PrintYEG(“we”, “us”, “our”) operates a custom 3D printing service from Edmonton, AB. This Privacy Policy explains what personal information we collect, why we collect it, who we share it with, and the choices you have. We follow Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and Alberta's Personal Information Protection Act (PIPA).
1. Information we collect
We collect only what we need to fulfill your order:
- Account info — your email address (used as your sign-in identifier) and, if you sign in, an authentication session cookie.
- Order info — name, shipping address, phone number (optional), the items you order, and your order history.
- 3D model files — the STL/3MF/OBJ files you upload, along with file metadata such as filename, dimensions, weight, and print-time estimate.
- Payment info — handled directly by Stripe. We receive only the last 4 digits of your card, the card brand, and a Stripe payment-intent reference. We never see or store your full card number, CVC, or banking credentials.
- Communications — emails you send us and emails we send you about your order (order confirmation, status updates, refund notices).
- Basic technical data — IP address, user agent, and aggregate page-view counts via Vercel Analytics. This data is collected without cookies and is not used for advertising profiling.
2. How we use it
- To slice, print, package, and ship your order.
- To send you transactional email about your order.
- To respond to support requests, refund requests, and reprint requests.
- To detect, prevent, and respond to fraud, abuse, or violations of our Terms of Service.
- To meet legal obligations such as tax recordkeeping and responding to lawful government requests.
We do not sell your personal information. We do not use your uploaded files for any purpose other than fulfilling the specific order you attached them to. We do not train AI or machine-learning models on your files or order content.
3. Service providers we share with
We use a small number of third-party service providers to operate the site. They process personal information on our behalf, only for the purposes we direct, under contractual confidentiality obligations:
- Vercel Inc. (United States) — hosts the website and serverless functions; provides Vercel Blob storage for your uploaded model files; provides Vercel Analytics (no cookies).
- Neon Inc. (United States) — managed PostgreSQL database that stores account, order, and refund records.
- Stripe Payments Canada, Ltd. (Canada) — processes card payments and refunds.
- Sendinblue SAS / Brevo (France / European Union) — delivers transactional and sign-in emails.
Some of these providers are located outside Canada. Your personal information may be processed in the United States or the European Union and may be subject to lawful access requests in those jurisdictions. By using the service you consent to this transfer.
4. How long we keep it
- Uploaded model files are deleted from Vercel Blob storage 30 days after the order they belong to is fulfilled, unless you ask us in writing to retain them for reorders. Files attached to a cancelled or refused order are deleted within 7 days.
- Order records (line items, totals, shipping address, refund history) are retained for 7 years to meet Canadian tax and accounting recordkeeping requirements.
- Account emailis retained as long as the account is active. You can request deletion at any time (see “Your rights” below); we will anonymize the email on past orders rather than deleting the orders themselves, so we can keep our tax-required records intact.
- Sign-in session cookies expire after 30 days of inactivity.
5. Cookies & tracking
We use a small number of strictly necessary cookies that the site cannot function without:
- An authentication session cookie (set by NextAuth) when you sign in.
- A short-lived CSRF cookie used to protect form submissions and sign-in requests.
We do not use advertising cookies, marketing pixels, or third-party cross-site tracking. Vercel Analytics, which we use to count page views, is cookieless. Because we do not use non-essential tracking, we do not display a cookie consent banner.
6. Security
Connections to https://printyeg.com are encrypted with TLS. Uploaded files are stored on Vercel Blob with non-guessable URLs. Database connections use TLS. Payment data is handled directly by Stripe, a PCI-DSS Level 1 certified processor. No system is perfectly secure; if we become aware of a breach that affects your personal information, we will notify you and the appropriate privacy commissioner as required by law.
7. Your rights
You can ask us, at any time, to:
- Confirm what personal information we hold about you.
- Send you a copy of that information.
- Correct information that is inaccurate or out of date.
- Delete your account and any uploaded files we are not legally required to retain.
- Withdraw consent for non-essential processing.
Email hello@printyeg.com from the address on your account. We will respond within 30 days. If you are unhappy with our response, you may complain to the Office of the Privacy Commissioner of Canada (priv.gc.ca) or, for Alberta residents, the Office of the Information and Privacy Commissioner of Alberta (oipc.ab.ca).
8. Children
The service is not directed at children under the age of majority in their province or state. We do not knowingly collect personal information from children. If you believe a child has submitted personal information to us, contact us and we will delete it.
9. Changes to this policy
We may update this policy from time to time. The “Last updated” date at the top reflects the latest revision. Material changes will be communicated by email to active customers or by a prominent notice on this page.
10. Contact
Privacy questions or requests? Email hello@printyeg.com.