Privacy Policy
Last updated: 24 September 2026
This Privacy Policy explains what personal data Printster collects, why, who we share it with, how long we keep it and the rights you have. It applies to the Printster website, the ordering app, our WhatsApp ordering service and any support conversation with us (together, the “Platform”). It is written to meet the Digital Personal Data Protection Act, 2023 (DPDP Act) and the Information Technology Act, 2000 and its rules.
Who we are
Printster is operated by Tech Udyam Solutions Private Limited (CIN U72900DL2016PTC303004), S-548A, 1st Floor, School Block, Shakarpur, Laxmi Nagar, Delhi 110092, India. For your personal data we are the Data Fiduciary: we decide why and how it is processed.
Questions or requests about your data: info@printster.in (subject line “Privacy request”), or our Grievance Officer, Gaurav Singh.
What we collect
| Data | Examples | Where it comes from |
|---|---|---|
| Account and contact details | Name, mobile number, email address | You, when you sign up, sign in with a one-time password or check out |
| Delivery details | Delivery and billing address, pincode, GSTIN (for business invoices) | You, at checkout |
| Files you upload | Documents, images and archives you send for printing, and the page previews we create from them | You, on the upload page, by WhatsApp, or from Google Drive or Dropbox when you choose to import from there |
| Order and payment records | What you ordered, prices, coupons used, Print Cash balance, invoices, payment status and transaction reference | Created when you order. We never see or store your full card number, CVV, UPI PIN or net-banking password. Those are handled only by the payment gateway. |
| Messages | Contact-form enquiries, emails, WhatsApp chats and call notes | You |
| Reviews | Ratings, review text and photos | You, if you choose to write a review |
| Technical data | IP address, device and browser type, pages visited, approximate location derived from IP, error logs | Your device, automatically; analytics only with your consent (see Cookie Policy) |
We do not ask for, and you should not send us, sensitive data such as health information, religious beliefs or biometric data. If a document you upload for printing happens to contain personal data about you or others, we process it only to print it.
Why we use it
| Purpose | Legal basis |
|---|---|
| Creating your account and signing you in | Your consent, and the contract with you |
| Printing, packing and delivering your order, and sending order and delivery updates by SMS, email or WhatsApp | Your consent, and the contract with you |
| Taking payment, issuing GST invoices and handling refunds | Contract, and legal obligations under tax and company law |
| Customer support and complaints | Your consent, and legal obligations under consumer protection law |
| Preventing fraud, abuse and security incidents | Legitimate uses permitted under the DPDP Act, and legal obligations |
| Understanding how the site is used so we can improve it (analytics) | Your consent, via the cookie banner |
| Offers, newsletters and promotional messages | Your consent. You can withdraw it at any time. |
We do not sell your personal data, and we do not use the content of your uploaded files for marketing, profiling or training AI models.
Who we share it with
We share personal data only with service providers (Data Processors) who process it on our instructions, and only as much as each needs:
- Print and finishing partners: your files and print specifications, to produce your order
- Payment gateways (such as Paytm, Razorpay and PhonePe, all RBI-authorised payment aggregators): order amount and contact details, to process your payment and refunds
- Couriers and shipping aggregators (such as DTDC, Shiprocket, Shipmozo and NimbusPost, and local delivery partners such as Porter): name, phone and delivery address, to deliver your parcel
- Messaging providers: SMS and one-time-password delivery (MSG91), WhatsApp (Meta Platforms’ WhatsApp Business Platform) and transactional email providers
- Cloud infrastructure: hosting (DigitalOcean), file storage and security (Cloudflare), error monitoring (Sentry), bot protection (Cloudflare Turnstile), address lookup (Google Maps) and machine translation of site text (Google Cloud Translation)
- Analytics: Google Analytics, only if you consent
We may also disclose data when required by law, a court order or a government authority, or to protect the rights and safety of our customers, staff or the public.
Where your data is stored
Our main databases are hosted in India. Some of our service providers (for example, email, error monitoring and analytics) may process data outside India. We only transfer data to countries not restricted by the Government of India under the DPDP Act, and we require providers to protect it.
How long we keep it
| Data | Retention |
|---|---|
| Uploaded print files and their previews | Files used in an order: kept for as long as your account is active, so you can reorder them. Files uploaded but never ordered may be deleted at any time. |
| Orders, invoices and payment records | 8 years, to meet tax and company-law record-keeping requirements (GST, Income Tax and the Companies Act), or as otherwise required by law |
| Account details | While your account is active. When you delete your account you are logged out at once, and after 30 days we erase everything that identifies you: your name, email, phone number, saved addresses and profile details. We keep tax invoices, which carry the buyer’s name, address and GST details, for 8 years (see above); every other order loses those details too. |
| Support messages and complaints | Up to 3 years after the issue is closed |
| Security logs | Up to 1 year, or longer when needed to investigate an incident |
Your rights
Under the DPDP Act you can:
- Access: ask for a summary of the personal data we hold about you and who we have shared it with
- Correct and update: fix inaccurate or incomplete data. Most details can be edited in your account.
- Erase: ask us to delete your data, subject to records we must keep by law
- Withdraw consent: at any time, as easily as you gave it. For example, use “Cookie settings” in the site footer, unsubscribe links in emails, or reply STOP on WhatsApp. Withdrawal does not affect processing already done.
- Grievance redressal: complain to our Grievance Officer, and then to the Data Protection Board of India
- Nominate: name someone to exercise these rights on your behalf in the event of death or incapacity
To make a request, email info@printster.in from the email address on your account, or tell us the mobile number on it. We may need to verify your identity before acting. We acknowledge every request within 48 hours and resolve it within one month.
Children
Printster is intended for people aged 18 and over. If you are under 18, a parent or guardian must place the order for you. We do not knowingly process a child’s personal data without verifiable parental consent, and we do not track or target advertising at children.
Security
We protect data with encryption in transit (HTTPS), access controls that limit staff access to what their role needs, and short-lived sign-in tokens. Payment details are handled entirely by PCI-DSS compliant payment gateways. No system is perfectly secure. If a personal data breach affects you, we will notify you and the Data Protection Board as the law requires. To report a vulnerability, see our Responsible Disclosure Policy.
Changes to this policy
We will update the date at the top when this policy changes. If a change materially affects how we use your data, we will tell you by email or on the site before it takes effect.