Privacy Policy
Last updated: June 17, 2026
ShirtDroid is a trade name of Bright City Labs, LLC ("ShirtDroid," "we," "us," or "our"). This Privacy Policy explains what information we collect when you use shirtdroid.com (the "Site") and our custom-product service, how we use it, who we share it with, and the choices you have. We've tried to write it in plain English.
If you have any questions, contact us through our contact form or by mail at Bright City Labs, LLC, 1811 Sardis Rd N, Ste 218, PMB 415, Charlotte, NC 28270.
1. Information we collect
When you use ShirtDroid, we collect:
- The photo you upload. To create your product, you upload a photo. That image is the heart of what we do, and we treat it carefully — see Sections 4 and 5.
- The design we generate. The artwork our system creates from your photo and prompt.
- Contact and order details. Your name, email address, and shipping address, plus what you ordered and your order history.
- Payment information. Your payment is processed by Stripe. We never see or store your full card number — Stripe handles that directly. We receive confirmation of payment and your billing/shipping address for tax and fulfillment.
- Basic technical data. Like most websites, our servers automatically record limited technical information (such as IP address, browser type, and pages visited) to keep the Site running and secure.
2. How we use your information
We use your information to:
- create your custom design and produce and ship your order;
- process payments and calculate any applicable sales tax;
- send you order-related emails (confirmations, shipping updates, and support replies);
- respond to your questions and handle returns or claims;
- keep the Site secure and working properly; and
- meet our legal, tax, and accounting obligations.
We do not sell your personal information, and we do not share it for cross-context behavioral advertising.
3. The photo you upload
The photo you upload often shows an identifiable person — and our service explicitly supports photos that include children. Because of that, we ask you (in our Terms and at the moment you upload) to confirm that you own or have permission to use the photo, that any person shown has consented, and that if a child is shown, you are that child's parent or legal guardian or have the guardian's permission. Please don't upload a photo of someone else without their permission.
4. How AI processes your photo
Your design is created using artificial intelligence. Here is exactly what that means for your photo:
- Which AI services see your photo. To generate your design, your uploaded photo is sent to OpenAI and/or Google's paid AI services. These are the only AI providers that receive your original photo.
- No training on your photo. We use these providers' paid, business-grade API services, which do not use the content you submit to train or improve their AI models.
- No facial recognition. Our system uses AI to generate artwork from your photo. It does not perform facial recognition, create a faceprint or other biometric identifier, or attempt to identify who is in the photo.
- The generated design. After your design is created, the design itself (not your original photo) may be processed by a separate image-processing service to clean up its background and increase its resolution for printing. That service does not receive your original photo.
5. Who we share information with
We don't sell your data. We do share specific information with the trusted service providers that make our service work, and only as needed to do their job. We name the providers that handle your photo, so you know exactly where it goes — the rest are described by the role they play.
| Who | What they handle | What they receive |
|---|---|---|
| OpenAI and Google | AI design generation | Your uploaded photo and prompt |
| Cloudinary | Image storage and processing | Your photo and the generated design |
| An image-processing service | Cleaning up and upscaling the finished design for print | The generated design (not your photo) |
| A production & fulfillment partner | Printing and shipping your order | Your name, shipping address, and the print-ready design (not your photo) |
| Stripe, our payment processor | Processing payment and sales tax | Your name, billing/shipping address, and payment details |
| An email provider | Sending order and support emails | Your name and email address |
| A hosting provider | Running our website and database | Order data stored on our behalf |
We may also disclose information if required by law, to enforce our Terms, or to protect the rights, safety, and property of ShirtDroid, our customers, or others.
6. How long we keep your information
- Your uploaded photo is deleted within 90 days after your order is fulfilled (or sooner if you ask us to delete it). We keep it for that limited window to produce your order and handle any quality issues.
- The generated design is kept longer so that you can reorder it or put it on other products.
- Order and transaction records (name, address, what you bought, payment confirmation) are kept for approximately 7 years to meet tax and accounting requirements.
You can ask us to delete your information earlier — see Section 8.
7. Children's data
ShirtDroid is intended for adults (18+). We do not knowingly collect personal information directly from children under 13. When a photo includes a child, we rely on the adult customer's confirmation that they are the child's parent or legal guardian or have the guardian's permission, as described in Section 3 and our Terms.
8. Your privacy choices
No matter where you live, you can ask us to:
- access the personal information we hold about you;
- correct information that's wrong;
- delete your information, including your uploaded photo and design (subject to records we must keep for legal and tax reasons).
To make a request, contact us through our contact form. We'll respond as required by law and won't discriminate against you for exercising these rights.
We do not sell or share your personal information. California's privacy law (the CCPA/CPRA) does not currently apply to a business of our size, but we extend the core rights above to everyone as a matter of good practice. If you visit our Site from the European Economic Area or the UK, you also have rights under the GDPR (access, correction, deletion, restriction, portability, and objection); contact us as described above to exercise them.
9. Security
We use reasonable technical and organizational measures to protect your information, and we work with established providers (listed in Section 5) that maintain their own security programs. Payment card data is handled entirely by Stripe, a PCI-compliant payment processor — we never store it. No method of transmission or storage is 100% secure, but we take protecting your information seriously.
10. Changes to this policy
We may update this Privacy Policy from time to time. When we do, we'll change the "Last updated" date above and, where appropriate, let you know. Your continued use of ShirtDroid after an update means you accept the revised policy.
11. Contact us
Bright City Labs, LLC (dba ShirtDroid) 1811 Sardis Rd N, Ste 218, PMB 415 Charlotte, NC 28270 Contact us