Privacy Policy

1. Shops and us

When you design or order through a print shop's portal, that shop decides what information it asks for and how it uses it to serve you. We run the system on the shop's behalf. For questions about an order, start with the shop. We will help with anything about how PrintAuto itself handles your information.

2. What we collect

• Account details: your name, email address and password. Passwords are stored only in hashed form (scrypt), never in plain text.
• Organization and team details: the shop or organization you belong to, your role, and any information you give when you apply or are invited.
• Designs and files: artwork you upload, designs you make in the studio, and the print files created from them.
• Order details: products, sizes and quantities, rosters of names and numbers, due dates, shipping addresses, purchase-order numbers, notes and messages with the shop.
• Storefront and group orders: the name, email address and sizes you enter when ordering from a team or group store.
• Payment information: card payments are handled by Stripe. We never see or store full card numbers. We keep a record of each payment (amount, status and Stripe's reference) so orders and invoices stay accurate.
• Shop billing: for shops paying for PrintAuto, your plan, billing status and Stripe customer reference.
• Technical information: your IP address and basic request details, used for security, rate limiting and the activity log that records important changes (such as approvals and payments).
• Designs you make without an account stay in your own browser until you create an account or send them to the shop.

3. How we use it

• To run the service: designing, quoting, proofs and approvals, payments, production and delivery.
• To send emails about your account and orders, such as sign-in links, proofs, invoices, receipts and status updates. You can turn most of these off on your Account page; security emails stay on.
• To let shops send their own customers offers and reorder reminders. Every one has an unsubscribe link, and you can turn them off on your Account page.
• To keep PrintAuto secure, prevent fraud and abuse, fix problems, and provide support.
• To meet legal obligations, such as keeping financial records.

4. Who we share it with

• The shop you order from and the staff it invites, who see your designs, orders and messages to fulfill them.
• Service providers who help run PrintAuto, only for that purpose:
  • Vercel (hosting and file storage)
  • Neon (database)
  • Stripe (payments)
  • Resend (email delivery)
  • Google Fonts (font files load from Google's servers, which receive your IP address when they do)
  • S&S Activewear and Intuit QuickBooks, only if the shop connects them
• The law: when required to comply with legal process, or to protect the rights, safety and property of our users, the public or us.
• A business transfer: if PrintAuto is sold or merged, information may move to the new owner under this policy.

We don't sell personal information, and we don't share it for cross-context behavioral advertising.

5. Cookies and browser storage

We use one essential cookie to keep you signed in. We don't use advertising or analytics cookies. Your browser also stores designs you make without an account; you can clear them in your browser settings.

6. How long we keep it

We keep your information while your account or the shop's account is active. Orders, invoices and payment records are kept as long as the shop needs them for its business and as the law requires. When an account is closed, we delete or anonymize its personal information within 30 days, except what we must keep by law or to resolve disputes.

7. Your choices and rights

• Update your name and email preferences on your Account page.
• Ask us to access, correct, export or delete your information by emailing carson@onyxpromotes.com. We will respond within 30 days. For information a shop holds about your orders, we may forward your request to that shop.
• Depending on where you live (for example California or other U.S. states), you may have additional rights. We will honor them and won't treat you differently for using them.

8. Security

We protect your information with encryption in transit (HTTPS), hashed passwords, encrypted storage of connection keys, separation between shops, and logs of important actions. No system is perfectly secure; if we learn of a breach that affects you, we will notify you as the law requires.

9. Children

PrintAuto is not meant for children under 13, and we don't knowingly collect their information. If you believe a child under 13 has given us information, email us and we will delete it.

10. Where your information is stored

PrintAuto is run from the United States, and your information is processed and stored there.

11. Changes

If we make a material change to this policy, we will tell users by email or in the app before it takes effect. The date at the top shows when it was last updated. See also our Terms of Service.

12. Contact

Onyx Promotes, operator of PrintAuto. Email carson@onyxpromotes.com.