Privacy Policy
Last updated: October 22, 2026
PatchDesign.AI is operated by Kinor LLC. Our postal address is PO Box 67, Agoura Hills, CA 91376. For privacy requests, email [email protected].
1. Information We Collect
We collect information you provide directly, such as your name, email address, phone number, shipping address, and design preferences when you use our AI patch design tool (on our website or through an AI chat app, see Section 3A), request a quote, place an order, or contact us. If you create an account, our sign-in provider (Clerk) collects the email and login details needed to authenticate you.
We also collect information automatically: pages visited, features used, approximate country (from our network edge), the IP address and browser type of a request, and cookie or similar identifiers described in Section 5. If you arrive from an ad, the link may include a click identifier (for example fbclid or gclid). We store that in a first-party cookie so we can tell which visit led to an order.
Payment card numbers are collected by Stripe on its own checkout page. We do not store your full card number.
For the categories California law asks us to describe, see Section 9.
2. How We Use Your Information
We use your information to provide and improve our patch design services, process orders, communicate with you about your designs and orders, send service-related emails, measure how the site is used, and keep the service secure.
We do not sell your personal information for money. We do share identifiers and on-site events with Meta (Facebook and Instagram) so it can measure our ads and show ads to people who have visited the site. California law calls that kind of cross-context advertising "sharing," and it can also count as a "sale." You can opt out, and we honor a Global Privacy Control signal. See Section 9. That opt-out turns off advertising tags. It does not turn off the analytics we use to operate the site, and it does not affect checkout or design chat.
3. AI-Generated Designs
We store the designs you create with our AI tool, and the requests that produced them, so you can return to them, change them, and order them. Design prompts and outputs may be used in aggregate, anonymized form to improve our AI models. We do not share individual design data with third parties except with the service providers that generate and store designs for us (Section 6), as necessary to process your order, or as part of the display and promotion described in Section 4.
3A. Designing Through AI Chat Apps
You can design patches inside an AI chat app, such as ChatGPT, Claude, Gemini, Grok, or Cursor, by connecting it to our server at https://patchdesign.ai/api/mcp. The chat app is run by another company (for example OpenAI, Anthropic, Google, or xAI), and your conversation with it is covered by that company's privacy policy, not this one. We do not receive your conversation. We receive only what the chat app sends when it uses one of our tools, and that company may keep its own copy of what our tools send back, including design previews.
What we keep: the design requests the chat app sends us (your description of the patch, including any lettering, and its type and size), the web address of any reference image you ask it to use (we download the image to make the design, but do not keep a copy), each design we make, the name and version of the chat app and of the software it connects with, and when each request arrived. Requests in the same chat session are kept together in one record with a design reference number (for example D-20563), so the chat can show, change, and link to your designs. To make a design, we send your description and any reference image to Google's Gemini models, as we do for designs made on our website. Price questions are answered without being stored. When the chat gives you an order link, we create a short link to that design and count how many times it is opened.
Some chat apps send an identifier for the person using them; ChatGPT, for example, sends an anonymized user id. We store only a one-way hash of it, so that you can refer to your own designs by their reference number and no one else can. Chat apps may also send details such as your language, time zone, or approximate location with each request. We do not store those details; we record only which kinds were sent.
We use the network address each request comes from to limit how much can be requested, and how many designs can be made without an account. For a chat app that runs on its company's servers, such as ChatGPT or Claude, that is the company's address, not yours; for one that runs on your own computer, such as Cursor, it is your network's address. We do not add it to your design record. The location our network provider infers from it is discarded, because for most chat apps it describes the company's data center rather than you.
Signing in is optional. If you ask the chat for a sign-in link, we create a single-use code that expires after 15 minutes. If you open the link and sign in to your PatchDesign.AI account, we connect that chat session to your account: we record your account id and email address on the session, count its designs against your account's design allowance, and save them to your account. From then on, the designs from that session are linked to your email address, and we may email you about them and about our service, as we do for people who design on our website. Marketing emails include an unsubscribe link.
