Privacy Policy
Last updated: June 26, 2026
This page is available in English only.
1. Scope & who we are
This Privacy Policy explains how Conjure (“Conjure,” “we,” “us,” or “our”) collects, uses, shares, and protects personal information when you use our website at shopconjure.com and related services (collectively, the “Service”). Conjure is an AI fashion marketplace that lets people generate original designs and order made-to-order, print-on-demand apparel, and that lets creators publish designs for others to buy. Conjure is operated from the Province of Ontario, Canada. The legal entity responsible for your information is [Registered entity & mailing address — to be added upon incorporation]. We handle personal information in accordance with Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable Ontario law, and, where they apply to you, the EU General Data Protection Regulation (GDPR) and the UK GDPR. This Service is intended for adults; see Section 11.
2. Data we collect
We collect: (a) Account data — the email address and username you provide when you sign up, and authentication metadata. (b) Content you create — the prompts and questionnaire answers you submit, the AI-generated designs you produce, and any reference photos you upload to guide a generation. (c) Order and shipping data — items ordered, the shipping name, address, and contact details needed to fulfill and deliver your order, and order history. (d) Payment and payout identifiers — limited transaction details and identifiers handled by our payment processor; we do not store full card numbers on our systems. (e) Creator data — published designs, sales activity, and the credit balance accrued to your account. (f) Usage and analytics data — device, browser, pages viewed, and interactions, collected to operate and improve the Service. (g) Cookies and similar technologies — see Section 7. Prices, payouts, and creator credit are denominated in Canadian dollars (CAD).
3. How we use your information
We use personal information to: operate the marketplace and your account; generate and display designs from your prompts and reference photos; manufacture, fulfill, and ship your orders; process payments and accrue creator credit (see Section 5 below and our Terms); prevent fraud, abuse, and intellectual-property infringement, and enforce our policies; provide customer support; send transactional and service messages; and analyze and improve the Service. Where the GDPR or UK GDPR applies, our legal bases are: performance of a contract with you (creating your account, generating designs, and fulfilling orders); our legitimate interests (securing the Service, preventing abuse, understanding usage, and improving our products) balanced against your rights; your consent (for example, certain analytics or optional communications, which you may withdraw at any time); and compliance with our legal obligations (such as tax, accounting, and responding to lawful requests).
4. Service providers we share with
We share personal information only as needed with vetted service providers (processors) that help us run the Service: Vercel and Supabase (hosting, database, and infrastructure); OpenAI (AI image generation via GPT Image, which processes your prompts and uploaded reference photos to create designs); Stripe (payment processing via Stripe Checkout and Stripe Connect, including handling of payment and payout identifiers); Printful (print-on-demand manufacturing and fulfillment, which receives the design and the shipping details needed to make and deliver your order); Resend (transactional email delivery); and PostHog (product analytics). These providers may process information only on our instructions and for the purposes described here. We may also disclose information when required by law, to protect our rights or users’ safety, or in connection with a corporate transaction. We do not sell your personal information.
5. Creator credit & payouts
Creators earn 10% of the margin on each sale of their published designs. At launch, these earnings are accrued as credit in the creator’s account; cash payouts and distributions are not yet enabled. Credit accrues now and becomes withdrawable once Conjure opens creator payouts, at which point additional identity and payout information may be collected through Stripe Connect to enable distributions. Any earnings figures shown in-product are estimates, not guarantees. You are solely responsible for any taxes owed on credit or payouts you receive.
6. International data transfers
Conjure operates from Canada, and several of our service providers are located in the United States, the European Union, or elsewhere. As a result, your personal information may be transferred to, stored in, and processed in countries whose data-protection laws differ from those of your country. Where we transfer personal information subject to the GDPR or UK GDPR out of the EEA or UK, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses (and the UK Addendum) or an adequacy decision. You may contact us for more information about these safeguards.
7. Uploaded reference photos
Any reference photos you upload are used only to generate the design you request. They are not published with your product or shown publicly in the marketplace. Do not upload photos of other people without their consent, and do not upload images you do not have the rights to use. You are responsible for the content you upload, consistent with our Terms and content policies.
8. Cookies & analytics
We use essential cookies that are necessary to sign you in and keep your session secure; these cannot be turned off without breaking core functionality. We also use PostHog for product analytics to understand how the Service is used and to improve it, with input masking applied to reduce the capture of sensitive content. You can control or delete cookies through your browser settings, and you can use browser features (such as “Do Not Track” or tracking protection) to limit analytics; doing so may affect some functionality.
9. Data retention
We retain personal information for as long as your account is active and as needed to provide the Service. We keep order, payment, and creator-credit records for longer where required to meet legal, tax, accounting, fraud-prevention, and dispute-resolution obligations. Reference photos and generation inputs are retained only as long as needed for the related generation and our operational and safety purposes, after which they are deleted or de-identified. When information is no longer needed, we delete or anonymize it.
10. Your privacy rights
Subject to applicable law, you may request to access, correct, update, export (port), or delete your personal information, and you may object to or restrict certain processing or withdraw consent where we rely on it. To exercise these rights, email privacy@shopconjure.com; we will verify your request and respond within the timeframes required by law. Under PIPEDA, if you are not satisfied with how we handle your information, you may contact the Office of the Privacy Commissioner of Canada. Under the GDPR or UK GDPR, you also have the right to lodge a complaint with your local supervisory authority or, in the UK, the Information Commissioner’s Office (ICO).
11. Security
We use reasonable administrative, technical, and physical safeguards designed to protect personal information, including encryption in transit, access controls, and reliance on established processors such as Stripe for payment data. No method of transmission or storage is perfectly secure, however, and we cannot guarantee absolute security. Please protect your account credentials and notify us promptly if you suspect unauthorized access.
12. Children
The Service is intended only for adults. You must be at least 18 years old and the age of majority in Ontario to use Conjure. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us personal information, contact us and we will take appropriate steps to delete it.
13. Data breach notification
If a security breach involving your personal information creates a real risk of significant harm, we will notify affected users and the relevant authorities as required by PIPEDA, the GDPR or UK GDPR, and other applicable laws, and we will take steps to mitigate the impact.
14. Changes to this policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we do, we will revise the “Last updated” date above and, where appropriate, provide additional notice. Your continued use of the Service after an update means you accept the revised policy.
15. Contact us
For privacy questions or to exercise your rights, email privacy@shopconjure.com. For general support, email support@shopconjure.com. Our mailing address and registered legal entity are [Registered entity & mailing address — to be added upon incorporation]. This policy is governed by the laws of the Province of Ontario and the federal laws of Canada applicable there, and any disputes are subject to the courts of Ontario.