Privacy Policy

Effective Date: February 1, 2026

Welcome to PrintDeck ("we," "our," or "us"). We are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclosure, and safeguard your information when you use our website and file transfer service (the "Service").

1. Information We Collect

A. For Shop Owners (Subscribers)

When you register a Print Shop account, we collect:

• Identity Data: Full name, Shop Name, and Google Account details (email/avatar).
• Contact Data: Email address and physical shop address.
• Transaction Data: Subscription status and plan expiry details. We do not store credit card information; payments are processed securely via third-party providers.

B. For Customers (File Senders)

When you use our Service to transfer files to a shop:

• File Data: The documents (PDFs, Images) you upload.
• Metadata: File names, page numbers, and upload timestamps.
• Device Data: IP address, browser type, and operating system used to access the upload portal.
• Cookies: We use only "strictly necessary" cookies to keep Shop Owners logged in securely. We do not use third-party advertising cookies to track students across the web.

2. How We Use Information

We use the collected data for specific, limited purposes:

• Service Provision: To facilitate the transfer of files from Customer to the selected Print Shop.
• Account Management: To manage shop subscriptions and authentication (via Google OAuth).
• Communication: To send transaction confirmations, technical alerts, or policy updates.
• Security: To monitor for fraudulent activity or abuse of the platform.

Google OAuth Data Usage

We use Google OAuth 2.0 for secure authentication. When you sign in with Google, we access:

• Email Address: To create and identify your PrintDeck account uniquely.
• Basic Profile Information: Your name and profile picture to personalize your dashboard experience.

We do not access your Google Drive, Gmail, Calendar, or any other Google services beyond basic profile and email. The data we receive from Google is used solely for authentication and account management purposes. We do not share this information with third parties except as described in Section 3 of this policy.

3. Disclosure of Your Information

We do not sell your personal data. We disclose information only in the following situations:

A. To the Print Shop

When a Customer uploads a file, the file content and metadata are accessible strictly to the specific Print Shop identified by the unique Shop ID or QR code. The Shop Owner acts as an independent data controller for the files they receive.

B. Third-Party Service Providers

We share data with trusted third parties who assist us in operating our Service:

• Supabase: For secure database hosting and authentication.
• Cloudflare R2: For secure, temporary file storage. All user files are automatically deleted after 24 hours.
• Payment Processors: To handle subscription payments securely.
• Analytics Providers: To understand usage patterns and improve website performance (e.g., Cloudflare Web Analytics).

4. Auto-Deletion Protocol

We practice strict data minimization. All User Content (uploaded files) is automatically and permanently deleted from our servers 24 hours after upload, regardless of whether the file was printed. We do not maintain archival backups of user documents.

5. Security of Your Information

We use administrative, technical, and physical security measures to help protect your personal information. These include:

• HTTPS/TLS encryption for all data in transit.
• Row Level Security (RLS) policies to ensure only the designated Shop Owner can view their specific orders.
• Secure, token-based authentication for file access.

While we have taken reasonable steps to secure the personal information you provide to us, please be aware that despite our efforts, no security measures are perfect or impenetrable.

6. Age Limitation

Our Service is intended for users who are at least 18 years old. If you are under 18 (e.g., a minor student), you confirm that you are using the Service with the consent of a parent or guardian.

7. Third-Party Websites

Our Service may contain links to third-party websites. We are not responsible for the privacy practices or content of third-party sites. We encourage you to review their privacy policies.

8. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page. You are advised to review this Privacy Policy periodically for any changes.

9. Contact Us

If you have questions or comments about this Privacy Policy, please contact us at:

• Email: astikverma05@gmail.com
• Address: Greater Noida, Uttar Pradesh, India