Privacy policy

Information we handle

Depending on how you place an order, we may handle:

• Account and contact details: your name, email address, password hash, account and Messenger-link status, and information you choose to include in a message. We do not store your website password in readable form.
• Orders and documents: files you upload or send, file names, print settings, page selections, copies, quotes, order and pickup status, and related service history. Documents may contain personal information that you chose to print.
• Payment and shop records: payment amount, method, transaction reference and status, refunds, and any account balance or reward entries used for an order. Online payment details are entered with PayMongo; iPrintMo keeps the transaction information needed to manage the order.
• Essential service and security data: account-session cookies, request and error details, and limited connection information used to keep accounts secure, prevent abuse, and troubleshoot the service.

During closed testing, a notice appears when automatic bug reporting is enabled. Reports contain technical error categories, page categories, code file locations, status codes and timestamps. These reports do not include uploaded documents, passwords, raw error messages, private order links or account identifiers. A button lets testers flag a problem that was not detected automatically. Reports are stored by iPrintMo in rotating logs, not sent to an external analytics provider.

How we use information

We use information to create quotes and orders, convert and print documents, take and reconcile payments, send order and pickup updates, provide account and Messenger linking, answer support requests, prevent fraud or abuse, and maintain shop records. Staff may review order details when needed to prepare, print, release, or resolve an order.

Print documents may be processed on the iPrintMo server and on the shop's processing computer before being sent to the printer. We use these files to provide the print service you requested.

Account cookies are used to keep you signed in and protect account actions. You can continue to use the public site without signing in, but some account features require a session cookie.

Google Docs, Google Drive and Gmail data

Google integrations are optional. You can upload a supported file from your device instead. Signing in to Google is separate from creating or signing in to an iPrintMo account.

Print from a Google Docs or Drive link

When you paste a Google Docs link into Print from a link, iPrintMo opens Google Picker at the linked document. Select that document in Google to grant access using drive.file. This permission limits access to files you select or share with the app. A link alone does not grant account access. Other public Google Drive links may be downloaded without Google sign-in when the owner permits it.

For the selected Google document, iPrintMo reads its name, file type, size when available, resource key, download permissions, tab names, tab identifiers, and parent/child tab order. You choose specific tabs or all tabs for printing. Google’s drive.file scope can permit creating, changing, or deleting selected files, but iPrintMo uses it only to read metadata and download or export the file. The print-import workflow does not edit, delete, or change sharing permissions on your Google source files. It does not request account-wide Google Docs access or bypass the owner’s access or download restrictions.

iPrintMo exports the selected tabs to PDF in document order, combines them into one printable file, and uses that file to calculate pages, print settings, previews, prices, and the final print job. Cancelling the tab-selection dialog adds no document to the order. The source document stays in Google; iPrintMo does not change its contents or sharing settings.

Browse Google Drive

If you use Browse Google Drive, Google Picker shows your files and lets you select the ones to print. This workflow requests drive.file, which Google limits to files you open or share with the app. That scope can permit creating, changing, and deleting selected files, but iPrintMo uses it only to read the selected file’s metadata and download or export its printable content. Our print-import code does not modify or delete your Google Drive source files.

Use, storage, and sharing of document data

Document names and selected-tab metadata are processed by the browser and iPrintMo server to carry out your selection. Imported PDFs, source files, generated previews, and print output are handled by your device and/or the shop’s processing computer as required by the selected printing workflow. Order file names, measurements, print settings, and service records are stored with the order. Authorized shop staff may access the imported files when needed to print, release, troubleshoot, or support your requested order.

The short-lived Google authorization tokens for Docs tab selection and Drive Picker are held for the current operation and sent over HTTPS to the iPrintMo server and, when needed, the shop’s file service. We do not save those tokens in order records, signed download tickets, browser local storage, or a refresh-token database. The separate shop Gmail connection described below has its own encrypted refresh token. Imported document files follow the print-file deletion schedule in this policy.

We use Google document data only to provide the print features you choose. We do not sell it, use it for advertising or profiling, use it to train general-purpose AI or machine-learning models, or share it for purposes unrelated to the requested print service. Google provides the document and authorization APIs; authorized shop staff, printing equipment, and the infrastructure providers identified below handle only the information needed to provide and protect the service.

iPrintMo’s use and transfer to any other app of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.

Disconnecting Google and deleting imported data

You can cancel Google authorization or decline a requested permission. You can revoke iPrintMo’s Google access at any time in your Google Account’s third-party connections. Revoking Google access prevents future authorized requests but does not automatically remove files already imported into a print order. Remove unwanted files from an editable draft, or contact [email protected] to request deletion of imported files and associated personal data. We may need the order reference and identity verification; transaction records that must be retained are handled as explained below.

Optional shop Gmail intake

Gmail print intake is an optional shop feature. If the shop owner connects a Google mailbox and enables intake, iPrintMo uses the Gmail API to check messages carrying the label selected by the owner. It accesses the sender's name and email address, message subject and identifiers, attachment details, and the contents of supported file attachments. It does not search unrelated mailbox messages.

The requested Google permissions are gmail.readonly to read labeled messages and their supported attachments, and gmail.send to email a customer a short-lived link for reviewing an intake. The integration begins disabled and is managed by the shop owner. iPrintMo does not delete or modify the original Gmail message.

Gmail data is used only to receive print requests, screen and temporarily hold their attachments, create the normal print-order draft after a customer follows the link, and send or resend that continuation link. It is not sold, used for advertising, or used to train general-purpose AI or machine-learning models. The mailbox refresh token is encrypted in the iPrintMo server's data directory and is used only for this intake feature.

