Privacy Policy

Fabcrush is operated by Art Formula Consulting SL, registered at Son Mas 1, Andratx, Spain

For privacy questions, contact us at legal@fabcrush.com

We collect information you provide directly to us and information we gather automatically when you use our services:

Information You Provide

• Name, email, phone (optional)
• Delivery details: name, address, phone, order content and customizations
• For creators: IBAN, KYC data for commissions
• Correspondence and attachments in support
• Creative content (designs, titles, tags)

Collected Automatically

• IP address, device/browser, pages viewed, clicks, feature usage and bookmarks
• Cookies: essential (for cart, payment, security) and analytics with consent

From Third Parties

• Payment status and identifiers from Stripe, shipping from Econt, events and metrics from WooCommerce and Mixpanel

We use the collected information for the following purposes:

Where we rely on consent (e.g., analytics cookies), you can grant or withdraw it at any time (see Cookies).

Accounts: All users may create an account.

Purchasing: Guest checkout may be used under guardian supervision.

Payouts: Only 18+ are eligible to request or receive commission payouts; under-18 publishers may accrue pending commissions until eligible.

We use cookies and similar technologies to enhance your experience:

• Essential cookies: Required for core functions (cart, checkout, security, session)
• Analytics cookies: Mixpanel (page views, feature usage, funnels). Loaded only with consent

Manage your preferences any time via fabcrush.com/cookie-settings. We obtain and store consent using our custom banner.

Designs you generate or upload are treated as Your Content. You decide whether to keep them private for your own order or publish them to the marketplace.

We process your prompts/outputs to provide the tool and fulfill orders.

You must not use the AI or upload content that infringes rights or violates our policies.

For moderation and security, we may review content flagged by our systems or reported by others.

We share data only as needed to provide our services, comply with law, or protect our rights.

• Processors (acting on our instructions): Stripe (payments & commission payouts; Stripe Connect KYC)
• Other recipients (where applicable): Manufacturing supplier (order fulfillment information)
• We do not sell your personal data.

We primarily host and process data in the EU. If data is transferred outside the EEA (e.g., to service providers in countries without an adequacy decision), we use Standard Contractual Clauses (SCCs) and implement additional safeguards where appropriate. You can request a copy of relevant SCCs via legal@fabcrush.com.

We keep data only as long as necessary for the purposes set out above, and to meet legal, tax, and accounting requirements:

• Orders & invoices: 10 years
• Publisher commissions & payouts: 10 years
• Accounts: Life of account + 24 months (then anonymized or deleted)
• Analytics data (Mixpanel): 24 months (or earlier if consent is withdrawn)
• Support tickets: Typically 24 months after closure (unless needed longer for disputes)

Where law requires longer retention, we follow the statutory period.

We use technical and organizational measures to protect your data, including HTTPS/TLS encryption in transit, access controls, least-privilege practices, and vendor due diligence.

No method is 100% secure; we maintain and improve safeguards over time.

Subject to legal limits, you have the right to:

• Access your data and obtain a copy
• Rectify inaccurate or incomplete data
• Erase your data ("right to be forgotten")
• Restrict or object to certain processing
• Port data you provided to us in a structured, commonly used, machine-readable format
• Withdraw consent where processing is based on consent (e.g., analytics cookies)
• Not be subject to decisions based solely on automated processing that produce legal or similarly significant effects (we do not make such decisions)

To exercise your rights, contact legal@fabcrush.com. We may need to verify your identity. We respond within one month (extendable by two months for complex requests, with notice).

We currently use your email for transactional and service communications (orders, updates, policy notices). If we introduce marketing emails, we will obtain your opt-in consent and provide an unsubscribe option in every message.

You can lodge a complaint with your local data protection authority. Our lead authority is likely in Spain (AEPD) given the controller's registration. You may also contact the Bulgarian authority (CPDP) if you reside in Bulgaria. We encourage you to contact us first at legal@fabcrush.com so we can address your concerns.

We may update this Policy from time to time. We will post the new version with the "Last updated" date and, if changes are material, provide additional notice (e.g., banner or email).