Privacy Policy

Last updated: July 14, 2026

Existing users must accept this updated version (together with our Terms of Service) to continue using Printonic.

At Printonic, we respect your privacy and are committed to protecting your personal information. This Privacy Policy explains how Printonic, LLC ("Printonic," "we," "us," or "our") collects, uses, shares, and protects personal information when you use our websites, dashboard, APIs, and related services (the "Services"). It applies to sellers and account holders ("merchants"), visitors to our websites, and, as described in Section 6, the end customers whose order information merchants submit to us for fulfillment.

1. About This Policy and Our Role

For personal information about our merchants, website visitors, and account holders, Printonic acts as a "controller" (or "business"), meaning we determine how and why it is processed.

For personal information that a merchant submits to us about that merchant's own customers so that we can produce and ship orders (for example, a recipient's name and shipping address), Printonic acts as a "processor" (or "service provider") on the merchant's behalf, and the merchant is the controller. Section 6 explains this in more detail.

2. Information We Collect

Information you provide. When you create an account, place or fulfill an order, subscribe to a paid plan, or contact us, we collect information such as your name, email address, password, business and billing details, shipping and return addresses, subscription preferences, designs and other content you upload, and the contents of your communications with us.

Information we collect automatically. When you use the Services, we automatically collect your IP address, browser type, device identifiers, approximate location derived from your IP address, and usage and log data, including through cookies and similar technologies (see Section 7).

Information from third parties and connected sales channels. When you connect a sales channel (for example, Etsy, Shopify, TikTok Shop, or WooCommerce) through an authorization you grant, we receive store, listing, and order information from that channel. This may include your customers' names, shipping addresses, and order details. We also receive fraud and payment signals from our payment processor and information from analytics and advertising partners.

Payment information. Payments are processed by our third-party payment processor. We do not store full payment card numbers.

3. How We Use Your Information

• To provide, operate, and fulfill orders through the Services.
• To manage your subscription, billing, and plan features.
• To authenticate you and keep accounts and the platform secure.
• To prevent, detect, and investigate fraud, abuse, chargebacks, and violations of our Terms or the law.
• To communicate with you about your account, orders, or subscription, and (where permitted) to send marketing (see Section 15).
• To personalize your experience and improve our websites and Services.
• To analyze trends and usage and to gather aggregate or demographic information.
• To power optional AI features (see Sections 5 and 14).
• To comply with legal obligations, respond to legal requests, and protect our rights.

4. Legal Bases for Processing (EEA and UK)

Where the EU or UK General Data Protection Regulation applies, we rely on the following legal bases: performance of a contract (to provide the Services you request); our legitimate interests (to secure the platform, prevent fraud, understand and improve the Services, and conduct business-to-business marketing), balanced against your rights and interests; your consent (for certain cookies and marketing, which you may withdraw at any time); and compliance with our legal obligations. For end-customer data we process on a merchant's behalf, the merchant determines the applicable legal basis.

5. How We Share Your Information

We do not sell your personal information for money. We share personal information only as described here:

• Service providers and subprocessors that help us run the Services, by category: cloud hosting and infrastructure, database and authentication, payment processing, print production and shipping or logistics, email and messaging, analytics, customer support, and fraud prevention. They may process personal information only to provide services to us. A current list of subprocessors is available on request.
• AI providers. When you use AI-powered features, we may send relevant data (e.g., product information, prompts, or catalog content) to third-party AI providers that power those features. These providers process data under their own privacy and security practices; we select providers that commit to using such data to provide the service and not to train general-purpose models on your content.
• Connected sales channels. When you connect and use a sales channel, information is exchanged with that platform at your direction and subject to that platform's own policies.
• Legal, safety, and rights. To comply with applicable law, respond to lawful requests and legal process, enforce our Terms, or protect the rights, property, safety, or security of Printonic, our users, or others.
• Business transfers. In connection with a merger, acquisition, financing, reorganization, or sale of assets, information may be transferred as part of that transaction, subject to this Policy.
• With your consent or at your direction.

6. Merchant Data and End-Customer Data

When you use Printonic as a merchant, you may submit personal information about your customers (such as a recipient's name and shipping address) so that we can produce and ship orders. For that information, you are the controller (or business) and Printonic acts as your processor (or service provider), processing it only to provide fulfillment and related Services on your documented instructions and consistent with these terms.

You are responsible for having a valid legal basis and for providing any notices to and obtaining any consents from your customers that are required to share their information with us, and for your own privacy obligations to your customers. Merchants subject to the GDPR, UK GDPR, or CCPA/CPRA may request our Data Processing Addendum, which governs this processing.

