Privacy Policy

1. Information We Collect

We collect information necessary to provide our API and fulfillment services:

• Account information: name, email address, company name, and password (hashed)
• API usage data: request logs, endpoint usage, error rates, and rate limit consumption
• Order data: product details, quantities, artwork URLs, and shipping addresses provided via the API
• Payment information: processed and stored exclusively by Stripe — PrintedSimply never sees or stores credit card numbers
• Technical data: IP addresses, browser type, and device information when accessing the developer portal

2. How We Use Your Information

We use collected information for the following purposes:

• Fulfilling print orders submitted through the API
• Processing payments and managing billing
• Providing customer support and responding to inquiries
• Monitoring API health, performance, and security
• Sending service-related notifications (order status, API changes, security alerts)
• Improving our API, documentation, and developer experience
• Complying with legal obligations

3. Data Sharing & Third Parties

We share your data only when necessary to provide our services. We do not sell your personal information.

• Stripe: payment processing (PCI DSS Level 1 certified)
• Shipping carriers (USPS, UPS, FedEx): delivery addresses and tracking information for order fulfillment
• Cloud infrastructure providers: hosting and data storage with encryption at rest and in transit
• Law enforcement: only when required by valid legal process

4. Data Retention

We retain your data for the following periods:

• Account data: retained while your account is active; 30 days after a deletion request, your personal data is anonymized
• Order data: Order records are kept as the record of business — deleting your account anonymizes your personal data and keeps the order, for fulfillment history, disputes, and financial records
• API request logs: API request logs are retained for 90 days for debugging and monitoring, then pruned
• Artwork files: artwork you upload is stored until you delete it, and deleting your account deletes it; artwork you link by URL is fetched by the production facility when the order is made
• Payment records: retained as required by tax and financial regulations (typically 7 years)

5. Security Measures

We implement industry-standard security measures to protect your data:

• TLS 1.3 encryption for all data in transit
• AES-256 encryption for data at rest
• API key hashing — we store only hashed versions of your API keys
• Rate limiting and abuse detection to prevent unauthorized access
• Regular security audits and penetration testing
• Role-based access controls for internal systems

6. Your Rights (GDPR & CCPA)

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Right to access: request a copy of the personal data we hold about you
• Right to rectification: request correction of inaccurate data
• Right to erasure: request deletion of your personal data (subject to legal retention requirements)
• Right to portability: receive your data in a structured, machine-readable format
• Right to object: object to processing of your data for specific purposes
• Right to restrict processing: request limitation of how we process your data

To exercise any of these rights, contact us at privacy@printedsimply.com. We will respond within 30 days.

7. Cookie Policy

The PrintedSimply developer portal uses minimal cookies for essential functionality:

• Authentication cookies: maintain your login session (essential, cannot be disabled)
• Theme preference: stores your light/dark mode selection (localStorage, not a cookie)
• Cookie consent: records your cookie preference (localStorage)
• Analytics: we do not use third-party analytics cookies

8. Children’s Privacy

The PrintedSimply API and developer portal are not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us at privacy@printedsimply.com and we will delete it promptly.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email to your registered account address at least 30 days before they take effect. The “Last updated” date at the top of this page indicates when the policy was last revised.

10. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact our Data Protection team:

• Email: privacy@printedsimply.com
• General support: support@printedsimply.com