Privacy Policy

1. Introduction

Promos Ink ("we", "us", "our") operates the Contract Decorator Platform (the "App"), a Shopify application that helps contract decorators manage B2B orders for screen printing, embroidery, DTG, and DTF services. This Privacy Policy describes how we collect, use, and share information when you install and use the App.

2. Information We Collect

2.1 Shopify Store Data

When you install the App, we access the following data from your Shopify store via the Shopify API:

• Store name, domain, and contact email
• Product information (titles, variants, SKUs, pricing)
• Order information (order numbers, line items, customer details, shipping addresses, note attributes)
• Fulfillment data (tracking numbers, carrier information)

2.2 Art Files

Art files uploaded through the App (logos, artwork, design files) are stored in our secure cloud storage infrastructure. These files are associated with specific orders and are used for production purposes.

2.3 Brand Portal Users

When brand clients are invited to the Brand Portal, we collect their email address for authentication purposes via magic link login. No passwords are stored.

2.4 Usage Data

We collect standard web analytics data including page views, feature usage, and error logs to improve the App experience.

3. How We Use Your Information

• Process and manage B2B decoration orders
• Generate pricing quotes based on decoration specifications
• Facilitate communication between decorators and brand clients
• Analyze art files for print readiness
• Track production stages and fulfillment
• Send order status notifications via email
• Improve and maintain the App

4. Data Storage and Security

Your data is stored securely using industry-standard practices:

• Database: Supabase (PostgreSQL) with encryption at rest and in transit
• File Storage: Supabase Storage with signed URL access controls
• Hosting: Vercel with HTTPS/TLS encryption
• Authentication: Shopify OAuth 2.0 for store access; Supabase Auth for portal users

We do not sell, rent, or share your data with third parties except as required to provide the App services or as required by law.

5. Data Sharing

We share data only with:

• Shopify: Order and fulfillment data is synced back to your Shopify store
• Email Provider (Resend): Email addresses for sending order notifications
• AI Analysis (Vercel AI Gateway): Art file metadata for print readiness analysis (files are not shared externally)

6. Your Rights (GDPR)

Under the General Data Protection Regulation (GDPR) and similar regulations, you have the right to:

• Access: Request a copy of the data we store about you
• Rectification: Request correction of inaccurate data
• Erasure: Request deletion of your data
• Portability: Request your data in a machine-readable format
• Restriction: Request limitation of processing
• Objection: Object to processing of your data

We comply with Shopify's mandatory GDPR webhooks for customer data requests, customer data erasure, and shop data erasure. These are processed automatically when requested through Shopify.

7. Data Retention

We retain your data for as long as the App is installed on your Shopify store. When you uninstall the App, your access token is immediately revoked. After 48 hours, Shopify sends a shop erasure request and we delete all associated data including orders, art files, and account information.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by updating the "Last updated" date at the top of this page.

9. Contact Us

If you have questions about this Privacy Policy or want to exercise your data rights, contact us at: