Privacy Policy
PrintDeck is a production management app for small 3D print shops, built and operated by Janis Tamargo. This policy explains what data we collect, why we collect it, how it's used, and what rights you have over it. We've written it in plain language on purpose — you deserve to actually understand it.
Short version: Your shop data belongs to you. We use it to run the app and power Oliver's insights. We don't sell it. We don't share it with anyone except the services needed to run PrintDeck. You can export everything or delete your account yourself, any time, right from Settings in the app.
1. Who we are
PrintDeck is operated by Janis Tamargo, sole proprietor, based in Georgia, United States. For privacy questions or data requests, contact us at [email protected].
2. What we collect and why
Account information
When you create an account, we collect your email address and a hashed password (via Supabase Auth). This is used to identify you, secure your account, and send account-related emails. We do not store your password in plain text.
Shop data
Everything you enter into PrintDeck — orders, products, printers, inventory, expenses, customer names, pricing, filament usage, and print history — is stored in your shop's database records. This data is scoped to your shop and is not accessible to other users. It's used to:
- Run the app and display your data back to you
- Calculate floor prices, margins, and analytics
- Power Oliver's shop-specific insights and alerts
- Track printer wear and maintenance history
Oliver chat history
Conversations with Oliver are stored in your shop's records. This lets Oliver maintain context across sessions and improves the quality of his responses to your specific shop over time.
Usage and error data
We log anonymous session events (page visits, feature usage) to understand how the app is being used and identify problems. If the app encounters an error, a sanitized error report is sent to our internal dashboard — this report does not include your personal or shop data.
Emails you send us
If you email us — or previously submitted your email through our early-access form — we keep it to respond and to contact you about PrintDeck. We will not add you to marketing lists without your permission, and you can ask to be removed at any time.
3. Oliver and AI — how it works
Oliver is powered by Anthropic's Claude API. When you ask Oliver a question or when Oliver generates proactive insights, we send relevant portions of your shop data to Anthropic's API to generate a response. This data includes things like your order history, product costs, printer logs, and inventory — the context Oliver needs to give you useful, shop-specific answers.
Anthropic processes this data to generate responses and is subject to their own Privacy Policy. Anthropic does not use API-submitted data to train their models by default.
We do not send personal information about your customers (names, contact details) to Anthropic unless it's directly relevant to a question you ask.
4. Third-party services we use
- Supabase — database and authentication. All app data is stored in Supabase's infrastructure (hosted on AWS, US region). Supabase Privacy Policy
- Anthropic — AI processing for Oliver. Anthropic Privacy Policy
- Vercel — app hosting and deployment. Vercel Privacy Policy
- Cloudflare — website hosting and security. Cloudflare Privacy Policy
- Apple / TestFlight — iOS app distribution. Subject to Apple's privacy terms when downloaded from the App Store.
- Stripe (when billing is enabled) — payment processing. PrintDeck does not store your payment card details. Stripe handles all payment data. Stripe Privacy Policy
5. How long we keep your data
Your account and shop data is retained for as long as your account is active.
When you delete your shop (Settings → "Close up shop"), deletion is scheduled with a 30-day grace period — everything keeps working, and one tap cancels it if you change your mind. After the 30 days, deletion is permanent: your login, Oliver's memory of your shop, chat history, photos, customer records, inventory, printers, and operational history are erased and cannot be recovered. Before you confirm, the app offers you a complete backup of everything.
What we keep after deletion, and why:
- Anonymized financial records — order totals, line items, and expense amounts with every name, contact, and note removed — are kept for up to 7 years because tax law requires businesses to retain financial records (this is the standard exemption under GDPR Article 17(3)(b) and equivalent rules). These records cannot identify you or your customers.
- Anonymous printing statistics — aggregate numbers like failure rates by printer model or typical print times, with no connection to your shop, your name, your customers, or your chats — help PrintDeck get smarter for every shop. These are true aggregates, not your data with the name filed off, and they are only used once enough shops have contributed that no individual shop is identifiable.
- Your email on our do-not-contact list — if you've unsubscribed from emails, we keep the address itself on the suppression list so we can honor that choice (a system has to remember who not to email).
Some information may persist in encrypted backups for up to 90 days before being purged from those as well. Error logs are automatically purged after 90 days.
6. Your rights
You have the right to:
- Access your data — Settings → "Export my data" downloads a complete, readable copy of everything your shop has stored, on the spot. No request needed.
- Correct your data — update or fix any inaccurate information directly in the app
- Delete your data — Settings → "Close up shop" deletes your shop and account (30-day grace period, details in section 5). If you're a member of someone else's shop, "Delete my account" erases just you, immediately, and leaves the shop untouched.
- Withdraw consent — opt out of non-essential communications at any time
These rights apply wherever you are, including under GDPR (EU/UK) and CCPA (California). If you'd rather not use the in-app tools — or can't sign in — email us at [email protected] and we'll handle it for you. We'll respond within 5 business days.
7. Data security
All data in transit is encrypted via TLS. Data at rest is encrypted by Supabase. Row-level security policies ensure that your shop's data is only accessible to authenticated users in your shop — no other PrintDeck user can access your records. We do not have access to your plain-text password.
No system is perfectly secure. If we become aware of a breach affecting your data, we'll notify you promptly.
8. Children
PrintDeck is not intended for use by anyone under 13 years of age. We do not knowingly collect data from children under 13. If you believe we have inadvertently collected such data, contact us and we will delete it immediately.
9. Changes to this policy
If we make material changes to this policy, we'll notify active users by email and update the "Last updated" date at the top. Continued use of PrintDeck after changes take effect constitutes acceptance of the revised policy.
10. Contact
Questions about this policy? Email us at [email protected]. We're a small team and we actually read and respond to every message.