Nothing is bought or paid for in the chat. An order link opens the design on patchdesign.ai, where you choose your options and pay, and an order placed there is handled like any other order under this policy.
Sections 3 and 4 apply to designs made through a chat app just as they do to designs made on our website, including the license in Section 4 to show a design in our marketing, and how to opt out of it. We keep chat designs and their records as described in Section 7. To have them deleted, email [email protected] with the design reference numbers (D- numbers) the chat showed you, or the email address of the account you connected.
3B. Design Chats on Our Website
When you use the AI patch designer on our website, we save your design chat: what you type, the images you upload, the designs we make, and the colors chosen for them. We use it to prepare your quote, to help you when you contact us, to let you continue a design later, and as the record of what you ordered and approved. We keep a design chat for 13 months after its last activity and then delete it. When you request a quote, we also keep a fixed copy of the chat, the design and its colors as they were at that moment, together with the record of that quote or order, for as long as we keep that record (see Section 7).
4. Use of Designs for Marketing and Advertising
By creating, submitting, or ordering a design through PatchDesign.AI, you grant us a non-exclusive, royalty-free, worldwide license to display, reproduce, and use the design (including any associated images of the finished patch) to show and promote our service. This includes organic posts and paid advertisements on social media platforms such as Instagram, Facebook, TikTok, Pinterest, LinkedIn, X (Twitter), and YouTube, as well as our website, our gallery, email newsletters, printed or digital promotional materials, product catalogs, showroom and trade-show displays, and marketing materials we give our partners and resellers. We do not sell your design, or products bearing it, to anyone else. Designs created in a version of our tool that a partner or manufacturer runs on its own website are not used this way. You keep ownership of your design; see Sections 4 and 5 of our Terms of Service. We will not publish your name, contact information, or order details alongside your design without your express consent. If you do not want your design used in marketing or advertising, email [email protected] before placing your order, or at any time afterward, and we will honor your opt-out request.
6. Who We Share Data With
We share personal information with the categories of recipients below. They are not all the same kind of recipient. Service providers process data for us. Advertising and analytics companies can also use some of it under their own terms. A chat app you connect is not our service provider at all (Section 3A).
Manufacturing partners. Patches are made by factories we work with, including factories in China. They receive the order details they need to make the patch: the design, patch type, size, quantity, colors, backing, and your name. When a parcel is addressed to you, they also receive your shipping address and phone number. That includes expedited and international orders shipped directly to you, and standard US orders, where the factory applies your shipping label to the bag and then sends the packed bags to us to mail inside the United States. A photo sample is not shipped, and we do not send a shipping address for it.
Payments. Stripe processes checkout, cards, and subscription billing, and collects the shipping address on the payment page.
Email. Resend delivers our email.
Hosting and edge. Microsoft Azure hosts the site, the API, and the stored orders, designs, and chats. Cloudflare serves the site and tells us the visitor's country at the network edge.
AI. Google's Gemini models generate the designs and handle related AI tasks (for example reading an uploaded image). We send the design description and any reference image you provide. We do not send your design prompt to a separate image vendor.
Accounts. Clerk handles sign-in.
Shipping labels. When we buy a US shipping label ourselves, EasyPost and the carrier (USPS for those labels) receive the recipient's name and address.
Advertising, analytics, reviews, and affiliates. Meta, Google (Analytics), Microsoft (Clarity), ContentSquare, Trustpilot, and Endorsely, as described in Section 5. Meta and the analytics providers may use data they receive under their own policies. The other providers in this section are engaged to perform a service for us.
We also share information if the law requires it, or to protect the rights, safety, and property of our customers, the public, and ourselves.
7. Data Retention
We retain your information for as long as necessary to provide services and comply with legal obligations. You may request deletion of your account data at any time by contacting us at [email protected].
8. Your Rights
Depending on your location, you may have rights to access, correct, delete, or receive a copy of your personal data, and to appeal a decision we make about a request. California residents have the rights in Section 9. People in the EEA and the UK have the rights in Section 10. To exercise these rights, email [email protected] and we will respond within 30 days. We may need to confirm that the request comes from you.
