Privacy Policy

1. Who we are

Pexify is a print-on-demand production and fulfillment partner and commerce operations platform operated by SARAWELL LLC, 420 Kuller Rd. Ste 204, Clifton, NJ 07011, USA. Sellers send us their designs; we produce personalized products (for example, laser-cut and engraved wood and leather goods) and ship them to the seller's buyers on the seller's behalf. We also provide AI-assisted product photography and listing optimization tools. For any privacy question or request, contact hello@pexify.net.

2. Our role: sellers' data and buyers' data

We handle two kinds of personal data, in two different roles:

• Seller data: the information our seller customers give us about themselves and their business (account, billing, support). For this data, Pexify decides how it is used and acts as the data controller.
• Buyer data: the information about a seller's buyer that comes with an order we fulfill (such as the recipient's name, shipping address, and the order's personalization). We process this data only on the seller's instructions and only to fulfill that seller's order. For this data, the seller is the controller and Pexify acts as the seller's data processor (service provider).

Buyers who have questions about their order data may contact the shop they bought from or contact us directly; we will help the seller respond.

3. Information we collect

Account information

When a seller creates an account, we collect information such as name, email address, business details, and the authentication data needed to provide the service.

Connected-store data

When a seller authorizes a connection to a marketplace or store (such as Etsy, Amazon, or Shopify), we access only the data required for the functions the seller requests. Depending on the integration and the functions enabled, this may include catalog and listing information, inventory levels, pricing, orders and order details, fulfillment information, and shipment and tracking status.

Buyer order data

To fulfill an order, we process the minimum buyer data needed to produce and ship it: the recipient's name, shipping address, the items ordered, the buyer's personalization request, and the shipping method selected. We do not request buyer payment card details, and buyer data is never collected for any purpose other than fulfilling the order. We receive this data from the marketplaces a seller connects and from the shipping and order-management tools a seller authorizes us to use.

Designs and production files

Sellers upload designs, artwork, and product files so we can produce their products. These files belong to the seller and are used only to produce the seller's orders and provide the services the seller requests.

Support and contact data

If you email us or contact support, we collect the information you provide so we can respond.

Usage and device data

We collect limited technical data (such as log data and device/browser information) needed to operate, secure, and troubleshoot the platform.

4. How we use information

We use information only to:

• Produce the seller's products, including the personalization the buyer requested;
• Create shipping labels and ship orders to the buyer on the seller's behalf;
• Send carrier and tracking information back to the marketplace order, so the buyer receives shipping updates and the order is marked shipped;
• Synchronize catalog, listings, inventory, pricing, orders, fulfillment, and shipment status across the seller's connected stores;
• Provide AI-assisted product photography and listing optimization tools at the seller's request;
• Communicate with sellers about their account, support requests, and service updates;
• Secure the platform, prevent abuse, and comply with legal obligations.

Buyer data is used only to fulfill the seller's order and report its shipment. We do not use buyer data for advertising, marketing, profiling, building customer lists, or contacting buyers for our own purposes. We do not sell personal information, and we do not use buyer data to train AI models. Our AI tools work on product, design, and listing content provided by the seller.

5. Legal bases for processing (GDPR)

Where the EU or UK General Data Protection Regulation (GDPR) applies, we rely on the following legal bases:

• Performance of a contract: to provide our services to sellers, and, on the seller's behalf, to produce and deliver the order the buyer purchased.
• Legitimate interests: to secure the platform, prevent fraud and abuse, and improve our services, balanced against the rights of the people concerned.
• Legal obligation: to keep records required by tax, customs, and accounting laws, and to respond to lawful requests.
• Consent: where we ask for it, for example for optional communications. Consent can be withdrawn at any time.

6. How we store and protect information

Data is stored on secured infrastructure in the United States. We protect it with:

• Encryption in transit (TLS) for all connections to our platform and to marketplace APIs;
• Encryption at rest for sensitive credentials, such as marketplace access tokens. We never ask for or store your marketplace passwords;
• Role-based, least-privilege access: only personnel who need buyer data to produce and ship an order can see it, and each seller can see only their own orders;
• Audit logging of privileged actions;
• Network controls, monitoring, and encrypted, access-restricted backups.

See our Security page for more.

7. How we share information

We share information only as needed to provide the service:

• Marketplaces and stores the seller connects: to perform the functions the seller requests (for example, confirming a shipment and tracking number back to the order).
• Shipping carriers and label providers: the recipient's name and shipping address, so the parcel can be labeled and delivered.
• Service providers / subprocessors: hosting, infrastructure, backup, shipping software, and similar providers that help us deliver the service. They may use the data only to provide their service to us, under agreements that require confidentiality and appropriate security.
• Legal and safety: when required by law, or to protect the rights, safety, and security of users and the platform.
• Business transfers: in connection with a merger, acquisition, or asset sale, subject to this Policy.

We do not sell or rent personal data, and we do not share buyer data with advertisers, data brokers, or any third party for their own purposes.

8. International data transfers

Pexify is based in the United States and stores data in the United States. When we receive personal data of buyers or sellers located in the European Economic Area, the United Kingdom, or Switzerland, we protect it with appropriate safeguards required by law, such as the European Commission's Standard Contractual Clauses, and with the security measures described in this Policy.

9. Data retention

We keep personal data only as long as needed for the purpose it was collected for:

• Buyer shipping data: (name and shipping address) is kept while the order is being produced and shipped. For orders from connected Amazon stores, buyer personal data is automatically and permanently redacted 30 days after confirmed delivery; it is retained longer only where a specific law requires it, solely to comply with that law. For other channels it is kept for up to 180 days after shipment to handle delivery issues, returns, and disputes, then deleted or de-identified. Order records we must keep for tax or accounting purposes are kept without the buyer's contact details where the law allows.
• Seller account data: is kept while the account is active and deleted or de-identified after the account is closed, except where the law requires us to keep it longer.
• Marketplace access tokens: are kept only while the store connection is in use, and are deleted when the connection is removed or the seller requests deletion.
• Backups: expire on a rolling schedule; deleted data is removed from backups when they expire.

