Privacy policy

TextiloArt, based in Pakistan, is responsible for the personal information described here. Contact details are in section 10.

• Account details: your email address, an optional display name, and your password (stored only in scrambled, “hashed” form, so nobody can read it). If you sign in with Google, we receive your name and email address from Google.
• Orders and credits: what you bought or unlocked, when, the price and currency, your credit balance and history, and the payment reference from our payment partner.
• Downloads: every download is recorded with the account, the design, the time, and the IP address and browser identification the request came from. We use this to protect designs from account sharing and fraud.
• Messages: what you send through the contact form — your name, email address, subject and message.
• Security information: your IP address and basic device information are used to limit repeated attempts (for example on sign-in) and by the bot check on our forms.

Payment details: card, bank and mobile-wallet details are entered with our payment partner, not on this site. We never receive or store them.

• to create and run your account and keep you signed in;
• to process your payments, add credits and deliver the designs you buy;
• to send account emails (confirmation, password reset) and receipts;
• to answer your messages and help with problems;
• to prevent fraud, account sharing and abuse, and to keep the site secure;
• to keep the records we need for accounting and the law.

We do not sell your personal information, and we do not use it for advertising.

We use only cookies that are necessary to keep you signed in and the site secure. We do not use advertising or tracking cookies. Our forms use Cloudflare Turnstile, a bot check that does not require you to solve puzzles.

We use trusted service providers to run the site. They process information only to provide their service to us:

• Vercel — hosts the website;
• Supabase — database and sign-in;
• Cloudflare — stores the design files and screenshots, and runs the bot check;
• Resend — sends our emails;
• Google — only if you choose “Continue with Google”;
• our payment partner — processes your payments.

Some of these providers process information outside Pakistan. We may also share information if the law requires it, or to protect our rights or prevent fraud.

• Account details: while your account is open.
• Orders and payment records: as long as needed for accounting and legal purposes, even after an account is deleted (without your name and email — see section 7).
• Download records: deleted automatically after 180 days.
• Contact messages: deleted automatically one year after they have been answered.

• You can see and change your display name on your account page, and see your purchases and credit history in your Library.
• You can ask us for a copy of your information, to correct it, or to delete your account. Deleting an account removes your name and email address and disables sign-in; order records are kept without them for accounting, and your download history is deleted.
• To make a request, use the contact form from the email address on your account. We aim to respond within 30 days.

Passwords are stored only in hashed form, design files are kept in private storage, and each download link works for a short time only. No system is perfectly secure, but we work to protect your information and fix problems quickly.

The site is for adults and businesses and is not intended for children under 13. We may update this policy; the date at the top shows the latest version, and we will tell you about important changes on the site or by email.

• Online: our contact form (we reply by email).