Privacy Policy

This policy applies to PrintNext.me and to the vendor and partner dashboards that run alongside it. It explains what we collect from customers, print shop owners and their staff, and partners. Nik Soft Designs LLP is the data fiduciary for this information.

We have written it in plain language and organised it around what you would actually want to know. Where a section describes something we do that you might not expect, we have said so rather than leaving it to be inferred.

When you upload a file to be printed, it is stored on our cloud storage, processed so we can count pages and check it will print, and made available to the shop printing it.

We do not read your documents ourselves, do not use them to train anything, and do not share them with anyone other than the shop printing them and, where you raise a dispute about a job, the members of our team looking into it.

If you would rather not have a document sit in our storage after it is printed, ask us to delete it — see your rights. We will remove it, keeping only the order record itself, which we need for tax and accounting.

What you give us

• Account details — your name, email address, phone number, and a password we store only as a one-way hash, so nobody here can read it.
• Documents and print settings — the files you upload and the choices you make about paper, colour, sides, copies and finishing.
• Addresses and location — a delivery address if you use delivery, and your approximate location if you let your browser share it, so we can show you shops that are actually near you. Sharing location is optional; without it you can search by area instead.
• Shop and business details, if you run a shop — your business name and address, GSTIN, PAN, and the bank account we pay you into.
• What you tell support — the contents of support tickets and dispute threads, including anything you attach to them.

What we record as you use the service

• Orders and payments — what you ordered, what it cost, how you paid, your print codes, and your wallet balance and transaction history.
• Device and connection — your IP address, browser, operating system, device type, screen size, language and country.
• How you got here and what you looked at — the page you came from, the pages you visited, and any campaign parameters in the link you followed. We keep the IP address here because it is the only thing that reliably distinguishes a real visitor from a bot, and because fraud investigation needs it.
• Security and audit records — sign-ins, and administrative actions taken on the platform, so a change to an account or a payout can always be traced to whoever made it.

Each of these has a purpose, and we do not use data collected for one purpose for an unrelated one:

• To print your job and get it to you — the file, the settings, and enough contact detail for the shop to tell you it is ready.
• To take payment and pay shops — including calculating our commission and the GST on it, and issuing refunds.
• To keep accounts and meet tax obligations — order and payment records, which we are required to retain.
• To handle disputes and support — we cannot look into a bad print without the order and the thread about it.
• To keep the platform safe — spotting fraudulent orders, abuse of promotional credit, and attempts to get into accounts.
• To understand what is working — aggregate reporting on traffic and campaigns, so we know which channels bring people who actually get something printed.

We share only what each recipient needs, and only for these reasons:

• The print shop handling your order — your files, your print settings, your name and the contact detail they need to reach you about the job. Not your other orders, and not your payment details.
• Our payment gateways — to take payment and issue refunds. Your card details go to them, not to us.
• Our infrastructure providers — cloud hosting and storage, email and messaging delivery, and error monitoring, all acting on our instructions and not for their own purposes.
• Partners, if a shop was introduced by one — the fact that shop joined and what the platform earned from them. Never a customer's details, and never a document.
• Authorities — where we are legally required to, or where we need to in order to establish or defend a legal claim.

Payments are processed by third-party gateways. When you pay, your card number, CVV and UPI credentials go directly to the gateway — they never reach our servers and we cannot see them.

What we store is the gateway's reference for the transaction, the amount, the method, and whether it succeeded. That is what lets us match a payment to your order, refund you, and answer you when you ask what a charge was for.

• Your account — for as long as you have one. Close it and we delete or anonymise what we are not required to keep.
• Uploaded documents — while your order is live, and after that until you or we delete them. If you want a document removed once it is printed, ask us and we will remove it. We are working towards deleting them automatically after a fixed period; until we say so here, please assume a file stays until it is deleted on request.
• Order, payment and invoice records — retained for as long as tax and accounting law requires, which is longer than your account. These are records of a transaction, not of your browsing.
• Support tickets and dispute threads — kept while they are open and for a reasonable period after, so a reopened complaint has its history.
• Traffic and campaign records — about 180 days, then deleted. Aggregate counts that identify nobody may be kept longer.
• Administrative audit records — about 90 days.
• Backups — about 30 days, then overwritten. Something you asked us to delete may persist in a backup until it rolls off.

• Traffic between you and PrintNext is encrypted in transit, and your documents are held in access-controlled cloud storage rather than on a public URL.
• Passwords are stored as one-way hashes. We could not tell you your password if we wanted to, and neither could anyone who stole the database.
• A shop's access is scoped to their own orders, and kiosk staff sign in with their own PIN so an action can be attributed to a person rather than to a shared terminal.
• Administrative actions are recorded in an audit log that administrators cannot edit.

No system is perfect. If we ever have a breach that affects you, we will tell you and the Data Protection Board of India as the Digital Personal Data Protection Act, 2023 requires.

Under the Digital Personal Data Protection Act, 2023 you can:

• Ask what we hold about you, and get a copy of it.
• Have it corrected if it is wrong, incomplete or out of date.
• Have it deleted, where we are not required to keep it. Orders and invoices usually have to stay; documents, marketing preferences and analytics usually do not.
• Withdraw consent you previously gave — for location, or for marketing email — without losing access to the rest of the service.
• Nominate someone to exercise these rights for you if you die or become incapacitated.
• Complain — to our Grievance Officer first, and to the Data Protection Board of India if we have not put it right.

Write to privacy@printnext.me from the address on your account. We will confirm we have your request within 48 hours and answer it within 30 days. There is no charge.

We use cookies and similar browser storage for two things: keeping you signed in, and understanding how people find and use the site.

• Essential — your session, so you stay signed in and your cart survives a page reload. The site does not work without these.
• Analytics and attribution — a visit identifier, the page you came from, and any campaign parameters in your link. Used in aggregate to see which channels work.

You can clear or block cookies in your browser. Blocking the essential ones will sign you out and stop checkout from working.

Transactional email — order confirmations, ready-for- collection notices, print codes, payment receipts, password resets. You cannot unsubscribe from these while you have an active order or account, because they are the service.

Marketing and digests — you can turn these off in your notification settings, or from the link in the email.

PrintNext is not intended for children under 18, and we do not knowingly collect their data. If you believe a child has given us personal data, write to privacy@printnext.me and we will delete it.

We will update this page as the service changes. If a change materially affects how we handle your data, we will tell you by email or in the app before it takes effect. The date at the top says when this version was published.