1) What we collect
- Account data: email, name, and authentication/session identifiers.
- Delivery data: phone number and delivery addresses you provide.
- Job data: job configuration (e.g. copies, color/duplex), timestamps, and status/events.
- Content: documents you upload for printing (“artifacts”).
- Technical data: basic logs needed to operate and secure the service.
2) How we use personal data
- To create and administer accounts, authenticate users, and prevent fraud.
- To process print jobs (routing, provider acceptance, fulfillment, delivery coordination).
- To provide customer support and handle incidents and disputes.
- To comply with legal obligations (accounting, tax, lawful requests).
- To improve reliability and security (service monitoring, abuse prevention).
3) Legal bases (GDPR)
- Contract: to provide the service and fulfill your job.
- Legitimate interests: securing the service, preventing abuse, and improving reliability.
- Legal obligation: accounting/tax and compliance requirements.
- Consent: where required (e.g., optional cookies or marketing, if enabled).
4) Who we share data with
We share data only as needed to fulfill jobs and operate the platform:
- Print providers: job details required to produce the print, and delivery information needed for handoff.
- Couriers / mail partners: recipient name/address and delivery coordination details.
- Service providers: hosting, authentication, storage, and payments (see “Sub-processors”).
- Authorities: where required by law or to protect rights, safety, and security.
5) Content, encryption, and retention (“shredding”)
Documents you upload are treated as job artifacts. The service is designed to minimize retention:
- Artifacts are stored for fulfillment and are intended to be deleted after delivery based on a retention window.
- Job metadata (timestamps, events, billing records) may be retained longer for audit, support, and legal obligations.
- Legal hold may block deletion where required for investigation or compliance.
If you need specific retention terms for enterprise use (e.g. a data processing addendum), contact us.
6) International transfers
We may use vendors that process data outside the EEA. Where applicable, we rely on appropriate safeguards (such as Standard Contractual Clauses) to
protect personal data.
7) Your rights (EEA)
- Access, rectification, and deletion.
- Restriction and objection (including to processing based on legitimate interests).
- Data portability (where applicable).
- Withdraw consent (where processing is based on consent).
To exercise rights, email [email protected].
8) Complaints (Ireland + Berlin)
You can lodge a complaint with your local supervisory authority. Examples:
- Ireland: Data Protection Commission (DPC).
- Berlin: Berliner Beauftragte für Datenschutz und Informationsfreiheit.
9) Sub-processors (high level)
We use third parties to run the service. Common categories include:
- Cloudflare (Workers, database, object storage) for hosting and storage.
- WorkOS for authentication.
- Payment provider for subscriptions and billing (if enabled).
- Maps (if enabled) for address autocomplete/geocoding.