Privacy policy
How Printvue collects, uses and protects personal data, and the rights you have under India’s DPDP Act and the GDPR.
Who we are
Printvue is a software service operated by We Are The Medium, a company registered in India with its office at [Registered office address], India (“Printvue”, “we”, “us”). For personal data covered by India’s Digital Personal Data Protection Act, 2023 we are the Data Fiduciary; for personal data covered by the EU or UK General Data Protection Regulation we are the controller.
This policy explains what personal data we collect when you use our website and the Printvue application, why we use it, and the rights you have. It is written to be read on its own, in plain language.
What we collect
| Category | Examples | Source |
|---|---|---|
| Account data | Name, work email, company, password (stored as a hash), role in your team | You |
| Billing data | Billing name and address, GSTIN, plan, invoices. Card or UPI details are handled by our payment processor; we never see or store full card numbers. | You, payment processor |
| Usage and device data | Pages viewed, features used, browser type, IP address, error reports | Your browser |
| Communications | Emails and messages you send to sales or support | You |
We do not collect the PDF files you open in Printvue, or the job names, client names and notes you enter. These stay in your browser on your own computer (see the next section).
How your files are handled
Printvue processes files the way a RIP does: a file comes in, is repaired, checked and fixed, and the result goes back to you. All of this runs inside your browser on your own computer. Files are never uploaded to our servers, and we never receive their contents.
So that you can re-open a job, the original and fixed files are kept in your browser’s storage on that computer. Each file is deleted automatically 24 hours after it was added. Job details (name, job ID, client, notes and preflight results) stay in your browser until you delete the job. Clearing your browser data also removes them.
If you choose to send us a file for a support request, we use it only to resolve that request and delete it when the request is closed.
Why we use your data
| Purpose | Basis under the DPDP Act | Basis under the GDPR |
|---|---|---|
| Creating and running your account | Consent, given when you sign up | Performance of a contract (Art. 6(1)(b)) |
| Billing, invoicing and tax records | Legitimate use to comply with law | Legal obligation (Art. 6(1)(c)) |
| Support and service messages | Consent | Contract; legitimate interests |
| Security, fraud prevention and fixing errors | Legitimate use; consent | Legitimate interests (Art. 6(1)(f)) |
| Product news and offers | Consent, which you can withdraw at any time | Consent (Art. 6(1)(a)) |
Who we share it with
We do not sell personal data. We share it only with service providers who process it for us under written contracts that require confidentiality and security:
- Cloud hosting for accounts and billing records (not your files)
- Payment processing for subscriptions
- Email delivery for account and support messages
- Error monitoring and basic analytics
We may disclose data where required by law, a court order or a lawful request from a government authority, or to protect the rights and safety of our users. A current list of providers is available on request at privacy@printvue.co.
International transfers
Our providers may store or process data outside the country where you live. Transfers from India follow the DPDP Act and any restrictions notified by the Government of India. Transfers of data from the European Economic Area, the United Kingdom or Switzerland are protected by the European Commission’s Standard Contractual Clauses or another lawful transfer mechanism.
How long we keep it
- Account data: while your account is open, then deleted within 30 days of closure.
- Your PDF files: not held by us. Copies in your browser are deleted automatically 24 hours after they were added.
- Files sent to support: deleted when the support request is closed.
- Invoices and billing records: for the period required by Indian tax and company law, currently up to eight years.
- Support messages: up to two years after the request is resolved.
If an account is inactive for three years we will email you at least 48 hours before deleting it, unless the law requires us to keep the data longer.
Your rights
Under India’s DPDP Act
- Get a summary of the personal data we process about you and how we process it
- Correct, complete, update or erase your personal data
- Withdraw consent at any time, as easily as you gave it
- Nominate another person to exercise your rights in case of death or incapacity
- Have a grievance addressed by our Grievance Officer, and then complain to the Data Protection Board of India if you are not satisfied
Under the GDPR and UK GDPR
- Access, rectification and erasure
- Restriction of processing and objection to processing based on legitimate interests
- Data portability
- Withdrawal of consent at any time
- A complaint to your local supervisory authority
To exercise any right, email privacy@printvue.co or use the settings in your account. We answer within 30 days, and we may need to confirm your identity first.
Security
Because files are processed on your computer, they are never exposed to our systems. Account and billing data is encrypted in transit and at rest, access is limited to staff who need it, and access is logged. If a personal data breach affects you, we will tell you and the authorities as the DPDP Rules and the GDPR require, including what happened, the likely impact and what we are doing about it.
Children
Printvue is a business tool for people aged 18 and over. We do not knowingly collect personal data from children. If you believe a child has given us personal data, contact us and we will delete it.
Cookies and local storage
We use only the cookies and browser storage needed to keep you signed in, remember preferences such as interface text size and marks defaults, keep your job list and files on your computer (files are deleted after 24 hours), and keep the service secure. We do not use advertising cookies. If we add analytics cookies that are not strictly necessary, we will ask for your consent first.
Grievance Officer and contact
Grievance Officer: [Name of Grievance Officer]
Email: privacy@printvue.co
Address: We Are The Medium, [Registered office address], India
We acknowledge grievances within 72 hours and resolve them within 30 days. If you are in the EU or UK, you can contact us at the same address about any GDPR matter. [EU / UK representative, if appointed]
Changes to this policy
We will post any change on this page with a new “last updated” date. If a change materially affects how we use your personal data, we will tell you by email or in the app at least 30 days before it takes effect and, where required, ask for your consent again.