7. Cookies, Analytics, and Advertising

We use cookies and similar technologies for essential site functionality, to understand how our website is used, to enhance user experience, and, where enabled, to deliver relevant advertisements. You can accept or decline non-essential cookies through our cookie banner or at any time using the "Cookie preferences" link in our footer, which reopens our cookie consent banner. You can also manage cookies through your browser settings; disabling certain cookies may affect functionality. Where required by law, we treat recognized opt-out preference signals, such as Global Privacy Control (GPC), as a request to opt out of advertising cookies and related sharing on that browser.

8. International Data Transfers

Printonic is based in the United States, and we may process and store personal information in the United States and other countries whose data protection laws may differ from those in your jurisdiction. Where we transfer personal information from the EEA, the UK, or Switzerland to a country that has not received an adequacy decision, we rely on appropriate safeguards, such as the European Commission's Standard Contractual Clauses and the UK International Data Transfer Addendum, or another lawful transfer mechanism.

9. Data Retention

We keep personal information for as long as necessary to provide the Services, maintain your account, comply with our legal, tax, accounting, and fraud-prevention obligations, resolve disputes, and enforce our agreements. Retention periods vary depending on the type of data and the purpose for which it is used; when personal information is no longer needed, we delete or de-identify it. End-customer data that we process on a merchant's behalf is retained in accordance with the merchant's instructions and our fulfillment record-keeping obligations.

10. Data Security

We use administrative, technical, and organizational measures, such as encryption in transit, access controls, and least-privilege practices, to protect personal information from unauthorized access, use, or disclosure. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for keeping your account credentials confidential and for activity that occurs under your account.

11. Your Privacy Rights and Choices

Depending on where you live, you may have rights to access, correct, delete, or receive a copy of your personal information, and to object to or restrict certain processing. To exercise these rights, contact us using the information in Section 18. We will verify your request as required and respond within the timeframes set by applicable law, and we will not discriminate against you for exercising your rights. For end-customer data that we process on a merchant's behalf, please direct your request to the merchant; we will assist the merchant as their processor.

12. EEA and UK Privacy Rights (GDPR)

If you are in the EEA, the UK, or Switzerland, you have the rights to access; rectification; erasure; restriction of processing; data portability; objection (including to direct marketing and to processing based on legitimate interests); and to withdraw consent at any time without affecting processing carried out before withdrawal. You also have the right to lodge a complaint with your local data protection supervisory authority. Where we are required to appoint an EU or UK representative, their contact details are available on request.

13. California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have the rights to know and access the categories and specific pieces of personal information we collect, use, and disclose; to delete your personal information; to correct inaccurate personal information; to opt out of the "sale" or "sharing" of personal information (including sharing for cross-context behavioral advertising); and to limit the use of sensitive personal information.

We do not sell personal information for money. To the extent we "share" personal information for cross-context behavioral advertising through advertising cookies, you may opt out using the "Cookie preferences" link in our footer or by sending a Global Privacy Control (GPC) signal. The categories of personal information we collect are described in Section 2, and the categories of recipients are described in Section 5. You may submit a request yourself or through an authorized agent, and we will not discriminate against you for exercising your rights.

14. Automated Processing, Fraud Prevention, and AI

We use automated tools to detect and prevent fraud, abuse, and security threats (for example, to flag suspicious orders, chargebacks, or account activity) and to power optional AI features. These tools support, and do not replace, human review. We do not use them to make decisions that produce legal or similarly significant effects about you without a lawful basis and, where required, human involvement. Our AI features are further described in Section 5 and in our Terms of Service.

15. Marketing Communications

With your consent where required, we may send you marketing communications about our Services. You can opt out at any time using the unsubscribe link in our marketing emails or by contacting us. Even if you opt out of marketing, we will still send you transactional and service messages, such as order, billing, security, and account notices.

16. Children's Privacy

The Services are intended for businesses and for users who are at least 18 years old, and they are not directed to children. We do not knowingly collect personal information from anyone under 18 (or under the age of digital consent in their jurisdiction, such as 16 in parts of the EEA). If we learn that we have collected such information, we will delete it.

17. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will provide notice through the Services or by other means and update the date at the top of this Policy. For account holders, your continued use of the Services after the effective date, or your acceptance when prompted, indicates your acceptance of the updated Policy.

If you have any questions or requests regarding this Privacy Policy, please contact us at: