Privacy Policy — Digitappe

What we collect

Account details: Name, email, phone, company name and saved addresses. If you sign in with Google, we receive your name and email from Google. Passwords are stored only in hashed form.
Orders and quotes: What you ordered, the specs and prices, billing and shipping addresses, delivery choices, proof approvals and order history.
Your print files: The files you upload, and the previews and proofs made from them. We open them only to check, proof and print your order.
Payment: Card details go straight from your browser to Stripe. We never see or store your full card number. We keep the card brand, last four digits and payment status so we can show and refund your order.
Messages: What you send through the contact form, quote requests, live chat and email, plus your email address if you join our mailing list.
Browsing data: Pages viewed, products viewed, cart and checkout steps, your IP address, and browser and device type.

Fill your order: Check and proof your files, print, ship, take payment, calculate tax, and handle reprints and refunds.
Keep you updated: Order confirmations, proofs, status and tracking emails, and replies to your questions.
Marketing email: Deals and printing tips, only if you signed up. Every marketing email has an unsubscribe link.
Protect the site: Stop spam, fraud and abuse, and keep accounts and files secure.
Improve the shop: See which pages and products are used, and measure how our ads perform.
Meet legal duties: Keep the tax and accounting records the law requires.

We share personal information only with the companies that help us run the shop, and only what each one needs for its job.

Stripe: Payment processing, saved cards, sales tax calculation and fraud screening. Receives your card details, billing address, email and order total.
Shippo and carriers: Shipping rates, labels and tracking. Shippo and the carrier you choose (such as UPS, USPS or FedEx) receive the recipient name, address, phone and email.
Supabase: Our database, sign-in system and private file storage. Holds your account, orders and uploaded files.
Vercel: Website hosting. Processes page requests, including IP address.
Resend: Sends our email. Receives your email address and the content of each message.
Crisp: Live chat. Receives your chat messages and, when you are signed in, your name, email and company so we know who we're helping.
Cloudflare Turnstile: Spam and bot protection on forms and checkout. Receives your IP address and browser signals.
Upstash: Rate limiting that blocks abuse. Receives your IP address or account ID.
Google: Sign in with Google, if you choose it. Google Tag Manager, Google Analytics and Google Ads for measurement and advertising.
Meta and LinkedIn: Advertising measurement. Their tags can record pages you view and purchases you make on our site.

We also disclose information when the law requires it, to protect our customers or our rights, or to a successor if the business is sold or merged.

Sign-in cookies: Keep you signed in to your account. Required for accounts to work.
Cart cookie: Remembers your cart and uploaded files when you shop without signing in.
Visitor ID: A random ID saved in your browser so we can count visits and checkout steps. It doesn't contain your name or email.
Preferences: Small settings saved in your browser, such as a dismissed popup.
Analytics and ad cookies: Set by Google, Meta and LinkedIn. These companies can recognize your browser on other websites and use that to measure and target advertising.
Your controls: You can block or clear cookies in your browser settings. Sign-in and the cart need theirs to work.
Do Not Track: Browsers can send a “Do Not Track” signal. There is no common standard for it, so our site does not change its behavior when it receives one.

Abandoned carts: Carts with no activity for 60 days are deleted, along with any files uploaded to them.
Orders and order files: Kept so you can track, reorder and get support, and to meet tax and accounting rules. Ask us and we will delete the print files from a finished order.
Accounts: Kept until you delete your account. Deleting it removes your profile, addresses, cart and saved quotes. Past orders stay in our records with your personal details removed.
Mailing list: Kept until you unsubscribe.
How we protect it: The site runs over an encrypted connection. Print files sit in private storage and open only through short-lived links. Staff access is limited and logged. No system is perfectly secure, so we can't promise absolute security.

See or correct your details: Signed-in customers can review and edit their profile and addresses under Account. Anyone can email support@digitappe.comand we'll send or correct what we hold.
Delete your account: Delete it yourself under Account → Settings, or email us and we'll do it for you.
Stop marketing email: Use the unsubscribe link in any marketing email. Order and proof emails still reach you, because your order depends on them.
How we respond: We reply within 1–2 business days and may ask you to confirm you own the email address on the account before we act.
California residents: We don't sell your personal information, and we don't give it to other companies for their own direct marketing. You won't be treated differently for making a privacy request.

Children: Our site is for businesses and adults. We don't knowingly collect information from children under 13. If you believe a child has given us information, email us and we'll delete it.
Where data is processed: We are based in California and our service providers process data in the United States.
Links to other sites: Carrier tracking pages and other outside sites have their own privacy policies.
Changes to this policy: When we change this policy we post the new version here and update the date at the top. For significant changes we also email account holders.