Damyth · Public information

Privacy Notice

Version 2026-09-25-v1 · Published 2026-09-25 05:57:30 UTC · Effective 2026-09-25 05:57:33 UTC. Immutable version

This Notice explains how Damyth handles information in operating its customizable-apparel marketplace, account features and related services. It describes current practices and should be read with our Terms of Service.

1. What this Notice covers

This Notice covers information handled when you browse Damyth, create or use an account, customize a design, place an order, communicate, report an Issue or participate as a creator. Different features involve different information; not every visitor or account uses every feature.

2. Information you provide

Depending on the features you use, you may provide:

Your name, profile information, email and other contact details.
Shipping addresses and information needed to deliver an order.
Artwork, designs, colors, text, sizes, quantities and production instructions.
Uploaded spreadsheets or rosters containing names, numbers, sizes or other customization information.
Messages and Issue evidence, including photos, videos and files.
Creator application and submission information.
Financial, withdrawal and payout information where those features apply.

Not every user provides every category. Please avoid including information that is unnecessary for the requested service.

3. Information generated by Damyth

Damyth creates account and user identifiers, order and fulfillment records, payment references and statuses, production information, communication history, Issue and resolution records, and relevant operational logs. Session and security information supports sign-in, authorization and abuse prevention. Records can include timestamps and evidence of the versions of legal documents accepted or acknowledged.

4. Authentication

Customer sign-in uses email one-time codes or Google authentication. Damyth handles the identity and verification information needed to validate sign-in, link accounts where appropriate and maintain authorized sessions. It also uses security information to manage verification attempts and session validity.

Google authentication does not give Damyth your Google password. Email verification codes should not be shared with other people.

5. Payments

The current PayMongo integration uses a hosted payment flow. Damyth does not collect or store the full card number or CVV through this integration.

Damyth does retain transaction information needed to operate and verify payments, such as applicable billing or contact details, amounts, provider references, payment status and provider payment or webhook evidence. Payment-review and refund records may be retained with the transaction. A hosted payment flow is not a claim that every system is risk-free.

6. How Damyth uses information

Information is used to provide and operate the features you use, including:

Authenticating accounts and maintaining authorized access.
Saving and displaying customization and preparing manufacturing instructions.
Manufacturing, shipping and tracking orders.
Coordinating and verifying payments.
Providing communications, support and Issue, refund or replacement handling.
Reviewing creator applications and administering submissions and commercial arrangements.
Recording earnings, wallet activity, withdrawals and payout evidence where applicable.
Protecting security, investigating suspected misuse and preventing fraud.
Maintaining transaction, financial and legal-acceptance evidence and operating the platform.

These descriptions explain operational purposes; acknowledging this Notice is not blanket consent to all processing.

7. Manufacturing suppliers

An assigned manufacturing supplier receives information needed for the orders it is responsible for. This can include artwork, rosters, sizes, quantities, instructions, shipping information and relevant Issue evidence.

Access is tied to actual order responsibility and the applicable workflow. Supplier participation does not give unrestricted access to every customer's saved designs or private records.

8. Creators

Creators have role-specific access associated with their applications, submissions, items, commercial relationships and earnings. Being an item's creator does not automatically grant supplier-level access to customer shipping details or private production information. Access depends on the relevant role and authorized operation.

9. Services used by Damyth

Current integrations include PayMongo for payments, Google for authentication, Resend for email delivery, and frontend or CDN infrastructure needed to load parts of the site. Information is handled by these services as needed for their functions. For example, an email delivery service handles the destination and message, while a browser request to external infrastructure can provide connection and request information.

These are descriptions of the integrations, not declarations of each provider's legal role. External services may also explain their own practices in their notices.

10. Information about other people

You may upload teammate or roster information such as names, numbers and sizes. Provide another person's information only when you are permitted to do so and only to the extent needed for the customization or order. Do not include unrelated sensitive details in artwork, instructions or spreadsheets.

11. Issue reports and evidence

Issue reports can contain photos, videos, messages, files and other order evidence. This information supports investigation, responses and resolution. Access is limited according to the relevant customer, supplier and administrative workflow roles; it is not intended as public content.

Select evidence relevant to the problem and avoid exposing unrelated people or information. Replacement follow-up and refund handling may also retain evidence of the reported problem and its outcome.

12. Creator and financial information

Creator participation can involve application records, submitted designs, commercial proposals and agreements, earnings, wallet movements, withdrawal requests and payout evidence. These records support review, commercial administration, payment accounting and investigation of discrepancies. They are distinct from the information needed simply to browse or buy an item.

Financial records are not automatically erased when an account is restricted or deactivated.

13. Cookies and browser storage

Damyth currently uses a session cookie and browser localStorage and sessionStorage for account and interface functions, including temporary state and saved interface choices. Google sign-in also involves interaction with Google's authentication services. Blocking or clearing browser storage may affect sign-in or reset saved choices.

The current site audit found no installed Google Analytics, Meta Pixel, TikTok Pixel, Hotjar or Microsoft Clarity integration. This describes current practice, not a promise that integrations will never change. Changes affecting this Notice will be reflected in a new version as appropriate.

14. Retention

Retention depends on the record and its purpose. Some temporary and security data has cleanup behavior. Order, payment, Issue, legal-acceptance and financial evidence may remain needed for outstanding obligations, account history, resolving discrepancies and applicable requirements.

There is currently no single universal deletion period for all registered-user content or Issue evidence. Account deactivation is not an instruction to erase every related record. You can ask Damyth about information associated with your account and request deletion where applicable; the response must take account of the records and obligations involved.

15. Account deactivation and deletion

Deactivation stops account use and revokes sessions. It does not automatically delete order, payment, Issue or financial history. Deletion requests are separate from deactivation and can be raised through the privacy contact below. This Notice does not promise immediate or automatic deletion of every record.

16. Security

Damyth uses access controls and technical and organizational measures intended to protect information, including authorization checks for private records. No method of storage or transmission is absolutely secure. Keep access to your email and authentication accounts secure, avoid sharing codes and report suspected unauthorized access.

17. Minors

Minors may use Damyth. Their information and use of the service remain subject to applicable requirements. This Notice does not set an arbitrary minimum age or treat acknowledgement as resolving every requirement that may apply to a minor's information or participation.

18. Privacy questions and requests

Use support@damyth.com for privacy questions, requests for access or correction, deletion where applicable, or other privacy concerns. The public contact channel is being prepared for beta; Help & Contact explains current availability. Avoid sending unnecessary identity documents or financial details with an initial enquiry.

Requests may require appropriate identity verification and assessment of the information and obligations involved. Deletion is not automatic, and no fixed response deadline is promised by this draft. This does not limit rights or time requirements that otherwise apply. Applicable privacy rights can also include being informed, objection, erasure or blocking, portability, and raising a complaint with the National Privacy Commission or seeking redress, subject to the relevant requirements.

19. External services and processing

External services may handle information as necessary to provide authentication, payment, email or infrastructure functions. Processing arrangements depend on the services and deployment used. This Notice does not assume that all information stays in one country or name an unverified hosting location.

20. Changes to this Notice

This Notice is versioned. Damyth may ask you to acknowledge a new version, and retains historical versions and acknowledgement evidence. Acknowledgement records that you have seen the Notice; it is not blanket consent to every activity or a substitute for any separately applicable requirement.

21. Contact Damyth

The designated support and privacy address is support@damyth.com. For an order problem, the formal Report an Issue action is separate from a privacy request or general message. See Help & Contact and the Order Issues & Refunds policy for the relevant order process.