GenAgent Trust Hub
Menu

redbubble

DTier DMedium risk · 38/100
  • The documents do not say whether your data trains AI.
  • Your data is used for personalized ads, including by third-party ad companies.
  • Data is shared only with the providers who run the service.
  • The documents do not say who can read your content.

They collect account, order, and tracking data, share it with vendors and ad tools, and fan-art terms add and one-sided licenses.

Highest riskMedium riskLow risk

Agent Trust Hub uses AI and may make mistakes. Review reports and confirm their contents before relying on them.

Privacy policy ↗Terms ↗18 min read · college level26 lines verified word for word

Collected

What is collected

Account, orders, payments, logs, site activity, messages, and sometimes tax or social-login data.

Read the exact line

Privacy policy

“When you visit and use the Marketplace, our web server automatically collects so-called access data out of technical necessity, which your terminal device automatically transmits.”

Training

How it is used

They run the shop, fight fraud, improve the site, send marketing if you agree, and run targeted ads.

No exact line could be verified.

Sharing

Who may see it

Printers, payment firms, analytics, ads, support tools, and others can get your data; they say they do not sell it.

Read the exact line

Privacy policy

“In no case do we rent or sell your personal data for marketing or other purposes.”

Kept

How long it is kept

They keep data as long as needed or required by law, and keep some records after you delete your account.

Read the exact line

Privacy policy

“Your personal data will be stored by us only as long as it is necessary to achieve the purposes for which it was collected or, if there are any legal retention periods beyond this, for the duration of the legally prescribed retention period.”

Controls

Your controls

You can change account data, delete your account, revoke marketing consent, and use rights by contacting them.

Read the exact line

Privacy policy

“Your user account shows you the essential personal data that is stored by us. You can view, change and/or delete this personal data at your own discretion.”

Fine print

The fine print

They notify of big privacy changes; fan-art terms add , damage caps, and continued-use acceptance.

Read the exact line

Privacy policy

“In the event that we make substantial changes, we will notify you via email, push notification or similar.”

Expand “Read the exact line” to see the source alongside the explanation.

What you can turn off

The controls and opt-outs their own documents describe, and where they say to find them.

  1. Turn off marketing emails and account messages

    Unsubscribe links in emails, account settings, Help Center help.redbubble.com, or legal@redbubble.com / privacy@redbubble.com

  2. Opt out of Google Analytics collection

    Browser cookie settings or the plugin at https://tools.google.com/dlpage/gaoptout?hl=en

  3. Delete your account and

    Account deletion described in the privacy policy; also contact options in Section 1 or Help Center

  4. Request access, correction, or portability

    Contact legal@redbubble.com, privacy@redbubble.com, or redbubble@dp-officer.com as listed in Section 1

If a switch is not where they say, the deletion request above still applies.

Line by line

The lines that matter most, worst first.

1 · The fine print

If someone sues over your fan-art submission, you may have to pay Redbubble’s and the brand’s legal costs.

Read the exact line

Terms of service

“You agree to and forever Licensor, Redbubble, and their respective licensors, successors, assigns, parents, subsidiaries, directors, officers, employees, agents, partners”

For example, if a design you uploaded is accused of copying another artist, you could be on the hook for lawyer fees.

2 · How it is used

Anything you might gain in the brand’s property through your fan art is given to the brand forever.

Read the exact line

Terms of service

“you shall assign, and do hereby assign, to Licensor any and all right, title and interest in all intellectual property and proprietary rights which you may acquire in the Licensed Property”

For example, if your Dune-style design becomes popular, you cannot claim extra rights in the licensed characters.

3 · How it is used

Session recordings and how you click the site may be used by Microsoft to train its AI.

Read the exact line

Privacy policy

“Please also note that Microsoft Clarify may use behavioral data for training their proprietary machine learning (AI) models.”

For example, a replay of how you shop could help train Clarity’s models, even if they say it is .

4 · The fine print

The brand can pull your fan-art license with no warning and take the listing down.

Read the exact line

Terms of service

“Licensor may revoke its license at any time in whole or in part without notice to you, at which point you will no longer be authorized to use the Licensed Property”

For example, your best-selling print could disappear overnight if Legendary ends the license.

5 · The fine print

If they change the fan-art rules and you keep using the site, they treat that as you agreeing.

Read the exact line

Terms of service

“Your continued use of or access to the Redbubble Marketplace following the posting of any changes constitutes your acceptance of those changes.”

For example, they could post new terms and you would be bound without a separate yes.

6 · How long it is kept

Even after you delete your account, some records stay for legal and business reasons.

Read the exact line

Privacy policy

“We retain certain data where required by law or for , including data related to alleged intellectual property infringement, fraud prevention, content moderation history, payment disputes, tax obligations, and payment information required by applicable regulations.”

