1. Introduction
As part of our mission to help our customers sell more online, PitchPrint, Inc. collects and processes certain information in the course of our business. This Privacy Policy is intended to help you better understand how we collect, use, and store your personal information.
We may update this Privacy Policy from time to time to reflect changes to our privacy practices or for other operational, legal, or regulatory reasons. If we make material changes to this Privacy Policy, we will give notice of such changes by posting the revised policy on this website and, where appropriate, by other means.
By continuing to use this website, our technology, or our support services after changes are posted, you agree to the revised policy.
2. Terms
Customer: A person or company dealing directly with PitchPrint or installing one of our products on their store.
User: Any person or company that shops at a store using our technology.
Data subject: A person about whom personal data relates.
Site: Our front-facing website, www.pitchprint.com.
3. What information do we collect on our site and why?
When you visit the Site, we automatically collect certain information about your device, including information about your web browser, IP address, time zone, and some cookies installed on your device.
As you browse the Site, we also collect information about the individual web pages or products that you view, what websites or search terms referred you to the Site, and information about how you interact with the Site.
We refer to this automatically collected information as Device Information.
4. What information do we collect from Customers and why?
When Customers sign up for our service, we collect their full names, email addresses, and company names. We limit what we collect to these three items and use them as unique identifiers for each Customer.
We also use this information to send transactional emails to Customers and notify them of feature releases and bug fixes.
When Customers subscribe to any of our paid plans, we engage payment merchants including Stripe Inc., 2Checkout Inc., and FastSpring Inc. to collect additional information for the purpose of effecting and processing payments. This may include Customer address with ZIP code and, in certain instances, tax ID numbers for invoicing.
This personal information may also be used to block certain transactions that appear fraudulent through automated decision-making systems and is stored securely.
Our payment merchants are certified as PCI DSS Level 1 compliant service providers. You may read more at https://stripe.com/us/privacy.
5. What information do we collect from Users and why?
By default, we do not gather information from Users except information that is pushed to us via webhooks, if that feature is enabled, and UserData if Users are logged in during design customization.
Webhook data that is pushed to us may include product title, product ID, email address, shipping information, and billing information.
When webhook information is pushed to us, it is stored in our database and only accessed through webhook dispatch for further propagation to the Customer's desired endpoint.
We do not collect Users' credit card or financial data in any way, capacity, or means.
UserData may include a User's name, address, email, and phone number. This information is only used in certain designs to customize design parameters.
8. For how long do we retain your information?
In general, we keep your personal information throughout your relationship with us.
Once you terminate your relationship with us, we generally continue to store archived copies of your personal information for legitimate business purposes, such as defending a contractual claim or for audit purposes, and to comply with the law.
This does not apply where we receive a valid erasure request or where you, as a Customer, terminate your account and your personal information is purged pursuant to our standard purge process.
We will continue to store anonymous or anonymized information, such as website visits without identifiers, in order to improve our Services.
9. What we do not do with your personal information
We do not and will never share, disclose, sell, rent, or otherwise provide personal information to other companies for the marketing of their own products or services.
If you are a Customer, we do not use the personal information we collect from you or your Users to independently contact or market to your Users.
PitchPrint does not possess or share credit history or credit card information with other companies or third parties. All credit card processing is handled by our approved credit card processors.
10. How do we keep your personal information secure?
We follow industry standards on information security management to safeguard sensitive information, such as intellectual property, order details, and any other personal information entrusted to us.
We employ Secure Socket Layer encryption standards across our communication channels to support industry-standard communication compliance.
No method of transmission over the Internet or method of electronic storage is 100% secure. Therefore, we cannot guarantee the absolute security of your personal information.
11. Where do we store your data?
Currently, all our data is stored on Amazon AWS. Our main servers are located in the AWS EU-West-1 Region, which is based in Ireland. We selected Ireland because it is central to both Europe and the Americas, where most of our customers are.
This data center has three isolated availability zones. Each availability zone is isolated in terms of power supply, physical location, and Internet connectivity. Data is stored in three segregated locations within Ireland.
For backup, we replicate file uploads, project data, and design data in the AWS US-East-1 Region, based in North Virginia, USA. This region has four availability zones.
We deploy AWS DynamoDB automated on-demand backups to create a daily backup of our database. This maintains incremental backups for the last 35 days, and we can restore lost data from one day old up to the past 35 days.
We use AWS CloudFront as a content delivery network for static data, including designs, pictures, and project data. CloudFront helps make static data available across AWS regions globally for faster access.
12. Personal data breach reporting
PitchPrint will notify the Customer after becoming aware of a personal data breach resulting from a breach of our security.
PitchPrint is committed to ensuring that its incident response program meets the requirements of the GDPR.
The specifics of breach notification are handled through a Customer's contract with PitchPrint.
13. Control over your data and erasure
PitchPrint understands that you have rights over your personal information. If you are concerned about data collected, please contact us to make the required changes.
If you have questions about your personal information or this policy, or if you would like us to erase your data, please contact us by email at support@pitchprint.com or by using the contact details available on our website.