Customer claim links expire after 30 minutes. Attachments that are not claimed are deleted after 72 hours. Once claimed, the files follow the regular print-file retention schedule below. Disconnecting the mailbox disables intake and removes the locally stored OAuth token; Google token revocation is also attempted.

The Gmail connection belongs to the shop mailbox. Customers using Google Docs tab selection or Drive Picker are not asked to grant Gmail access.

Who receives information

We share only the information needed to provide and protect the service:

• Shop staff and print equipment: authorized staff and the shop's processing computer and printer receive the order details and files needed to prepare, print, and release your work.
• Meta: Facebook Messenger handles messages sent to or from the iPrintMo Page and provides the Page-scoped account information needed for that conversation.
• PayMongo: processes online checkout and payment. PayMongo handles payment credentials under its own terms; iPrintMo receives transaction and payment-status information.
• Google: provides Gmail API services when the shop owner enables Gmail intake, and Google Drive services when a customer chooses a supported Drive or Docs import.
• Cloudflare and our VPS host: provide the network, tunnel, security, and server infrastructure that delivers the website and stores service records.

If you choose Browse OneDrive, Microsoft asks you to authorize read access to your OneDrive files. The picker lists folders you open and downloads only the file you select. Microsoft access tokens are kept in browser memory while the picker is open, are not saved in iPrintMo's database or browser storage, and are discarded when the picker closes. The selected file then follows the same processing and retention rules as a normal upload. No write, delete, or background-access permission is requested.

We do not sell personal information or share it for third-party advertising. Service providers process information to provide their services under their own privacy terms. Some providers may process information in other countries.

How long we keep it

For standard printing, originals and derived files are kept for the shop’s configurable complaint retention window after printing is confirmed (default 24 hours; staff can configure 0–8760 hours). Original-file downloads by staff are locked unless the signed-in order owner submits a print complaint and authorizes access. Authorized downloads are logged and stop when the retention window ends or files are deleted. A complaint does not extend the deadline, and files already deleted cannot be restored. Private Print originals stay on the customer’s device and are not made available to staff by a complaint; encrypted server packages retain their existing cleanup rules. Failed storage cleanup is retried. At this shop, eligible abandoned drafts, payment-pending orders and uncollected completed orders currently use a one-day file-retention setting. Picked-up, cancelled and refunded orders also use a one-day setting. The complaint window is a minimum hold before scheduled cleanup; customer-requested file removal or account deletion can remove files sooner. Other expiry periods are measured against order activity and are enforced by periodic cleanup, not an exact deletion-at-the-second guarantee. Queued, printing, held or otherwise unresolved orders may retain needed files until the order is resolved. Private kiosk storage may require separate confirmed cleanup. Unclaimed Gmail-intake attachments, when that optional intake is enabled, use a 72-hour expiry.

Order, payment, account, security, and financial records may remain after document files are deleted so the shop can manage accounts, resolve disputes, protect the service, and meet recordkeeping obligations. Backups may retain information for their separate backup lifecycle. You can ask the shop about information associated with your account or order.

Security

iPrintMo uses access controls, password hashing, secure account-session cookies, encrypted storage for the Gmail refresh token, and HTTPS for public website traffic. No internet service can promise that transmission or storage is completely risk-free. Please do not send passwords or payment-card details in a Messenger message or print file.

Your choices and rights

You may choose not to create an account or use optional Gmail intake. You can ask iPrintMo staff to access or correct your personal information, object to processing, or request deletion, blocking, or portability where applicable. We may need to verify your identity, and some transaction or financial records may need to be retained for legitimate service or legal reasons.

For a privacy request, email [email protected], contact the staff at the iPrintMo shop, or message the Facebook Page where you placed your order. Tell us how to reach you and enough information to locate the account or order; do not include your password. If you are in the Philippines, the National Privacy Commission explains data-subject rights at privacy.gov.ph.

Delete your iPrintMo account and request data deletion

In the Android app or website, open My account and choose Delete my account and request data deletion. You can also visit iprintmo.com/account/delete in any browser without reinstalling the app. Confirm your current password and the deletion warning. If you cannot sign in, contact [email protected] for identity-verified deletion help. Do not send your password.

We remove the website login name, email, password hash, sign-in sessions and Messenger-link/release-access permissions. An internal profile placeholder prevents historical record IDs from being reused; retained transaction records may still contain historical identifiers. Unpaid drafts are cancelled. Uploaded originals and derived previews/print files eligible for cleanup are removed from app-controlled storage; failed storage operations remain pending and are retried. A deletion receipt lets you check cleanup after your login is gone.

Files required for an active order are held until that order is resolved. Encrypted files on a disconnected private-print kiosk require staff-confirmed cleanup. Deletion does not by itself refund payments or settle credits, and it does not remove records held independently by payment providers, banks or cloud-source services.

We retain transaction, invoice, refund, signed rewards and security records where needed for financial reconciliation, disputes, fraud prevention and recordkeeping. Retained records may include historical customer identifiers and order details. There is currently no automatic expiry for these financial/security records and no fixed deletion period has been adopted; contact the shop for a record-specific retention explanation. Historical backups follow their own lifecycle and are not immediately rewritten by account deletion. This limitation does not prevent deletion of the website login or eligible document files.

Android version 1.4.0 and later is a browser-based web app. It does not register an Android print service or Share-menu file receiver and does not request notification or display-over-other-apps permission. Older native-printer builds have been retired. Uploading files through the website remains optional and uses your browser's file picker.

Changes to this policy

We may update this policy when our service or data practices change. The effective date at the top shows when the current version was published.