Privacy Policy

Printuple is software for running a 3D-printing business, provided by Digitex LLC, doing business as Printuple (“Printuple,” “we,” “us,” or “our”). This Privacy Policy explains what personal information we collect through our websites and applications (the “Service”), how we use and share it, and the choices and rights you have.

This policy covers people who visit our marketing site, individuals who create and use a Printuple account (our “customers”), and the team members they invite. It does not govern how our customers handle the personal information of theirown buyers. When you place an order through a shop that runs on Printuple, that shop is the controller of your information and its own privacy notice applies; we process that data on the shop’s behalf as described in How we share information.

We collect the following categories of information:

• Account & identity data. Your name, email address, password credentials (stored only as a secure hash), business name, and role. Authentication is handled through our login system, and sessions are maintained with secure, host-scoped cookies.
• Shop & operational data. The content you create to run your business: products and recipes, filament inventory and usage ledgers, quotes, orders, shop-floor travelers, printers, and related settings. This is your data; we process it to provide the Service.
• Payment & billing data. We use Stripe for payments. For your own storefront we store only your Stripe Connect account identifier. We never receive or store full card numbers, and Stripe acts as your payment processor with you as the merchant of record.
• Connected-channel data. If you connect a sales channel (such as Etsy, Shopify, or TikTok Shop), we receive the access tokens needed to sync your orders and catalog. These tokens are stored encrypted (see Data security) and used only to operate the connections you enable.
• Printer & agent data. If you use Printuple Link to control printers, the Link agent runs on your own local network. Printer credentials you enter stay on your network; we receive the operational status and job data needed to show your farm in the dashboard.
• Camera frames, only if you enable failure detection.If you switch on failure detection for a printer, the Link agent sends sampled still frames from that printer’s camera to our detection service while a print runs. Frames are scored and discarded. When a print is flagged, a small number of frames are retained for thirty days so you can review what was flagged, and then deleted. See Camera frames and failure detection.
• Usage & device data. Basic technical information such as IP address, browser type, pages viewed, and timestamps, collected to keep the Service secure, reliable, and working as intended.
• Analytics data (only with your consent). If you accept analytics cookies, Google Analytics gives us the pages you viewed, the page that sent you to us, your approximate country and city, and your browser and device type. This is separate from the security logging above, and it does not happen unless you accept. See Cookies & similar technologies.

We use personal information to:

• Provide, operate, maintain, and improve the Service;
• Create and secure your account and authenticate you;
• Sync orders and catalog data from the channels you connect;
• Process payments and manage billing (through Stripe);
• Provide support and respond to your requests;
• Send service and administrative communications;
• Where you have consented to analytics, understand how the site and app are used so we can improve them;
• Monitor for, detect, and prevent fraud, abuse, and security incidents; and
• Comply with legal obligations and enforce our agreements.

We do not sell your personal information, and we do not use it for third-party advertising.

Where the EU/UK General Data Protection Regulation (GDPR) applies, we rely on the following legal bases:

• Contract: to provide the Service you or your organization signed up for;
• Legitimate interests: to secure, maintain, and improve the Service and prevent abuse, balanced against your rights;
• Legal obligation: to comply with applicable laws; and
• Consent: where we ask for it, which you may withdraw at any time.

We share personal information only as needed to run the Service, and never sell it. Our service providers (“subprocessors”) process data on our instructions and under confidentiality obligations. They include:

• Hosting & infrastructure: our cloud hosting provider, which runs the application and network;
• Database: our managed PostgreSQL provider, where your data is stored with per-tenant isolation;
• Payments: Stripe, for payment processing and Connect payouts;
• Email: our transactional email provider, for account and service messages;
• Analytics: Google LLC, for Google Analytics, and only for visitors who have accepted analytics cookies;
• Connected channels: the platforms you choose to connect (e.g. Etsy, Shopify, TikTok Shop), which exchange order and catalog data at your direction; and
• Machine-vision detection: our own detection service, running on our infrastructure provider, which scores sampled printer camera frames when you enable failure detection. Frames are not sent to any third-party model provider.

We may also disclose information to comply with law, respond to lawful requests, protect our rights and the safety of others, or in connection with a merger, acquisition, or sale of assets (in which case we will notify you of any change in how your information is handled). When you operate a storefront, we process your buyers’ order information as your service provider so that you can fulfill their orders.

We keep our use of cookies minimal. We use strictly necessary cookiesto keep you signed in and to protect the Service (for example, host-scoped session cookies and CSRF protection). We also store a small preference in your browser’s local storage to remember your light/dark theme choice.