9. California Privacy Rights (CCPA / CPRA)
This section is for California residents. It supplements the rest of this policy.
Categories we collect: identifiers (name, email, phone, IP address, account id, cookie ids, and ad click ids); commercial information (quotes, orders, quantities, prices, and payment status); internet or network activity (pages and features used, and the design chat described in Section 3B); approximate geolocation (country inferred at the network edge) and, when you order, a precise shipping address; audio, visual, or similar information (images you upload and designs we generate); and inferences drawn from design preferences so we can quote and produce a patch. We do not collect government identifiers, precise GPS location, or biometric identifiers. We do not knowingly collect sensitive personal information in order to infer characteristics about you.
We collect these categories from you, from your browser, from Stripe when you pay, and from the chat app if you design through one (Section 3A). We use them for the purposes in Section 2. We retain them as described in Section 7.
Sharing for targeted advertising. We share identifiers and events with Meta for cross-context behavioral advertising, as described in Section 5. We do not sell personal information for money. We do not share sensitive personal information for advertising.
Your choices. You have the right to know, to delete, to correct, and to opt out of the sale or sharing of personal information. You will not be discriminated against for exercising these rights. Use the button below, or email [email protected]. The footer link "Do Not Sell or Share My Personal Information" brings you here.
Global Privacy Control. If your browser sends Global Privacy Control (navigator.globalPrivacyControl, or the Sec-GPC header), we treat that as a valid request to opt out of sale and sharing. We do not load the Meta pixel, we do not send browser advertising events, and we do not send the server-side Purchase or other ad events to Meta for that browser. We store the opt-out on the order when you check out, so a later payment confirmation from our server still does not send the ad event. Analytics needed to operate the site (Google Analytics, Clarity, and ContentSquare) continue to run.
Authorized agents may submit a request with proof of authorization. If we deny a request, you may appeal by replying to that email.
Advertising tags are on for this browser. Opting out turns off the Meta pixel and stops us sending advertising events for this browser. It does not turn off checkout, design chat, or the analytics we use to run the site.
10. EEA and UK (GDPR and UK GDPR)
If you are in the European Economic Area or the United Kingdom, Kinor LLC (PO Box 67, Agoura Hills, CA 91376, USA) is the controller of personal data processed through patchdesign.ai. Contact [email protected]. We have not appointed a representative in the EEA or the UK. Email us at that address for privacy requests, or write to the postal address above.
Legal bases. We process account, design, and order data to perform the contract with you (or to take steps you ask for before an order). We process security logs, fraud checks, and product analytics on the basis of our legitimate interests in running a safe, working service, balanced against your rights. We send marketing email only where we are allowed to, and every marketing email has an unsubscribe link. Where a law requires consent for a particular cookie, you can refuse non-essential cookies in your browser, send Global Privacy Control, or use the opt-out in Section 9. We do not currently show a separate cookie banner.
Your rights. You may ask for access, correction, deletion, restriction, or a copy of your data, and you may object to processing based on legitimate interests, including analytics. Where we rely on consent, you may withdraw it at any time. You may lodge a complaint with your local supervisory authority or, in the UK, the Information Commissioner's Office. We will respond within 30 days.
International transfers. We store information in the United States. Manufacturing partners in China receive the order details in Section 6. Stripe, Resend, Microsoft, Cloudflare, Google, and the other providers named in this policy process data in the United States and in other countries where they operate. Where the law requires a transfer mechanism, we use the contract terms those providers offer (including standard contractual clauses where they apply to that provider). You may email us for more detail about a particular transfer. This description is not a statement that every transfer has been assessed for your country.
11. Children's Privacy
Our service is not directed to children under 13, or under 16 in the EEA or the UK. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us immediately at [email protected].
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy on this page with an updated date. Continued use of our service after changes constitutes acceptance of the updated policy.
13. Contact Us
For privacy questions or to exercise a privacy right, email [email protected] or write to Kinor LLC, PO Box 67, Agoura Hills, CA 91376, USA. You can also use our contact page.