How Texhub protects your data

Who can see what

• Access enforced in the databaseRow-level security in the database decides who can read or change each record, not only the screens you see. A brand sees its own RFQs, quotes and orders; a factory sees the RFQs it is matched to and its own quotes.
• Contact details stay privateBrands and factories never see each other's email address or phone number. They talk in Texhub's conversations.
• Admin accessTexhub's admins can read marketplace records to review factories, resolve disputes and answer support. Resolving a dispute and setting a user's password are written to an audit log, and the people affected are emailed.

How data is kept

• Encrypted in transit and at restEvery connection uses HTTPS, and browsers are told never to use plain HTTP for texhub.ai. Our hosting providers encrypt stored data at rest.
• Private file storageUploaded files are kept in private storage, never at a public address. A file opens through a signed link that expires; on texhub.ai, links to RFQ files, message attachments and order photos last an hour at most.
• Locked-down pagesEvery page sends a Content Security Policy with a fresh nonce for each request. Scripts run only from Texhub and Cloudflare's bot check, and no other site can show Texhub in a frame.

Accounts and sign-in

• Bot checksSign-up, sign-in, password reset and the contact form run Cloudflare Turnstile, which sets no cookie.
• Sign-in limitsFailed sign-ins are limited per account and per network, so passwords cannot be guessed at speed. If a limit cannot be checked, the sign-in is refused.
• PasswordsPasswords are stored hashed by our sign-in provider, never in plain text. A new password is checked against known data breaches, and you are warned if it appears in one.
• Sign out everywhereSettings, under Security, has Sign out of every device, which ends every session at once.

Privacy

• No trackersEssential cookies only, the ones that keep you signed in. Page views are counted without any cookie or identifier.
• Your data on requestDownload a copy of your data from Settings, under Security. Deleting an account is a request our team reviews, then a scrub of what identifies you and the deletion of your Studio projects.

Where your data is hosted

In the United States, in Oregon.

Requests to texhub.ai pass through Cloudflare's network, which delivers the site and blocks attacks. Other providers, such as our AI providers and Cloudflare's bot check, process data only as needed for their part of the service.