Privacy Policy

CFTH (comesfromtheheart) is operated by LI TING, a sole proprietor based in Japan. For the purposes of this policy, we are the controller of your personal data. Contact: hello@comesfromtheheart.online.

• Account: email, hashed password, login IP and browser/user-agent.
• Creation: photos you upload, generated results, and mockup parameters.
• Order: shipping address, phone, payment token, and order status.
• Device / usage: analytics events, device model, and time zone.

We use your data to create your custom product, fulfill and ship your order, provide customer support, and prevent fraud and abuse. We do not use it for third-party marketing, and we do not sell your personal information.

We share the minimum necessary data with service providers who help us run CFTH:

• Stripe / PayPal — payment processing.
• Printful — production and shipping of physical goods.
• Email / push providers — order and account notifications.
• AI generation (Google Cloud / Vertex AI, Gemini) — creating your design.
• Google Cloud Vision API — see below.

We do not sell your personal information to third parties.

Your photos are used only for this custom order. Without your explicit permission, we will not display or commercially use them. We automatically clear unpaid creation drafts after 90 days. For placed orders, we keep the related images so we can handle after-sales and reprints.

We use cookies and local storage that are necessary to sign you in, keep your cart and creation session, and measure basic usage. You can control non-essential cookies through your browser settings.

Data is stored primarily in the United States and may be processed across borders. We keep:

• Order data — for the financial retention period required by law;
• Unpaid creation drafts — up to 90 days;
• Login logs — up to 365 days.

You can request to access, correct, delete, or export your personal data. We aim to process requests within 30 days. Data tied to placed orders is kept for the legal financial retention period even after a deletion request.

You can request deletion from your account or through customer support. What we can delete depends on your order status:

• Before payment / production — we can stop generation and delete uploads, drafts, and candidates.
• Paid, awaiting confirmation or production — deletion first triggers a cancel/refund or a decision to retain data required for fulfillment.
• In production / shipped — some data may already be with Printful or the carrier; we make reasonable efforts to cancel or delete.
• Completed / after-sales / refunded — we delete or de-identify non-essential data and keep only what law or compliance requires.

Each request creates a trackable task, and we notify you of the result.

If you are in the United States, this policy is your notice of our data practices.

• California (CalOPPA): we post this policy publicly and describe the personal information we collect and share. We do not track you across third-party websites for advertising, and we do not knowingly respond differently to “Do Not Track” signals.
• California (CCPA/CPRA): you have the right to know, access, delete, and correct your personal information, and to not be discriminated against for exercising these rights. We do not sell or share your personal information for cross-context behavioral advertising.

To exercise any of these rights, email hello@comesfromtheheart.online.

CFTH is not directed to children under 13, and we do not knowingly collect their personal information. If you believe a child has provided us data, contact us and we will delete it.

Where required, international transfers rely on appropriate safeguards such as Standard Contractual Clauses. We may update this policy and will give at least 7 days’ notice of material changes. Questions? Email hello@comesfromtheheart.online or use our Contact page.