Privacy Policy

Custuni is operated by DOUBLE FISH TECHNOLOGY CO., LIMITED, a company registered in Hong Kong (“Custuni”, “we”, “us”). This policy explains what information we collect when you use custuni.com, the Custuni Shopify app and related services (the “Services”), how we use it, and the choices you have. Our customers are businesses and independent sellers (“Sellers”). We also process information about Sellers’ own customers (“End Customers”) so that we can produce and deliver their orders.

1. Information we collect

Account information. Your full name, email address and password (stored in hashed form). If you sign up with Google, we receive your name, email address and profile picture from Google.

Order and delivery information. Recipient name, phone number (optional), and shipping address, including country, state or region, city, postal code and address lines. If you choose to save an address, we keep it in your address book.

Design files and product content. Artwork, images and text you upload, and the product mockups we generate from them.

Payment information. Payments are processed by Stripe on its own secure checkout page. We do not receive or store your full card number or security code. We receive limited details from Stripe, such as payment status, amount, card brand and the last four digits. If you have a wallet balance, we keep a record of its transactions.

Connected store information. If you connect a Shopify store, we access the store data needed to run the Services: store name and domain, the products you publish through Custuni, and the orders that contain Custuni products, including End Customer names, shipping addresses, phone numbers and the items ordered.

Communications. Messages you send us by email, contact forms or WhatsApp, and the business information you provide in applications, such as your store URL and order volume.

Technical and usage information. IP address, browser and device type, pages viewed, referring website, campaign parameters (such as utm_source) and approximate location derived from your IP address. We collect this through cookies and similar technologies (see section 9).

2. How we use information

• To create and manage your account and keep you signed in.
• To produce, pack and ship orders, provide tracking, and handle quality claims and remakes.
• To generate mockups and product listings, and to publish products to your connected store at your request.
• To process payments, prevent fraud and keep the Services secure.
• To respond to questions and send service messages, such as order confirmations, shipping updates and policy changes.
• To understand how the Services are used and to measure and improve our advertising.
• To comply with legal, tax and accounting obligations.

We use your design files only to show your products in the Services and to manufacture your orders. We do not use them in our marketing, sell them or license them to others without your permission.

We do not sell personal information, and we do not use End Customer information for our own marketing.

3. How we share information

We share information only as needed to run the Services:

• Production partners. Partner factories receive design files, product specifications and order details needed to make each item.
• Shipping carriers and logistics providers. They receive recipient names, addresses and phone numbers to deliver orders. Packages ship without Custuni branding.
• Stripe processes payments.
• Google provides sign-in with Google and address suggestions. Text typed into the address search field is sent to Google to return suggestions.
• Cloudflare provides hosting, security and human verification on our sign-up and log-in pages.
• Shopify when you connect a store, under Shopify’s own terms and your authorization.
• Google Analytics, which receives technical and usage information as described in section 9.
• Hosting and infrastructure providers that store our data on servers located in the United States.
• Legal and safety reasons. When required by law, or to protect the rights, safety and property of Custuni, our users or others.
• Business transfers. If we are involved in a merger, acquisition or sale of assets, under confidentiality terms.

4. International transfers

We are based in Hong Kong. Our servers are located in the United States, and our production partners are in mainland China. Your information may be processed in countries other than where you live, which may have different data protection laws. Where required, we use appropriate safeguards for these transfers.

5. How long we keep information

We keep account information while your account is active. After you close your account, we delete or anonymize it within 30 days, except where we must keep it longer. Order, payment and tax records are kept for up to 7 years to meet legal and accounting requirements. Design files are kept while your products are active and deleted within 30 days after you delete them or close your account.

6. Security

We use encryption in transit (HTTPS), hashed passwords, access controls and trusted service providers to protect your information. No system is completely secure, so please keep your password confidential.

7. Your rights and choices

You can access and update your account details and saved addresses in your account settings. You may also ask us to provide a copy of your personal information, correct it, or delete it by emailing [email protected]. Depending on where you live, you may have additional rights, such as objecting to certain processing or lodging a complaint with a data protection authority. We will respond within 30 days.

End Customers who want to access or delete their information should contact the Seller they bought from. We will support Sellers in responding to these requests.

8. Shopify app data requests

When a Shopify store uninstalls the Custuni app, or when Shopify sends us a customer data request or deletion request, we act on it as required by Shopify. Store data is deleted within 48 hours after a shop data deletion request, except order records we must keep for legal reasons.

9. Cookies and similar technologies

We use cookies that are necessary to keep you signed in, remember your preferences and protect the Services. With Google Analytics, we also measure visits and understand how people find and use our site. Where required by law, we ask for your consent before using analytics cookies. You can block or delete cookies in your browser settings. Some parts of the Services may not work without necessary cookies.

10. Children

The Services are intended for businesses and are not directed to children under 16. We do not knowingly collect information from children.

11. Changes to this policy

We may update this policy from time to time. We will post the new version on this page and change the “Last updated” date. For significant changes, we will notify you by email or in the Services.

12. Contact us