Terms of Service & Data Processing Agreement

These terms govern a Shopify merchant's ("you", "Merchant") use of the Printscape app ("the App"), operated by CartSmith ("we", "us", "Processor"). By installing or using the App, you agree to these terms. If you do not agree, uninstall the App.

1. The service#

The App lets your customers personalize products in your storefront and forwards paid, personalized orders to Printify for fulfillment. You are responsible for your Printify account, your product configuration, and for fulfilling and supporting orders placed through your store.

2. Your responsibilities#

• Maintain a lawful privacy policy for your store that discloses use of the App and its sub-processors.
• Keep your Printify credentials and Shopify account secure.
• Use the App only for lawful purposes and in line with Shopify's terms.

3. Fees#

Any fees for the App are presented in the Shopify admin and billed through Shopify's Billing API. Printify fulfillment costs are separate and governed by your Printify account.

4. Warranty and liability#

The App is provided "as is" without warranties of any kind. To the extent permitted by law, our aggregate liability arising from the App is limited to the fees you paid for it in the three months preceding the claim.

5. Termination#

You may stop using the App at any time by uninstalling it. On uninstall we delete your store's data as described in the Data Processing Agreement below and our Privacy Policy.

Data Processing Agreement#

This DPA forms part of the terms and applies where we process personal data on your behalf as your processor (you being the controller) in connection with the App.

A. Roles and scope#

You are the controller of your customers' personal data. We act as your processor, processing that data only to provide the App's functionality and only on your documented instructions (which these terms and your configuration constitute).

B. Nature of processing#

• Categories of data: customer design content and uploaded images; and for personalized orders, the order identifiers, ordered items, and recipient shipping details (name, address, email, phone).
• Data subjects: your store's customers who use the personalizer or place personalized orders.
• Purpose: rendering previews, generating print files, and fulfilling orders via Printify.

C. Sub-processors#

You authorize us to engage the following sub-processors: Printify (print-on-demand fulfillment) and Cloudflare (file storage and network services). We remain responsible for their compliance and will give notice of material changes to this list.

D. Security#

We maintain technical and organizational measures appropriate to the risk, including: encryption of protected customer fields at rest and data in transit; access controls and an access log for protected customer data; environment separation; and a documented security incident response process. We will notify you without undue delay after becoming aware of a personal-data breach affecting your customers' data.

E. Data subject requests and compliance#

We support Shopify's privacy webhooks. On a customer data request we compile the stored data for you to provide to the customer; on a customer redaction request we delete the customer's files and personal details; and on store redaction (after uninstall) we delete your store's data. See the Privacy Policy for specifics and timelines.

F. Retention and deletion#

We retain personal data only as long as needed to provide the App, and delete it in response to redaction requests and on store uninstall, as described in the Privacy Policy.

Contact#

Questions about these terms or the DPA: support@cartsmith.dev.