Privacy Policy — Printscape

Printscape is a product-personalization app for Shopify stores, built and operated by CartSmith. This policy explains what Printscape collects when you install it in your store and when your customers use it to personalize products, why we collect it, and what choices you and your customers have.

Information we collect from merchants#

Your Shopify store domain and the API access Shopify grants Printscape on install.
Your Printify API credentials, which you provide during setup so Printscape can submit orders for fulfillment. These are stored encrypted.
Product configuration you create in Printscape (print zones, pricing, mockup photos, fonts, colors, design libraries).

Information we collect from store customers#

Design content created in the product configurator: text, selected options, and any images the customer uploads.
When a personalized order is placed: the order and line-item identifiers, the ordered variant and quantity, and the recipient's shipping details (name, address, email, and phone) as provided in the Shopify order.

Printscape never sees or stores payment information. Payments are handled entirely by Shopify and your store's payment providers.

How we use this information#

To render design previews and generate print-ready files for ordered products.
To fulfill orders: shipping details and print files are transmitted to Printify, the print-on-demand provider you connected.
To show you your personalized-order history inside Printscape.
To provide support.

We do not sell personal information, use it for advertising, or share it with any party other than the service providers listed below.

Service providers#

Shopify — the commerce platform Printscape runs on; source of order and product data.
Printify — print-on-demand fulfillment. Receives recipient shipping details and print files for ordered items.
Cloudflare — file storage (R2) for uploaded images, design assets, and generated print files, and network services.

Data retention and deletion#

Design and order data is retained while Printscape is installed so you can view history and re-submit failed orders.
When a customer asks your store to delete their data, Shopify forwards the request to us and we delete the customer's uploaded images and print files and remove their personal details from our records, within 30 days.
When you uninstall Printscape, Shopify sends a store-deletion request (typically 48 hours after uninstall) and we permanently delete your store's data, including all stored files.
Customers can also request a copy of the data we hold about them; Shopify forwards these requests to us and we provide the export to the store owner.

Security#

All data is transferred over HTTPS (encrypted in transit). Protected customer fields (name, address, email, phone) and connected API credentials are encrypted at rest, which also means they are encrypted in our database backups. Each store's data is isolated by store domain, files are stored in a per-store namespace, and access to protected customer data is logged. We maintain a documented security incident response process and will notify affected merchants without undue delay in the event of a personal-data breach.

Data processing agreement#

Using Printscape as a merchant is also governed by our Terms of Service and Data Processing Agreement, which describes the roles, sub-processors, and security commitments that apply when we process personal data on your behalf.

Changes to this policy#

We may update this policy as Printscape evolves; the date above reflects the latest revision. Material changes will be noted in Printscape's release notes.

Contact#

For privacy questions or requests, contact support@cartsmith.dev.