Privacy Policy

Account and contact. Your email address, and your name if you give it. If you sign in with Google, we receive your Google account identifier, name and email — not your password.

Orders. What you ordered, options you chose, order status and history, and the messages you send us about an order.

Shipping. The delivery address you enter, and the tracking information our shipping providers return.

Payment. Handled by our payment provider (§4). We never see or store your card number. We receive confirmation that payment succeeded, plus the order and customer identifiers needed to match a payment to an order.

Content you upload. Photos, images and any description or prompt you give us — the raw material for the thing you are ordering — and the 3D models generated from them.

Usage. Pages visited and actions taken on the site, and standard server logs (timestamp, IP address, endpoint, status) kept for security and abuse prevention.

To make what you ordered, take payment, ship it, keep you updated, answer you when you ask for help, and keep the site from being abused. That is the whole list.

If you are in the EU or UK: our legal basis is performance of our contract with you for everything needed to fulfil an order, and legitimate interests for security, fraud prevention and basic analytics.

Turning a photo into something printable means processing it with AI services we do not operate. When you upload an image, it and any description you wrote are sent to one or more of the providers in §4, which return a 3D model or an image we then prepare for printing.

We do not use your uploads, or the models made from them, to train AI. The providers we use are engaged under business terms that likewise do not permit training on data sent through their APIs.

Please do not upload photos of other people without their agreement, and do not upload anything you do not have the right to use. See our Terms of Service.

If your order involves a photograph of a child, it should be uploaded by that child’s parent or guardian. See §8.

We do not sell your data. We share it only with the providers below, and only as far as each needs to do its job.

Making your order

• Tripo3D — converts your photo into a 3D model. Receives the image and prompt.
• fal.ai — image and model generation. Receives the image and prompt.
• Anthropic — reviews and describes uploads, helps with support replies, and assists in preparing a model. Receives the image and/or text involved.
• OpenAI — same category of work as above. Receives the image and/or text involved.

Running the business

• Shopify — payments, checkout and order records. Handles your card details directly; we never receive them.
• Amazon Web Services (S3) — storage for your uploads and generated models (United States).
• Cloudinary — image delivery.
• Resend and Google (Gmail) — order and support email.
• Google — sign-in, and file storage where an order requires it.
• Shippo and USPS — shipping labels and tracking. Receive your delivery address.
• PostHog — product analytics (United States).
• Vercel — website hosting.

We may also disclose data where the law requires it, or to protect the safety of our customers or the public.

Uploads and generated models — kept while your order is active and for a period afterwards so we can reprint, fix or reproduce it if something goes wrong. Ask us to delete them sooner and we will.

Order and billing records — kept as long as tax and accounting rules require.

Account details — kept while your account exists.

Security logs — kept long enough to investigate abuse, then discarded.

Want a specific number for any of these, for your own records? Email us and we will tell you what is currently in place.

Wherever you live, you can ask us to show you the data we hold about you, correct it, or delete it — including your uploaded photos. Email support@printmywhatever.com from your account address and we will respond within 30 days.

California residents: you have the rights described in the CCPA, including to know, delete, correct, and opt out of the sale or sharing of personal information. We do not sell or share personal information for cross-context behavioural advertising.

EU/UK residents: you additionally have the rights to portability, restriction, and objection, and may lodge a complaint with your supervisory authority.

Traffic to and from this site is encrypted in transit. Access to customer data is limited to what is needed to run the business. Card details never reach our systems.

We operate in the United States. If you use the site from elsewhere, your data is transferred to and stored in the United States.

This site is not directed at children under 13 and we do not knowingly collect their personal information. Orders involving a photograph of a child should be placed by a parent or guardian. If you believe a child has given us personal information, contact us and we will delete it.

If we change this policy in a way that materially affects you, we will say so on this page and update the date above before it takes effect.