DRAFT: REQUIRES LEGAL REVIEW BEFORE LAUNCH. Not legal advice.
Privacy Policy: Stilson Shirts
Stilson Shirts is operated by BaristaLabs LLC, the seller of record and the business responsible for your information, [ADDRESS]. Contact: sean@baristalabs.io. Last updated: [DATE]
What we collect
- Photos you upload and the designs generated from them.
- Order details: name, email, shipping address, phone (if you give it), what you ordered, and the proof you approved.
- Checks and logs: the result of the automated checks on your photo and designs (for example "rejected: person detected"), the rights confirmation you checked, your IP address and a session cookie (used for rate limits and fraud prevention), and basic technical logs.
- Payment: Stripe processes payments for BaristaLabs LLC. We receive confirmation that you paid, not your full card number.
How we use it
To check your photo, generate and preview your designs, make and ship your order, answer support requests, prevent fraud and abuse, and keep the records the law requires. We send order emails; marketing emails only if you opt in.
AI processing and training
Your photo is sent to our AI provider, fal.ai, to generate your designs, to remove the background and upscale the design for printing, and to run the automated safety checks. We never use your photos or designs to train AI models, and we don't let anyone else do so on our behalf. We ask our providers not to keep your images longer than they need to process them, where their terms allow.
Who we share it with
Only the service providers that run the shop:
- fal.ai: design generation, background removal, upscaling, and photo/design moderation.
- Printify and its print providers: your print file, name, and shipping address, to make and ship the order.
- Stripe: payment processing.
- Cloudflare: hosting and storage; Cloudflare Turnstile checks that you're not a bot before you generate designs and may process device and browser signals to do that.
- Email providers, for order emails.
BaristaLabs LLC also runs other storefronts on the same systems. Your information is kept separate per store and isn't used for those stores' marketing. We don't sell your personal information or share it for cross-context behavioral advertising.
How long we keep it
- Photos and designs you don't buy: deleted 7 days after upload.
- Photos, designs, and print files for orders: deleted 90 days after you pay. That covers delivery and the window for reporting a defect or a lost package, so we can still remake your order from the original design during that time.
- Photos rejected by our checks aren't stored; we keep only the check result.
- Order records (what you bought, what you paid, where it shipped): kept as long as tax and accounting law requires.
Your rights
You can ask to access, correct, or delete your personal information by emailing sean@baristalabs.io. Deleting the photo for an order that's in production may mean we can't remake it. [CCPA/CPRA and GDPR/UK GDPR sections, legal bases, and the right to complain to a regulator: counsel to complete.]
Security
Uploads are stored in private storage and shared with providers only through short-lived signed links.
Children
The site isn't directed to children under 13, and we don't knowingly collect their information.
Changes
We'll post any update here with a new date.