Privacy policy

What we never collect

Worth stating first, because it is the unusual part and it is structural rather than a promise about restraint:

• —No data about your customers. A label carries a product title, an SKU, a barcode and a price. If you connect a Shopify store we ask for product and inventory access only — never orders, never customers — so buyer names, addresses and order histories are not available to us and are not stored anywhere in the system.
• —No card details.Subscriptions are charged through Shopify’s billing, so payment information is handled by Shopify and never reaches us.
• —No advertising trackers and no data sales. We do not run ad-network pixels, we do not build advertising profiles, and we do not sell or rent personal data to anyone.

Your account

Creating an account stores your name, your email address and your account’s name. If you sign up with a password we store a cryptographic hash of it, never the password itself. Until you verify your email address nothing is written at all — the pending sign-up is a single short-lived row that is deleted when the code is used or expires.

Signing in with Google

If you choose “Sign in with Google” we ask Google for three things and nothing else: openid, email and profile. From those we receive and store your email address, your name and your Google account identifier — the last so that changing the address on your Google account does not strand you with a second, empty account.

We do not request or receive access to Gmail, Drive, Contacts, Calendar or any other Google service, and your Google password is never sent to us. Information received from Google is used only to create and identify your account. It is never used for advertising, never sold, and never transferred to anyone except the processors listed below. You can disconnect at any time from your Google account permissions page.

If you connect a Shopify store

Connecting a store stores the shop’s domain and an access token, encrypted at rest. We then mirror the parts of your catalog a label can print: product and variant titles, SKUs, barcodes, prices, cost, currency, weights and product images. The mirror exists so that a saved print job still resolves months later, and so that designing a label does not depend on Shopify being reachable.

The permissions we request are read-only and limited to products and inventory.

What you create in the app

Your label templates, the images you upload, your hand-entered or imported product catalog, and your print history — the recipe for each batch plus a snapshot of the values that were printed, so that history stays accurate when the catalog later changes. Rendered PDFs are stored in a private bucket and served over links that expire.

This website

The marketing site and the app use Vercel Analytics and Vercel Speed Insights to count page views and measure loading performance in aggregate. These are cookieless and are not used to build a profile of you or to track you across other sites. We set no advertising or tracking cookies anywhere.

The app keeps a session token in your browser so that you stay signed in. Clearing your browser storage signs you out.

Who else processes your data

We keep this list short deliberately, and it is complete:

Neon

Hosts the application database (United States).

Render

Runs the API.

Vercel

Hosts this site and the app, and provides the analytics below.

Cloudflare R2

Stores uploaded images and rendered PDFs.

Amazon Web Services

Renders label PDFs. Receives the label design and the product fields printed on it.

Resend

Delivers verification codes and password-reset emails.

Google

Sign-in only, and only if you choose it.

Shopify

Only if you connect a store, and only for product data.

Data is processed in the United States. We will update this page before adding a processor that handles personal data.

How long we keep things

Account, templates, catalog and history

For as long as the account exists. Ask us to delete it and we will.

Rendered PDFs

Deleted automatically 30 days after they are produced.

Verification codes and reset links

Minutes to an hour, and deleted the moment they are used.

A Shopify store you uninstall

Shopify notifies us and we erase the store’s credentials and its mirrored catalog. Your own templates, images and print history stay — the account is yours, not the shop’s — until you ask us to delete it.

Security

Everything travels over TLS. Passwords are stored as salted hashes and are never recoverable, by us or anyone else. Third-party access tokens are encrypted at rest with keys held outside the database. Uploaded images are re-encoded on arrival, which strips any embedded metadata such as camera EXIF and location.

Your rights

You can ask for a copy of the personal data we hold about you, ask us to correct it, or ask us to delete your account and everything in it. Email contact@printmylabels.app and we will respond within 30 days. There is no form and no ticket queue.

The service is intended for businesses and is not directed at children.

Changes

If what we collect changes, this page changes with it and the effective date above moves. We will tell account holders by email before a change that materially affects them takes effect.