As part of our mission to help our customers sell more online, Print.App ApS (“Print.App”, “we”, “us”, or “our”) collects and processes certain information in the course of our business. This Privacy Policy is intended to help you better understand how we collect, use, and store your personal information.
We may update this Privacy Policy from time to time to reflect changes to our privacy practices or for other operational, legal, or regulatory reasons. If we make material changes to this Privacy Policy, we will notify you by posting the revised policy on this website and, where appropriate, by other means. By continuing to use this website, our technology, or our support services after these changes are posted, you agree to the revised policy.
When you visit the Site, we automatically collect certain information about your device, including your web browser, IP address, time zone, and some of the cookies installed on your device.
Additionally, as you browse the Site, we collect information about the individual web pages or products you view, what websites or search terms referred you to the Site, and information about how you interact with the Site. We refer to this automatically collected information as “Device Information.”
When Customers sign up for our service, we collect their full name, email address, and company name. We limit what we collect to these three items, which are used as unique identifiers for each customer and for sending transactional emails, feature release notifications, and bug fixes.
When Customers subscribe to any of our paid plans, we engage our payment processor, Stripe Inc., to collect additional information for payment processing. This includes customer address with zip code and, in certain instances, tax ID numbers for invoicing purposes.
This personal information may also be used to block certain transactions that appear to be fraudulent through automated decision-making systems and is stored securely.
Stripe is certified as a PCI DSS Level 1 compliant service provider. You may read more here: https://stripe.com/us/privacy
By default, we do not gather any information from Users except content they upload while personalizing a product, data pushed to us via webhooks (if such a feature is enabled), and UserData, if they are logged in during design customization.
Uploaded content. When a User uploads photographs, images, or other files in the Print.App Editor, we store those files and the resulting project data so the User can personalize the product and the Customer can produce and fulfill the order. Uploaded photographs may show identifiable people. We use uploaded content only to provide the Editor and generate print files for the Customer. We do not use it for any other purpose, and we do not analyze it to identify the people shown.
Webhook data that is pushed to us includes: product title, product ID, email address, shipping and billing information.
When webhook information is pushed to us, it is stored in our database and only accessed through webhook dispatch for further propagation to the Customer’s desired endpoint. We do not collect Users’ credit card or financial data in any way.
UserData comprises a user’s name, address, email, and phone number. This data is only used in certain designs to customize design parameters.
For personal data about Users, including uploaded content, webhook data, and UserData, the Customer is the data controller and Print.App acts as a data processor on the Customer’s behalf. We process this data only on the Customer’s instructions and to provide our services. Customers who need a Data Processing Agreement under Article 28 of the GDPR can request one from support@print.app.
For personal data about Customers and visitors to our Site, Print.App is the data controller.
We only share your information with third parties in the following instances:
Print.App will always ask for your consent before sharing your personal information with third parties for purposes other than those described in this policy.
A cookie is a small amount of data, which may include a unique identifier. Cookies are sent to your browser from a website and stored on your device.
We only use cookies on users’ devices to store session data such as uploaded images, user preferences, and design data, which helps us provide a personalized experience.
We may also use web beacons, software development kits, and other automated tracking methods on our websites, in communications with you, and in our products and services, to measure performance and engagement.
Analytics. Our websites (print.app and docs.print.app) use Google Analytics 4 to understand which pages and features are useful, so we can improve them. If you are visiting from the EU/EEA, the United Kingdom, or Switzerland, analytics cookies are only set after you give consent via the cookie banner; until then, only anonymous, cookieless signals are sent. In other regions, analytics is enabled by default and you can opt out at any time. You can change or withdraw your choice at any time using the “Cookie preferences” link in the footer of any page. We do not use analytics data for advertising, and we do not share it with third parties for their own purposes. For details on how Google processes this data, see Google’s privacy policy.
In general, we keep your personal information throughout your relationship with us.
Once you terminate your relationship with us, we generally continue to store archived copies of your personal information for legitimate business purposes, such as to defend a contractual claim, for audit purposes, and to comply with the law, except when we receive a valid erasure request, or if you, as a Customer, terminate your account and your personal information is purged pursuant to our standard purge process.
We will continue to store anonymous or anonymized information, such as website visits without identifiers, in order to improve our services.
Uploaded content. Photographs and other files uploaded through the Print.App Editor, and the related project data, are kept while the Customer’s account is active so that orders can be fulfilled and reprinted, unless they are deleted sooner at the Customer’s request. When uploaded content is deleted, we remove it from primary storage and from our backup copies, and cached copies on our content delivery network are invalidated. Database records are also held in rolling backups that expire automatically within 35 days.
We do not and will never share, disclose, sell, rent, or otherwise provide personal information to other companies for the marketing of their own products or services.
If you are a Customer, we do not use the personal information we collect from you or your Users to independently contact or market to your Users.
Print.App does not possess or share credit history or credit card information with other companies or third parties. All credit card processing is handled by our approved credit card processors.
We follow industry standards on information security management to safeguard sensitive information, such as intellectual property, order details, and any other personal information entrusted to us.
All data is encrypted in transit using TLS and encrypted at rest using AES-256.
Uploaded content is stored in private storage that cannot be accessed directly from the internet. Files are only delivered through our content delivery network, and each file is stored under a randomly generated identifier.
Access to our production systems is limited to a small number of authorized personnel, protected by multi-factor authentication. We only access customer content when needed to provide support or operate the service.
No method of transmission over the Internet or method of electronic storage is 100% secure. Therefore, we cannot guarantee the absolute security of your personal information.
Currently, all our data is stored on Amazon Web Services (AWS). Our main servers are located in the AWS EU-West 1 Region, based in Ireland. We selected Ireland because it is central to both Europe and the Americas, where most of our customers are. This data center has three isolated availability zones, each isolated in terms of power supply, physical location, and internet connectivity. Each piece of data is stored in three segregated locations, all within Ireland.
Uploaded content is backed up to a second AWS region within the European Union (EU-North 1, Stockholm). Some short-lived processing, such as image conversion and print file generation, takes place in other AWS regions within the European Union. Primary storage and backups of uploaded content and project data remain within the European Economic Area.
We use AWS DynamoDB point-in-time recovery to back up our main databases continuously. Backups are kept for 35 days, and we can restore data from any point within that period.
We use AWS CloudFront as a Content Delivery Network (CDN) to deliver static data, including designs, pictures, and project data, quickly. CloudFront does not copy our stored data to other regions. When a file is requested, CloudFront may keep a temporary cached copy at the edge location closest to the person requesting it, which can be outside the European Economic Area if the request comes from outside it. Cached copies expire automatically.
Where personal data is made accessible outside the European Economic Area, for example through CDN caching, it is protected by the GDPR Data Processing Addendum we have in place with AWS, which includes the European Commission’s Standard Contractual Clauses. Amazon Web Services also participates in the EU-U.S. Data Privacy Framework.
Print.App will notify the Customer after becoming aware of a personal data breach resulting from a breach of our security. Print.App is committed to ensuring that its incident response program meets the requirements of the General Data Protection Regulation (GDPR). The specifics of breach notification are handled through a Customer’s contract with Print.App.
Print.App understands that you have rights over your personal information. If you are concerned about data collected, please contact us to make the required changes. If you have any questions about your personal information or this policy, or if you would like us to erase your data, please contact us by email at: support@print.app, or by using the contact details provided on our website.