10. Deleting your data

Sellers can disconnect any connected store at any time, which stops further access and synchronization. Etsy sellers can also revoke Pexify's access at any time from their Etsy account settings. You may request deletion of your data by following our Data Deletion process or by emailing hello@pexify.net. We will delete the data we hold about you, subject to legal retention requirements. When a seller asks us to delete their buyers' data, we do so as described above.

11. Your rights

Depending on where you live, you may have the right to access, correct, delete, or restrict processing of your personal data, to receive a copy of it (data portability), and to object to certain processing. Residents of California and other U.S. states may have similar rights under state privacy laws; we do not sell or share personal information for cross-context behavioral advertising. To exercise your rights, contact hello@pexify.net. We will respond within the time required by law (within one month under GDPR). Buyers may also contact the shop they purchased from.

If you are in the EEA or the UK, you also have the right to lodge a complaint with your local data protection authority. We would appreciate the chance to address your concern first.

12. Security incidents

If we become aware of a security incident affecting personal data, we will act promptly to contain it, investigate it, and notify affected sellers, the relevant marketplaces (as their developer terms require), and, where required, the competent authorities and affected individuals without undue delay, and within 72 hours where GDPR requires it.

13. Data from connected Etsy shops

When a seller connects an Etsy shop through Etsy's official OAuth authorization, Pexify accesses Etsy data through the Etsy Open API only to provide the functions the seller requests, as described on our Etsy integration page:

• reading the shop's orders (receipts) and the buyer shipping information needed to produce and ship them;
• sending carrier and tracking information back to the Etsy order once the item ships;
• reading and, at the seller's request, creating or updating the seller's listings and listing images.

Sellers who choose to install our Pexify Etsy Helper browser extension also send buyer shipping details and tracking updates from their own Etsy session; see Section 15.

Etsy buyer data is used solely to fulfill the seller's orders. It is never used for marketing, advertising, or profiling, never sold, and never shared with third parties except carriers and service providers as needed to deliver the order. We do not contact Etsy buyers for our own purposes. We comply with the Etsy API Terms of Use and keep Etsy data only as long as described in Section 9.

The term "Etsy" is a trademark of Etsy, Inc. This application uses the Etsy API but is not endorsed or certified by Etsy, Inc.

14. Data from connected Amazon accounts

When you authorize an Amazon connection, Pexify accesses Amazon data only to provide the seller-requested functions described on our Amazon integration page, and uses that data solely for those functions. You can disconnect your Amazon account at any time. Pexify is an independent platform and is not affiliated with or endorsed by Amazon.

For Amazon data specifically, the full data handling lifecycle is:

• Collected: order, listing and inventory data received through Amazon's Selling Partner API, only as the seller authorizes.
• Processed: used to run the seller-requested functions only — order fulfilment, listing and inventory alignment, and per-seller reporting.
• Stored: on access-controlled infrastructure; Amazon credentials are encrypted before storage, and buyer data is never copied to personal devices or removable media.
• Used: strictly purpose-limited; Pexify does not aggregate data across different sellers and does not use Amazon data for its own purposes.
• Shared: only with the carriers and service providers needed to fulfil the seller's orders, under agreements; never sold and never disclosed for advertising.
• Disposed: buyer personal information (name, address, phone, email, tax identifiers, gift notes) is automatically and permanently redacted 30 days after confirmed delivery; it is retained longer only where a specific law requires it, solely to comply with that law.

To request deletion at any time, see our data deletion page.

15. Pexify Etsy Helper browser extension

Pexify Etsy Helper is an optional Chrome extension for Pexify sellers. It runs only on Etsy's Orders pages, inside the seller's own logged-in Etsy session, and only after the seller pastes a connection code created in their Pexify account. It works only with the Etsy shop that code belongs to.

• Collected: for the seller's open Etsy orders: the order number and the buyer's name, shipping address and phone number as Etsy shows them to the seller.
• Processed: sent over an encrypted connection to the seller's own Pexify account and used only to fill in the shipping address of that order, like the buyer order data described in Section 3.
• Written back: for orders Pexify shipped, the extension enters the carrier and tracking number on the Etsy order, so the buyer receives shipping updates.
• Stored: in Pexify as part of the order, under the retention periods in Section 9. In the browser, the extension keeps only the connection code and a list of order numbers it has already sent; it does not keep buyer addresses.
• Not collected: browsing history, data from any other website, Etsy login credentials or payment details. The extension does not run on any page other than Etsy's Orders pages.
• Turning it off: remove the extension from Chrome, or turn it off in Pexify (Stores, your Etsy store, Browser extension); the connection code stops working immediately.

Data handled by the extension is never sold, never used for advertising, and never shared except with carriers and service providers as needed to deliver the order.

16. Cookies

We use strictly necessary cookies and similar technologies to operate and secure the platform (for example, to keep you signed in). We do not use them for advertising or to sell your data.

17. Children

Pexify is a business tool and is not directed to children. We do not knowingly collect personal information from children under 16.

18. Changes to this Policy

We may update this Policy from time to time. When we do, we will revise the "Last updated" date above and, where appropriate, provide additional notice.

19. Contact us

Questions or requests about this Policy or your data: hello@pexify.net · +1 (201) 889-6336 · SARAWELL LLC, 420 Kuller Rd. Ste 204, Clifton, NJ 07011, USA.