Privacy Policy | Roblox Shirt Maker

Introduction

This Privacy Policy applies to Roblox Shirt Maker at rbxshirtmaker.com. This document explains how we collect, use, and protect your personal information when you use our services.

Information We Collect

We may collect the following types of information:

Personal Information: Name, email address, and contact details you provide when registering or contacting us.
Usage Data: Information about how you interact with our website, including pages visited and time spent.
Generation Data: Prompts, uploaded references, generated images or 3D files, and task status needed to provide AI generation and account history.
Account and Transaction Records: Sign-in identifiers, account settings, credit grants and usage, and any purchase identifiers, amounts and payment status when purchasing is enabled. We do not store full payment card numbers.
Support Records: Messages and information you provide in support, data-rights or content-report requests.
Device Information: Details about the device you use to access our services, such as IP address, browser type, and operating system.

How We Use Your Information

We use your information for the following purposes:

To provide and maintain our services
To notify you about changes to our services
To provide customer support
To gather analysis or valuable information to improve our services
To monitor the usage of our services
To detect, prevent, and address technical issues

You may request access to your personal data and a copy of it, correction of inaccurate or incomplete information, deletion of personal data, and closure of your account. Where applicable, you may also request a portable copy, restrict or object to processing, withdraw consent for processing based on consent, and complain to your local data protection authority. Withdrawing consent does not affect processing that was lawful before withdrawal.

View and correct your account information: sign in and open Settings → Profile to view your profile and update your name or avatar. Email support to request a copy of other personal data or correct information that cannot be edited there.
Delete personal data: email support and identify the data you want deleted, such as uploaded references or generated designs. You can also delete saved generation tasks through the available history controls. Deletion may be limited where retention is required for legal obligations, security or resolving disputes; we explain any applicable limitation.
Close your account: sign in, open Settings → Security, choose Delete Account, and confirm the warning. This is irreversible. If you cannot sign in or need help, request account closure by email. Account closure is separate from any billing or refund request; contact support about those issues as well.
Exercise other rights: email support with the right you want to exercise and enough information to identify the relevant data.

Send requests to support@rbxshirtmaker.com, preferably from your account email, with the subject "Personal data request". We may verify your identity to prevent unauthorized disclosure or deletion, asking only for information needed for that verification. Do not send passwords or full payment card details.

We respond to data-rights requests within 30 calendar days of receipt, subject to applicable law. If a legally permitted extension is necessary because of complexity or the number of requests, we notify you within that initial period, explain why and give the expected response date. Any shorter mandatory deadline takes precedence. If we cannot fulfill all or part of a request, we explain the reason and available complaint options. Legal, tax, fraud-prevention or dispute-related records may need to be retained even after account closure; retained records are limited to those purposes rather than ordinary use of a closed account.

AI Generation Data

When you request a generation, we process your prompt and relevant uploaded references and send them to the provider needed for that request. Clothing designs and concept images use OpenAI GPT Image 2 through KIE AI; 3D accessories use Tripo P2 by Tripo AI through fal.ai. We store task status and generated results to provide account history, downloads and support, subject to the applicable retention limits. Do not upload personal or confidential material you do not have permission to share. We also send prompts and relevant reference or output images/textures to Google Gemini 2.5 Flash-Lite through OpenRouter for automated safety checks. Moderation logs retain decisions, policy versions, task/account identifiers and content fingerprints without duplicating the raw prompts or images; they may be used to investigate misuse and appeals. Reported content and relevant task information may also be reviewed to investigate safety or rights complaints, as described in our Acceptable Use Policy.

Data Security

We implement appropriate security measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction.

Third-Party Services

We use Cloudflare Workers, D1 and R2 to host the service and store account, task and file data; Google for the available Google sign-in; KIE AI and fal.ai for the AI requests described above; OpenRouter and Google Gemini 2.5 Flash-Lite to screen prompts, reference images and generated images/textures for content safety; and our self-hosted Umami analytics service for website usage statistics. Waffo Pancake, our payment provider and merchant of record, receives your account identifier, email address, selected product and checkout context to process purchases and subscriptions. You provide payment and billing details directly to its hosted checkout; we receive order identifiers, amounts, currency and payment/subscription status to deliver credits and entitlements. Each service receives the information needed for its role.

We use prompts and uploads to provide your requested features, account history and support. This policy does not promise that third-party AI providers never retain or use data; their applicable terms and data practices govern their processing. Do not send sensitive information through a generation request. We may disclose relevant information when legally required or necessary to address fraud, security incidents or rights complaints.

Data Retention and Local Storage

Account information is retained while your account is active, subject to deletion requests and the legal exceptions described above. Generated server-side files follow the account's retention allowance: 7 days for Free, 30 for Lite, 90 for Pro, and 365 for Ultra. Expired files and related task data are cleaned up by scheduled maintenance; deletion is not guaranteed at the exact expiry second. Security, support and transaction records may be retained as necessary for legal obligations, fraud prevention or resolving disputes.

The editor also saves drafts and projects in your browser's local storage or IndexedDB. These local copies are separate from your account and are not automatically erased by deleting your server account. To remove them, use your browser's site-data controls for rbxshirtmaker.com. Clearing site data can permanently remove unsaved local work. Export any project you want to keep first.

Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page.

Contact Us

If you have any questions about this Privacy Policy, email support@rbxshirtmaker.com.