opt out of any “sale” or “sharing” of personal information as defined by the CCPA, exercisable at any time by emailing admin@texhub.ai. We do not discriminate against you for exercising your rights.
Other jurisdictions: we honour analogous rights under applicable local law.

Two of these you can exercise yourself, immediately, from Account → Security: Download my data gives you a machine-readable copy of the personal data we hold about your account, the messages you sent us from it and our answers to them included, and Request account deletion starts the process described in section 06b.

For anything else, email admin@texhub.ai. We may need to verify your identity, and we respond within the timelines applicable law requires.

09Cookies

We use only essential cookies: the authentication/session cookies required to keep you signed in and the Service secure. We do not use advertising or cross-site tracking cookies. Because these cookies are strictly necessary, they do not require a consent banner under EU rules.

10Children

The Service is for business users aged 18 or over. We do not knowingly collect data from children; if you believe a child has provided us data, contact admin@texhub.ai and we will delete it.

11Changes

We will update this policy as the product and law evolve. Material changes will be announced on the platform or by email; the date at the top reflects the latest revision.