With your consent we also use Google Analytics 4 (measurement ID G-FJ3MTM5RLS), which sets the first-party cookies _ga and _ga_FJ3MTM5RLSand tells us which pages get used. Google LLC acts as our processor and stores that data in the United States. Nothing loads until you select Accept all, and Google Signals and every advertising feature are turned off on our property.

We do not use third-party advertising or cross-site tracking cookies. You can control cookies through your browser settings, though blocking necessary cookies may prevent you from signing in. Our Cookie Policy has the full detail, and you can change your choice at any time with Cookie preferences in the site footer, or in Settings then Account inside the app.

We retain personal information for as long as your account is active and as needed to provide the Service, and afterward only as required to comply with our legal obligations, resolve disputes, and enforce our agreements. When data is no longer needed, we delete or anonymize it. You can ask us to delete your account and associated personal data as described in Your privacy rights. Camera frames retained by failure detection are deleted thirty days after the print they relate to. Everything else sampled for detection is discarded as soon as it is scored.

Event-level and user-level analytics data held in Google Analytics is kept no longer than 14 months, after which Google deletes it automatically. Aggregated reports that cannot identify you may be kept for longer.

We build security into the platform. Measures include:

• Two-layer tenant isolation.Every customer’s data is separated at the database level, with row-level security enforced on the runtime database role so one tenant can never read another’s data.
• Envelope encryption of secrets. Sensitive credentials such as connected channel tokens are encrypted with per-tenant keys, never stored in plaintext and never under a single shared key.
• Hashed credentials & signed callbacks. Passwords and machine tokens are stored only as hashes, and non-browser callbacks are cryptographically signed and verified.
• Encryption in transit. Traffic to the Service is protected with TLS.

No method of transmission or storage is perfectly secure, but we work continuously to protect your information and to limit access to it on a need-to-know basis.

Failure detection is optional, off by default, and switched on one printer at a time. This section explains exactly what happens when you turn it on.

• Where frames go. The Link agent on your network sends sampled still frames directly to our detection service. They do not pass through the dashboard, and they are never written to our main database.
• What is kept. Nothing, during normal operation: a frame is scored and discarded. When a print is flagged, the last few frames are retained so you can review what was flagged, and they are deleted after thirty days.
• Who can see them. Only members of your workspace who can view printers. Retained frames are served through an authenticated request, not a public link.
• How to turn it off. Switch failure detection off for a printer and sampling stops immediately. Frames already retained are deleted on their normal schedule, or sooner on request.

We do not use your camera frames to train or improve any model, and we do not share them with anyone.

We are based in the United States and process information there. If you access the Service from outside the United States, your information may be transferred to, stored, and processed in the United States and other countries where we or our subprocessors operate. Where required, we rely on appropriate safeguards (such as the European Commission’s Standard Contractual Clauses) for such transfers.

Google LLC processes our analytics data in the United States. For that transfer we rely on the EU-US Data Privacy Framework, which Google LLC is certified under, and on the standard contractual clauses in Google’s data processing terms.

Depending on where you live, you may have some or all of the following rights over your personal information:

• Access & portability: request a copy of the personal information we hold about you;
• Correction: ask us to fix inaccurate or incomplete information;
• Deletion: ask us to delete your personal information;
• Objection & restriction: object to or restrict certain processing; and
• Withdraw consent: where we rely on consent, withdraw it at any time.

To turn analytics off, select Cookie preferencesin the site footer, or in Settings then Account inside the app. We stop sending anything to Google straight away and clear the analytics cookies from your browser. You can also install Google’s browser opt-out add-on at tools.google.com/dlpage/gaoptout.

For residents of California and other U.S. states with comprehensive privacy laws, you have the right to know what personal information we collect and how we use and share it, the right to delete and correct it, and the right to opt out of the “sale” or “sharing” of personal information and of targeted advertising. We do not sell or share personal information or use it for targeted advertising, and we will not discriminate against you for exercising your rights.

To exercise any of these rights, email us at hello@printuple.com. We will verify your request and respond within the timeframe required by applicable law. If you are in the EEA or UK, you also have the right to lodge a complaint with your local data protection authority.

The Service is intended for businesses and is not directed to children. You must be at least 18 years old to use Printuple. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us with personal information, contact us and we will delete it.

We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last updated” date above and, where appropriate, notify you through the Service or by email. Your continued use of the Service after an update means you accept the revised policy.

If you have questions about this Privacy Policy or how we handle your information, contact us at hello@printuple.com. Printuple is operated by Digitex LLC (DBA Printuple).