Ativv makes custom apparel and branded goods. This policy explains what information we collect from the people we work with, why we have it, and what we do with it.

It covers our website at ativv.com, our order portal at orders.ativv.com, the internal tools our staff use to do the work, and the online stores we run for schools and programs ("Ativv Campus"). Text messaging has its own page, because the rules for it are different: see our SMS Privacy Policy.

In short. We keep what it takes to make your order and talk to you about it: who you are, what you ordered, and the files and messages that went back and forth. We put no advertising or analytics trackers in the portal, and we do not sell your information or share it for anyone's marketing, including our own. The one unusual thing is that order records are permanent, because they are the record of the work. The rest of this page contains the details of what data we collect and how we use it.

What we collect

From you and your team. Your name, work email address, the company or organization you work for, and your job title if you tell us. The designs, artwork, files and comments you upload or write. The approvals and decisions you make in the portal, along with sizes, quantities and shipping addresses. Quotes and invoices for your orders. Notes our staff write about your orders, and a copy of each email and text message we send you about them. For team orders, the roster your organization sends us (see Children, below).

Phone numbers. We collect phone numbers in the ordinary course of business: when you call us, on quotes and invoices, and at store checkouts. Text messages are separate. We text a mobile number only when its owner has been asked whether they want order text updates and has said yes. That program is described at ativv.com/sms-terms, and how we handle the number is at ativv.com/sms-privacy.

From our website. Whatever you type into the contact form — your name, email and message — and whatever you write if you email us directly. Like any website, ours keeps ordinary server logs of visits.

From the stores. Ativv Campus stores run on Shopify. Shopify handles the store and the checkout, including payment, under Shopify's own privacy policy. We receive the order details we need to make and ship what was bought.

Signing in

The order portal has no passwords. You sign in with a one-time code we email to you, with Google, or through your own company's sign-in system if your company has set that up.

Signing in with a code. Most people sign in with a six-digit code we email them. We keep a scrambled form of the code, never the code itself, and delete it the day after it expires.

Signing in with Google. When you sign in with Google, Google sends us your basic profile: your name, email address, profile picture and language setting, and whether Google has verified the address. We keep your name, your email address and Google's identifier for your account, so we recognize you next time; we do not keep the picture or the language setting. We use this only to sign you in and to put your name on your account. We do not read your email, your files, your calendar or anything else in your Google account, and we ask for no other permissions. Ativv's use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Signing in through your company. We get a name, an email address, and confirmation that the address is verified, and use them only to sign you in and to put your name on your account.

What our systems record

The portal keeps a log of sign-ins and attempted sign-ins, with the network address and browser each one came from, for 90 days, so we can notice and stop someone trying to get into an account that isn't theirs. Our servers keep ordinary request logs. The portal sets one cookie, which keeps you signed in (and holds a sign-in while it is in progress); you are signed out after 7 days without using the portal. The portal sets no advertising or analytics cookies and uses no third-party trackers. Our Campus stores run on Shopify, which sets its own cookies under its own privacy policy.

Why we have it

To quote, make, deliver and invoice your orders. To keep a reliable record of what was approved and when. To answer your questions. To keep accounts secure. To look back over our own records so we can run the work better. That is the whole list.

Who else sees it

We use a small number of service providers to run the business: for email and documents, for tracking production, for accounting and invoicing, for text messages, for hosting our website and our systems, for backups, and for shipping. Each one sees what it needs for its job; for hosting and backups, that means everything in our systems. None of them may use your information for their own marketing. Card payments are handled by our invoicing provider or by the store's checkout, never by Ativv's own systems.

AI tools. We use AI tools, currently Anthropic's Claude, to help our staff with their work and to analyze our own order and customer records. Your information is not used to train those models.

Ativv staff can see customers' orders, files and contact details in our tools, and use them only to do the work.

Suppliers, manufacturers and carriers who produce and deliver your goods receive only what they need to make and ship them: artwork, sizes and quantities, and the name, address and phone number for delivery.

Law, safety and business changes. We may disclose information if the law requires it, or to protect someone's safety or our legal rights. If Ativv is ever sold or merged, customer records would move with the business, and this policy would continue to apply to them.

What we don't do

We do not sell your personal information. We do not share it with anyone for their marketing. We run no advertising on our site or in the portal.

No mobile information will be shared with third parties/affiliates for marketing/promotional purposes. All the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties. The rest of our commitment about mobile numbers is on the SMS Privacy Policy page.

Where it is stored

Ativv is in the United States. Your information may be stored and processed in the United States and the European Union.

How long we keep it

Order records — what was ordered, proofed, approved and sent, and when, along with quotes and invoices — are the permanent record of the work. We keep them, and we do not delete them on a schedule.

Design files — with your organization's records, for as long as we may need them for your orders.

Sign-in logs — 90 days, then deleted.

Texting consent records — as described on the SMS Privacy Policy page.

If you ask us to delete your information, we will remove your access to the portal, delete or anonymize your contact details wherever we keep them to get in touch with you, and delete design files we no longer need. The order records stay, because they are the record of the work, and your name and email address stay in the orders you took part in. We will tell you what remains. Copies already in our backups are not changed.

Your choices

You can ask us what information we hold about you, ask for a copy, ask us to correct it, or ask us to delete it, with the limits described under How long we keep it. Email hello@ativv.com and we will take care of it. If you use the portal, you can see the orders we have shared with you there, with their files, messages and your approvals.

This applies to everyone who deals with us, wherever you live. Residents of some US states and some countries have specific legal rights over their personal information; we honor requests from anyone, whether or not a law requires it.

Children

Our website, our portal and our stores are for businesses, schools and adults. School stores are meant for purchases by parents, staff and other adults.

Team and group orders often come with a roster from the school, club or organization placing the order: players' names and sizes, and sometimes their jersey numbers. Many of those players are minors. We receive that information from the organization, not from the players, we use it only to make and deliver that order, and we do not contact them.

Apart from rosters, we do not knowingly collect information about children under 13. If you believe a child has given us information, email hello@ativv.com and we will delete it.

Security

Connections to our website and portal are encrypted. The portal holds no passwords, so there is no password of yours for anyone to steal from us.

We keep copies of our records: a nightly copy of the order database on our server, and a weekly copy in Ativv's Google Workspace, where Ativv's staff can read it. Files you upload are not yet in a backup. We are adding an encrypted copy kept off-site. No system is perfectly secure, and we will not claim otherwise.

Changes

We may update this policy. The current version is always at this address, with its effective date at the top.

Contact

Questions and requests: hello@ativv.com.