Privacy Policy, explained in operational terms.

Account and contact information. This includes your name, email address, phone number when provided, authentication and account identifiers, profile settings, referral or campaign details, and support or contact messages, including attachments, photos, videos, or documents you submit.

Design and product information. We process uploaded design files, filenames, previews, production configurations, material and color choices, cost estimates, SKU mappings, listing details, packaging instructions, included-item inventory, failed-print photos, and related review or support records.

Commerce, order, and delivery information. When you connect a store or shipping provider, we may receive access credentials or tokens plus store, listing, and order data. Fulfillment records can include buyer names, email addresses, phone numbers, shipping addresses, ordered items, notes, customs or tax identifiers when configured, carrier selections, labels, and tracking events.

Payment information. Stripe collects payment-card details through its payment interface. Printie stores Stripe customer and payment-method identifiers, along with charge, invoice, subscription, credit, and accounting records; Printie does not store the complete card number entered into Stripe.

Technical and usage information. We and the services named below receive information such as IP address, browser and device details, page URL, referrer, campaign parameters, clicks and interactions, errors, performance data, local or session storage identifiers, cookies, and session replay data.

• Authenticate accounts, preserve settings, provide the dashboard, and respond to support.
• Review and prepare designs, calculate estimates, map SKUs, schedule production, perform quality checks, pack products, and fulfill orders.
• Validate addresses, buy labels, update stores or shipping systems, provide tracking, manage inventory, and handle exceptions, returns, or reprints.
• Process payments, subscriptions, credits, invoices, account balances, and financial reconciliation.
• Operate, debug, secure, measure, and improve the website and fulfillment service.
• Attribute campaigns, measure signups or leads, communicate service updates, and send relevant lifecycle or marketing messages.
• Prevent spam, fraud, misuse, unsafe production, and violations of applicable rules; establish or defend legal claims and comply with legal obligations.

Printie discloses information when it is needed to operate a feature you use. The material categories currently include:

• Google Firebase for authentication, database, file storage, cloud functions, and hosting-related operations.
• Google Analytics for page and product analytics.
• Stripe for payment methods, charges, subscriptions, invoices, and related financial records.
• Shippo, ShipStation, Etsy, Shopify, shipping carriers, and customs or delivery services when a connected workflow or order requires them.
• Datadog for real-user monitoring, diagnostics, and session replay.
• Zendesk, whose support widget loads during site visits, and Chatwoot for order-support conversations.
• Brevo for transactional email, contact messages, and customer lifecycle communications.
• Discord for internal account, design-review, and operational notices that can include account identifiers, filenames, record paths, and source links.
• Meta and Reddit for advertising measurement, audience matching, attribution, and conversion reporting.
• Completion-webhook endpoints configured on an account receive the order and fulfillment payload that account directs Printie to send, which can include buyer, address, item, design, label, cost, and tracking details.
• Professional advisers, authorities, or counterparties when reasonably necessary for security, legal compliance, a claim, or a business transaction.

A connected provider also processes information under its own terms and privacy policy. Connecting an account authorizes the data exchange needed for that integration; disconnecting it does not erase orders or operational records already created from the connection.

Google Analytics records page and product events. Datadog real-user monitoring records performance, errors, resources, and interactions on site visits. Printie's current configuration samples 100% of sessions for replay, which can reproduce page content and user interactions for troubleshooting. For signed-in visitors, Printie also associates Datadog activity with account identifiers, display names, and email addresses. Password, email, telephone, and payment-card autocomplete inputs are masked by Datadog's platform rules, but other on-screen content and interaction details may be captured.

Printie loads Meta and Reddit advertising pixels. For a signed-in visitor, the email, phone number, and account identifier available on the account may be supplied to those services for matching. Printie also sends page, campaign, lead, signup, store-connection, and order-conversion information where the related tracking flow runs. Contact-form conversions may also be reported to Reddit from Printie's server with a hashed contact email or hashed account identifier, plus the IP address, browser user agent, page URL, and referrer.

These tools use cookies, pixels, local storage, session storage, or similar identifiers. You can limit them with browser privacy controls, content blockers, and the advertising settings offered by Meta, Reddit, and your device. Printie does not currently provide a site-level tracking preference control. Blocking storage may affect sign-in persistence, referral attribution, or other site functions.

Retention depends on what the record supports. We keep information while an account, connection, order, inventory item, subscription, balance, dispute, or support matter remains active, and afterward when reasonably needed for fulfillment history, accounting, fraud prevention, security, legal compliance, or dispute resolution. Service-provider logs and backups may follow different deletion cycles.

Printie's signed attribution cookie has a 90-day linking window. Unlinked anonymous attribution records are scheduled for cleanup after that window. Linked account attribution, browser-stored attribution, and operational records follow the purpose-based retention described above and do not currently have a shorter app-enforced expiration.

Shippo's disconnect flow removes the current Shippo credential and cached Shippo orders. Other integration controls may behave differently. Disconnecting does not remove fulfillment history, financial entries, shipment records, or data retained by a provider under its own policy.

Self-service removal in My Designs removes an eligible active design configuration and attempts to remove its current source when that source is not shared. A source can remain if storage removal fails. The action does not necessarily remove shared sources, previous replacement objects, or records kept for other configurations, orders, financial records, security logs, legal obligations, and backups. Review the design handling policy before changing a live design.

The app uses account authentication, owner and administrator permissions, database and storage rules, server-side secret storage for some integrations, logging, and Stripe-hosted payment-card collection. No online service, transmission, or storage system can be guaranteed completely secure.

Protect your password and connected-service credentials, use the official connection flow, and contact us promptly if you believe an account, token, design, or order has been accessed without authorization.

• Update available profile and operational information in your account.
• Use the Shippo disconnect control where available; contact Printie about other connected integrations.
• Replace or remove eligible active design configurations after clearing the dependencies described in the design handling policy.
• Use an unsubscribe link when one appears in a marketing email, or ask us to stop marketing messages. Operational and account messages may still be required.
• Use browser, device, Meta, and Reddit controls to limit advertising or similar storage and matching.
• Ask to access, correct, or delete personal information by emailing Printie. We may need to verify the requester and may retain information when permitted or required for orders, accounting, security, claims, legal obligations, or backups.

Privacy rights vary by location and may have eligibility, identity-verification, and exception rules. We will evaluate a request under the law that applies to it.

Printie operates from the United States. Our service providers and connected platforms may process information in the United States and other countries where they operate, which may have different data-protection rules from your location.

We may update this policy when the product, providers, or practices change. The date at the top identifies the current version. If a change is material, we may also provide notice through the website, dashboard, or account email.

For a privacy question or request, email info@printie.com from the address associated with the account when possible. Include enough detail to identify the account, integration, design, order, or request—but do not attach a sensitive design source or payment information to ordinary email.