Privacy Policy

Last Updated: May 2026

Welcome to StudioPOD ("we", "our", or "us"). We are a Business-to-Business (B2B) Print-on-Demand (POD) and dropshipping fulfillment provider. This Privacy Policy explains how we collect, use, and disclose information about you ("Merchant", "Seller", or "you") and your end-customers ("End-Customers") when you use our website, integrations, and fulfillment services.

Because we fulfill orders on your behalf, we act as a Data Processor for your End-Customers' data, while you remain the Data Controller. We act as a Data Controller for your personal information as a Merchant.

1. Information We Collect

A. Merchant Data (Your Information)

When you register for an account or integrate your store (e.g., Shopify, Etsy, WooCommerce) with us, we collect:

  • Identity & Contact Data: Name, business name, email address, phone number, and billing address.
  • Financial Data: Payment details, credit card info, or PayPal data (processed securely by compliant third-party gateways).
  • Integration Data: Store URLs, API keys, and authorization tokens required to sync products and orders.

B. End-Customer Data (Order Fulfillment Information)

To manufacture and dropship products to your buyers, you provide us with:

  • Shipping Data: End-Customer name, shipping address, postal code, and phone number (required by logistics carriers).
  • Personalization Data: Custom text, names, dates, or uploaded images/designs required to manufacture the customized product.

Note: We NEVER contact your End-Customers directly for marketing purposes. We strictly act as your white-label manufacturing and shipping partner.

2. How We Use the Data

  • To Fulfill Orders: We use End-Customer shipping data and your design files exclusively to print, package, and hand over the parcel to logistics carriers (e.g., USPS, FedEx, YunExpress, 4PX).
  • To Process Payments: We use your Financial Data to bill you for manufacturing and shipping costs.
  • To Improve Our Services: Analyzing usage data to optimize our app dashboard, rendering speeds, and API sync reliability.
  • To Protect Intellectual Property: We may use automated AI visual tools (e.g., Vision LLMs) to scan product images strictly to prevent the infringement of third-party copyrights, watermarks, or store logos.

3. Data Sharing and Third Parties

We do not sell, rent, or trade your data or your End-Customers' data. We only share necessary data with trusted third parties to facilitate our B2B services:

  • Logistics Providers: Shipping addresses are shared with carriers to generate tracking numbers and deliver parcels.
  • Cloud & Hosting Services: Data is securely hosted on enterprise-grade cloud providers (e.g., Vercel, Supabase, Cloudflare R2).
  • Marketing & APIs (e.g., Pinterest): We utilize the Pinterest API (v5) to publish our own B2B catalog pins to attract POD sellers. We do not transmit any Merchant or End-Customer personal data to Pinterest.

4. Intellectual Property & Designs

As a POD seller, you retain all intellectual property rights to the artwork and designs you upload. We claim no ownership over your custom designs. Your design files are stored securely in encrypted cloud buckets and are only accessed by our production facility at the time of printing.

5. GDPR and CCPA Compliance

If you or your End-Customers are located in the European Economic Area (EEA) or California, you have the right to access, correct, or delete personal data. As the Data Controller for your buyers, it is your responsibility to handle your customers' privacy requests. If an End-Customer requests data deletion under GDPR/CCPA, you may forward this request to us, and we will purge their shipping details from our systems, retaining only anonymized transaction records required for accounting and tax purposes.

6. Data Security & Retention

We implement industry-standard encryption (SSL/TLS) for data in transit and at rest. We retain End-Customer shipping data for a maximum of 6 months after delivery to handle potential logistics disputes or reprints, after which it is anonymized.

7. Contact Us

For privacy-related inquiries, data deletion requests, or questions regarding our Data Processing Addendum (DPA), please contact our legal team at [email protected].