Privacy Policy

This Privacy Policy explains how AutoLabel handles personal data when you use the website, product and related support channels. It applies to account owners, team members and end-customer data included in order documents configured for automatic printing.

We collect the following categories of data:

• Account and profile data: name, email, authentication identifiers, team membership and role settings. • Store and integration data: connected store identifiers, integration tokens, webhook metadata and configuration preferences. • Order printing data: recipient name, delivery address, order line items and document/template settings needed to generate selected print documents. • Device and operational data: printer mappings, agent status, job queue metadata, logs and error diagnostics. • Support communications: messages, attachments and troubleshooting context you send to support.

We process personal data to:

• provide automatic order-document printing and related workflow features; • authenticate users and secure accounts; • maintain service reliability, detect misuse and troubleshoot failures; • provide customer support and respond to requests; • improve product performance, usability and documentation; • comply with legal obligations and resolve disputes when required.

Depending on your location, our legal bases include:

• contract necessity (to provide the service you request); • legitimate interests (service reliability, security and product improvement); • legal obligations (recordkeeping, compliance and lawful disclosures); • consent, where required by applicable law for specific activities.

We keep personal data only for as long as needed for the purposes above.

• Account and configuration data: retained while your account is active and for a limited period after closure for security, billing and dispute handling. • Print task records and webhook events: retained for operational troubleshooting, then deleted or de-identified on a rolling schedule. • Support records: retained as needed to resolve past issues, improve support quality and meet legal requirements.

When retention is no longer required, we delete or de-identify data using commercially reasonable controls.

We do not sell personal data for monetary consideration. We may share data with:

• infrastructure and hosting providers; • analytics, monitoring and security service providers; • customer support and communications providers; • professional advisers or authorities when legally required.

These parties are authorized to process data only for contracted purposes and under confidentiality/security obligations.

Your data may be processed in countries other than your own. Where required, we use appropriate safeguards (such as contractual protections) to support lawful international data transfers.

Subject to local law, you may have rights to access, correct, delete, restrict or object to certain processing, and to request data portability.

Regional differences apply. For example, California residents may have rights under applicable California privacy laws, including rights to know, delete and correct personal information, and to non-discrimination for exercising rights.

To request deletion, email [email protected] with subject line “Data Deletion Request” and include:

• your account email; • store identifier(s); • requested scope (account-only, specific store, or full deletion); • whether any legal hold or dispute is known.

Before acting, we verify identity using account-control checks (for example: signed-in confirmation, verified email challenge, or proof of control over the connected store domain/admin). If we cannot verify identity, we may request additional evidence and may deny the request until verification is completed.

We use cookies and similar local-storage technologies to operate essential website behaviors and support account workflows.

Current usage status:

• We do not currently run advertising trackers or cross-site behavioral tracking scripts on the public website. • If we introduce new analytics or advertising technologies in the future, we will update this policy before or when those technologies are enabled.

Cookie categories and retention:

• Strictly necessary cookies: used for core security, authentication/session continuity, load balancing and abuse prevention. Typical retention: session-only to 12 months depending on security purpose. • Analytics cookies: used to measure aggregate feature usage, page performance and reliability trends. Typical retention: up to 13 months. • Functional cookies: used to remember non-essential preferences such as interface settings and consent choices. Typical retention: up to 12 months.

Where consent is used as the legal basis (for example, optional analytics cookies), you can withdraw consent at any time.

You can withdraw or change consent by reopening the consent preferences panel from the website footer link labeled “Cookie Preferences” (or an equivalent control when available). You may also clear browser cookies/local storage to reset existing choices.

Withdrawing consent does not affect processing that occurred before withdrawal and may reduce some non-essential site functionality.

For privacy questions or rights requests, contact [email protected].

• Initial response target: within 3 business days. • Substantive request handling target: within 30 calendar days, unless local law allows an extension. • If extended, we will provide notice with reason and expected completion date.