For example, an old copyright complaint about your shop could stay on file after you leave.

7 · How it is used

They say they will not rent or sell your personal data.

Read the exact line

Privacy policy

“In no case do we rent or sell your personal data for marketing or other purposes.”

For example, they claim they will not sell your email list to another retailer.

8 · How long it is kept

Deleting your account is supposed to wipe most personal account data so it cannot be recovered.

Read the exact line

Privacy policy

“When you delete your account, we delete your account credentials, passwords, profile information, settings, marketing and preference data, personal communications, and personal identifiable information from our systems using secure deletion methods that render the data unrecoverable.”

For example, your username, password, and profile should be securely erased after you delete the account.

9 · How long it is kept

They say they encrypt payments and limit staff access to people who need it.

Read the exact line

Privacy policy

“Access to your personal data on our databases is subject to appropriate technical security measures. Furthermore, only persons authorized by us can access your personal data to the extent necessary for their respective activities”

For example, a support agent should only see what they need to handle your ticket.

Words to know

Legal words from the lines above, in plain English.

sell or share
Under California law, selling means passing your data to others for money or other value; sharing means passing it on for targeted ads. For example, letting an ad network use your browsing history in return for ad space counts as a sale.
personal data
Any information that is about you or can be linked to you, from your name to your phone's ID. For example, your email, your IP address and the list of apps on your phone are all personal data.
retention
How long a company keeps your data before deleting it. For example, a policy might keep your messages for 30 days after you delete them, or for as long as it likes.
indemnify
You promise to pay the company's legal costs and losses if your use of the service gets it sued. For example, if you post a song you do not own and the label sues the app, you owe the app's lawyer bills.
affiliates
Other companies owned by or connected to the same parent company. For example, if you use one app, its sister apps under the same owner may also get your data.
irrevocable
Cannot be taken back or cancelled once given, even if you change your mind or delete your account. For example, an irrevocable licence to your photos means you cannot withdraw it later.
de-identified
Data with your name and obvious identifiers removed, though it can sometimes still be traced back to you. For example, your chats with names stripped out may still be kept and studied after you delete your account.
legitimate interest
A legal reason that lets a company use your data without asking, when it decides its own need outweighs your privacy. For example, an app may analyse how you use it to improve the product, without ever asking you.
human review
Company staff or contractors may read your messages or content, usually to check for rule breaking. For example, a flagged private chat with an AI can be read by a person at the company.
How we got here · grade D · score 38/100 · 15 of 15 policy answers backed by a verified quote · 6 not stated
  • What does the app collect beyond what it needs to work?

    They collect account, order, payment and seller tax data plus server logs, IP, browser, site movements, messages, and analytics cookies.

  • Does it record your voice, face or body, and what happens to that?

    Not stated in the documents.

  • Are your chats and uploads used to train AI models, and is that off by default?

    Not stated in the documents.

  • Can employees or contractors read your conversations, and when?

    Not stated in the documents.

  • Are you profiled or tracked for advertising?

    They use Google Analytics, targeting cookies, and retargeting on third-party sites, plus Microsoft Clarity tracking.

  • Do they sell or share your data, and can you opt out?

    They say they do not rent or sell personal data, and they share with processors such as printers, payments, support, and analytics.

  • What rights do they take over what you type and what the AI makes?

    The main user license is not in these docs. Legendary fan-art terms assign IP in licensed property and allow name/likeness use worldwide in perpetuity.

  • How long do they keep your data after you delete it, and can you delete it in the app?

    They delete much account data when you delete the account, but keep some legal and business records; no 30- or 90-day wipe is stated.

  • Does it build a lasting memory or profile of you, and can you see, edit or turn it off?

    Not stated in the documents.

  • Do they commit to basic security, and have they leaked data?

    They describe encryption for payments, need-to-know access, and processor contracts, but no independent audit.

  • Is there a real age gate, and are teens protected?

    Not stated in the documents.

  • Will they tell you when the rules change, and is the policy specific?

    The privacy policy is dated and they email for substantial changes, but retention is only “as long as necessary.” Fan-art terms treat continued use as acceptance.

  • Can they close your account without warning, and can you get your data out first?

    Legendary terms let them revoke the license and remove submissions without notice; the main account-closure process is not in these docs.

  • If something goes wrong, who pays?

    Fan-art terms make you indemnify Redbubble and the licensor and cap damages to actual losses with no special or lost-profit damages.

  • Do subscriptions renew on their own, and can you get a refund?

    Not stated in the documents.

The privacy policy is 3,913 words at a college level (Flesch reading ease 41.8); the terms are 4,237 words at a plain English level.

Your privacy
has an agent now

Be in control of your online privacy in the AI Era with confidence.

Gen

From Gen, the Company BehindNorton