Privacy Policy

1. Controller

Codiro BV, Netherlands, is the controller for personal data processed about you as a PrintSol user. For personal data inside your own account — your customers' names and addresses arriving with orders — you are the controller and we act as processor on your instructions.

Privacy questions and requests: privacy@getprintsol.com.

2. What we collect about you

• Account data: name, email address, hashed password, language and theme preference.
• Consent records: which version of the terms you accepted, when, and the IP address it came from.
• Security data: sign-in timestamps and IP addresses, and an audit log of changes made in your account.
• Billing data: company name, address, VAT number and invoices. Card details are held by our payment provider, never by us.
• Support data: the tickets and messages you send us, plus a technical snapshot of your configuration attached automatically.
• Product data: your printers, materials, files, orders, costs and production history.

3. Why, and on what legal basis

• To provide the service you signed up for — performance of a contract.
• To bill you and keep accounts — contract, and legal obligation for tax records.
• To keep the service secure, including rate limiting, audit logging and abuse investigation — legitimate interest.
• To send service notices about outages, security and billing — contract. These are not marketing and cannot be opted out of while the account is open.
• To send product news, if you asked for it — consent, withdrawable at any time.

4. Your customers' data

Orders imported from your sales channels may contain your customers' names, addresses and contact details. We process this only to provide the service to you: matching orders, scheduling production and printing shipping information.

We do not contact your customers. We do not use their data for any purpose of our own. When you delete an order or close your account, their data is deleted with it.

5. Where it is held

Data is stored on servers in the European Union. Backups are encrypted and also remain in the EU.

Printer access codes are stored encrypted, so your bridges can be set up from PrintSol, and are never shown in full again. The bridge keeps its own encrypted copy on your hardware.

6. Who else sees it

We use a small number of processors, each under a data processing agreement and each limited to what it needs: hosting and database, transactional email, payment processing (Stripe, which holds card details and runs the checkout), and error monitoring.

On our public website only, and only if a visitor accepts marketing cookies: Google (Analytics and Ads), Meta and LinkedIn receive page visits and sign-up events to measure our own advertising. Nothing from inside your account is sent to them. See the Cookie Policy.

Our support staff do not have standing access to your account data. Access requires a one-time code that you generate and that expires by itself, and every such access is recorded in your audit log.

We do not sell personal data, and data inside your account is never used or shared for advertising.

7. How long we keep it

• Account and product data: while the account is open, then 30 days to allow export, then deleted.
• Audit and security logs: 12 months.
• Printer telemetry: 90 days at full resolution, then aggregated hourly and the raw detail dropped.
• Support tickets: 24 months after closure.
• Invoices and financial records: 7 years, as Dutch tax law requires. This is the one category we cannot delete on request.

8. Your rights

You have the right to access, correct, delete, restrict and port your data, and to object to processing based on legitimate interest. Export and deletion are available directly in the application; anything else, email privacy@getprintsol.com and we will respond within 30 days.

You can complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) or to the supervisory authority where you live.

9. Cookies

The application sets a session cookie to keep you signed in and a CSRF token cookie to protect form submissions. Both are strictly necessary and cannot be switched off while you use the service.

Analytics and advertising cookies are only set after you accept them in the cookie banner, and you can change that choice at any time under "Cookie settings" at the bottom of the website. The Cookie Policy lists every cookie.

10. Breaches

If personal data is breached in a way that is likely to risk your rights, we notify the supervisory authority within 72 hours and tell you without undue delay, including what happened, what data was involved and what we are doing about it.