Privacy Policy

1. Data We Collect

Account data. When you sign in, we collect your email address and authentication state. Accounts use an email and password; your password is stored only as a salted hash by our authentication provider and we never keep it in plain text. If you purchase a file, payment is processed by Stripe; we do not store your card details.

Order data.The preset you chose, the price paid, the timestamps of your purchase, and the resulting file's storage location.

Content data. The images and PDFs you upload, and the press-ready PDFs we generate from them. These are processed for the sole purpose of producing your output.

Usage data. Anonymised performance metrics (processing time, failure rate, preset chosen) used to monitor and improve the Service.

Technical data. IP address, browser type, device information, and a session cookie used for sign-in.

Advertising & measurement data.We measure the performance of our ads on Meta (Facebook & Instagram) using two channels, each governed by a different legal basis.

• Meta Pixel (in your browser): only loaded if you accept advertising cookies via our banner. The pixel sets the _fbp / _fbc cookies on your device and reports page views, product views, checkout starts and purchases to Meta. Legal basis: your consent.
• Meta Conversions API (server-to-server): when you complete a purchase, sign up, or subscribe, our server reports that transaction to Meta. The data is your hashed email, hashed name, hashed billing city / postcode / country, hashed phone (if provided), your IP address and browser user-agent string, and the event itself (a purchase of $2, a subscription start, etc.). Personal identifiers are SHA-256 hashed before transmission and are never stored in raw form by Meta; Meta only unhashes them at attribution time to match with one of its own users. Legal basis: legitimate interest in measuring the effectiveness of our paid advertising (GDPR Art. 6(1)(f) / UK GDPR). This is the industry-standard pattern for online advertising measurement and applies regardless of your cookie banner choice. You can object to this processing at any time via the contact method below.

2. How We Use Your Data

• To deliver the Service — process your file and return a downloadable result.
• To process payments and prevent fraud (via Stripe).
• To send transactional emails — sign-in magic link, download-ready notification.
• To enable signed-in users to access their order history.
• To respond to support requests and resolve disputes.
• To detect and prevent abuse or security incidents.
• To measure and improve our advertising on Meta (Facebook & Instagram) and to reach people likely to find PrintGo useful. Browser-level measurement (the Meta Pixel) runs only with your consent; server-level transaction measurement (the Conversions API) runs on a legitimate-interest basis for paid purchases and subscription signups, as described in Section 1.

We do not sell your personal data to third parties. We do not use your content to train AI models.

3. Third-Party Services

We use the following third-party services to operate PrintGo:

• Supabase — authentication, database, and file storage (EU / US regions).
• Vercel — application hosting, content delivery, and Vercel Blob for large file uploads.
• Stripe — payment processing. Subject to Stripe's Privacy Policy.
• Resend — transactional email delivery.
• fal.ai — AI image upscaling (Real-ESRGAN) and bleed extension (inpainting). Your image is sent to fal.ai for processing and is not retained beyond the duration of the call.
• Meta Platforms — advertising measurement via the Meta Pixel (browser, consent-based) and the Meta Conversions API (server-to-server, legitimate-interest basis for purchases and subscriptions). See Section 1 for the data shared by each channel. Data is processed in the United States.

Each provider processes data in accordance with their own privacy policies (linked above). We share the minimum data necessary for each service to function.

4. Data Storage & Retention

• Unpaid uploads are deleted from our storage within 24 hours of upload.
• Guest (no-account) paid downloads are kept for 24 hours after payment, then permanently deleted.
• Registered Pay-as-you-go downloads are kept for 7 days after payment, then permanently deleted.
• Pro-subscription downloads are kept for 90 days after payment, then permanently deleted.
• Account data is retained as long as your account is active.
• Order records are retained for 7 years as required by UAE corporate-accounting law.
• Reference data uploaded for processing (the source image or PDF) is processed in real time and not permanently stored beyond the retention periods above.
• Upon account deletion, we will remove your personal data within 30 days. Anonymised usage statistics may be retained.

5. Cookies

We use strictly necessary cookies for authentication and session management; these are always on because the Service can't function without them.

With your consent, we also use advertising cookies set by the Meta Pixel (including the _fbp and _fbc cookies) to measure our ads. We ask for this consent through a banner the first time you visit; you can decline, and the Service works exactly the same. You can withdraw consent at any time by clearing the pg_consent cookie in your browser, which makes the banner reappear.

6. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data (“right to be forgotten”).
• Export your data in a portable format.
• Object to or restrict certain processing of your data.

To exercise any of these rights, contact us at hello@mail.printgo.ai. We will respond within 30 days.

7. Data Security

We implement industry-standard security measures including encrypted connections (TLS), encrypted-at-rest object storage, short-lived signed download URLs, and row-level access controls on the database. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

8. Children

The Service is not intended for users under 18 years of age. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

9. International Data Transfers

Your data may be processed in countries outside your country of residence, including the United States (Vercel, fal.ai, Stripe, and Meta) and the European Union (Supabase, Resend). We ensure appropriate safeguards are in place for such transfers.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users of material changes via email. Continued use of the Service after changes take effect constitutes acceptance of the revised policy.

11. Contact

For any privacy-related questions or requests, contact us at hello@mail.printgo.ai.

Digiconsults FZCO, United Arab Emirates.