Privacy Policy

1. Who we are and what this covers

SMJ AI LLC, a Delaware limited liability company based in Wilmington, Delaware ("SMJ AI", "we", "us"), owns and operates Printless and is the data controller for the personal data described here, except where a business that issues prints is the controller of its own customer data. This policy covers the Printless and Printless Printer apps, the Business Portal (printer.printless.app), the Printless API and button, printless.app and our other websites, and delivery of prints over WhatsApp. Questions and requests go to privacy@printless.app.

2. Information we collect

3. How and why we use it

Where the GDPR or a similar law applies, the legal basis is shown in brackets.

• ·Create and secure your account, verify your number and sign you in (contract; legitimate interest in security)
• ·Deliver, store, display, search and let you verify prints, and add cards to wallets (contract)
• ·Send prints and status updates by push notification and, on eligible business plans, over WhatsApp (contract; consent where the law requires it)
• ·Run business tools: queues, catalogue, analytics about the prints a business issues, API keys and usage limits (contract)
• ·Bill subscriptions and confirm purchases with Apple or Google (contract; legal obligation)
• ·Answer support and contact requests (legitimate interest; contract)
• ·Keep the Service safe: detect fraud, abuse, forged prints and unauthorised access, and keep logs and backups (legitimate interest; legal obligation)
• ·Improve the Service using aggregated, de-identified usage information (legitimate interest)
• ·Comply with law, tax and accounting rules and lawful requests (legal obligation)

4. Who we share it with

We do not sell personal data and do not share it for advertising. We share it only:

• ·Between the business that issues a print and the customer who receives it — the business sees the number it sent the print to and the print's status; the customer sees the business's name, logo and contact details
• ·With the service providers listed in section 5, who process data only on our instructions
• ·When the law, a court order or a regulator requires it, or to protect the rights, safety or property of users, the public or SMJ AI
• ·With a buyer or successor if the Printless business is sold or merged, under this policy
• ·With your consent, or at your direction — for example when you share a print with someone

5. Service providers

• ·Amazon Web Services — application hosting and file storage (Mumbai, India region) and the connection to WhatsApp
• ·PlanetScale — database hosting (Mumbai, India)
• ·Cloudflare — websites, DNS, content delivery, bot protection (Turnstile), contact-form storage and security
• ·Google — Firebase Cloud Messaging for push notifications, Google Play for Android distribution and billing
• ·Apple — App Store distribution, billing and Apple Push Notification service, and Apple Wallet if you add a card
• ·Meta Platforms — WhatsApp Business Platform, for verification messages and delivery of prints over WhatsApp

6. International transfers

Our servers are in India and our providers operate in the United States, the European Union and other countries, so your data may be processed outside the country where you live. Where the law requires safeguards for such transfers we rely on the providers' contractual commitments, including standard contractual clauses, and on the protections described in section 7.

7. Security

Data travels over TLS and is stored encrypted. The content of each print is encrypted with its own key, access to production systems is restricted and logged, and we take daily backups. We test and review our security regularly. No system is perfectly secure; if a breach affects your data we will notify you and the relevant authorities as the law requires.

8. How long we keep it

• ·Account and profile data: while your account is open, then deleted within 30 days of closure
• ·Prints: for as long as the recipient or the issuing business keeps them. When a customer closes an account, the profile is deleted and the prints are no longer accessible to that person; the issuing business keeps its copy as a business record. When a business closes its account, the business is deactivated but the prints it issued stay verifiable for the customers who hold them, with the business name attached
• ·Contact and waitlist submissions: up to 24 months, or until handled and no longer needed
• ·Security, API and request logs: up to 12 months; backups: up to 6 months
• ·Billing records: as long as tax and accounting law requires

9. Your rights

Depending on where you live you may have the right to access, correct, delete or receive a copy of your personal data, to restrict or object to how we use it, to withdraw consent, and to complain to a data-protection authority. To exercise them:

• ·Delete your account and data at https://printless.app/account or in the app under Settings → Delete Account
• ·Export or correct your details in the app, or email privacy@printless.app for anything else
• ·We verify requests using your registered number and respond within 30 days (or sooner where the law requires)
• ·We will not treat you differently for exercising a right

10. Regional notices

11. Children

Printless is not directed at children. Customers must be at least 16, or the age of digital consent where they live, and business accounts require an adult. We do not knowingly collect data from anyone younger; if you believe we have, email privacy@printless.app and we will delete it.

12. Cookies and tracking

Our websites set a single functional cookie, pl_lang, to remember your language, and use Cloudflare Turnstile to protect forms from bots. We do not use advertising or analytics cookies, and the apps contain no advertising or third-party analytics SDKs. Because we do not track you across other sites, there is nothing for "Do Not Track" signals to switch off.

13. Notifications and WhatsApp

Push notifications can be turned off in your phone's settings at any time. WhatsApp messages from Printless are transactional — verification codes and the prints a business sends you; you can stop them by blocking the number in WhatsApp, and we do not send marketing over WhatsApp.

14. Changes to this policy

We may update this policy as the Service or the law changes. For material changes we give at least 30 days' notice in the app or on the website before they take effect. The date at the top shows when it was last revised.

15. Contact

SMJ AI LLC, Wilmington, Delaware, United States.

• ·Privacy and Grievance Officer: privacy@printless.app
• ·Support: support@printless.app
• ·General: hello@printless.app
• ·Website: https://printless.app