Privacy policy
Last updated: 21 October 2026
This policy covers what Printly collects when you use the website, the design studio and your account, why we collect it, and what you can do about it.
Who we are
Printly is a packaging design service. When this policy says "we" or "us", it means Printly. Questions about your data go to hi@justprintly.com.
What we collect
Account details: your email address and password when you sign up. We store the password only as a hash, never as plain text. In your settings you can add your name, company name, phone number, location and a profile photo.
Sign-in records: each time someone signs in to your account we log the time, the IP address, the browser and whether it worked. That's how we spot sign-ins that weren't you.
Your designs: the projects you save, with their earlier versions, box size, material and a preview image of the folded box. Photos and files you upload go into your asset library along with their name, size and dimensions.
Messages: whatever you send our team from your account.
Generate with AI: the brief you type and any reference image you add. We also record each use (which model ran, how much it produced and what it cost) to keep track of your usage allowance.
In your browser: your sign-in session and theme are kept in your browser's local storage, and your language in a cookie. If you arrive through an affiliate's link, a cookie named printly_ref keeps that affiliate's code until you sign up (for the number of days our affiliate program sets), so the affiliate is credited. We don't use advertising or tracking cookies.
Plans and credits: your plan, when it renews, and your credit history (what you bought, what each action cost and any refunds). Payments go through Polar: your card details go to Polar only and never reach us, and Polar tells us what was paid.
Teams: the teams you belong to, your role in each, and the invites sent to your email address.
Affiliate program: if you apply, your application, your referral code, the sign-ups and payments your link brings in, your commissions and payouts, and the bank details you give us for payouts (account holder, IBAN, bank name and country).
How we use it
We use your data to run your account, save your designs and show them in the editor, the 3D preview and your exports. We use it to answer your messages and to send the emails you need: verifying your address, resetting a password, team invites. We also use it to keep the service safe, for example by limiting repeated sign-in attempts.
We don't sell your data and we don't use it for advertising.
Services we use
Cloudflare R2 stores your uploaded files, project previews and design files. Resend sends our account emails. Replicate runs the AI models behind Generate with AI, and only receives your brief and reference image when you use that feature. Our servers and database run with a hosting provider, which stores the rest of your account data.
Polar sells Printly plans and credits for us as the merchant of record and handles payments, tax and receipts; it receives your name, email address and payment details. Anthropic runs Claude, which chats and designs in Generate with AI, and receives your brief, your messages and the files you attach there.
We give each of them only what it needs for its job.
How long we keep it
Your account data, designs and files stay with us while your account is open. Files you delete leave your asset library. A sign-in lasts up to 7 days unless you sign out or end it from your settings. An AI concept you don't apply is dropped after 30 minutes.
If you ask us to close your account, we deactivate it straight away. Tell us if you also want your data erased and we'll delete it, apart from records the law makes us keep, such as your payment and credit history.
Your choices
You can see and change your profile details in your account settings, and sign out every other device from there at any time.
You can also ask us for a copy of your data, ask us to correct it, or ask us to delete it. Write to hi@justprintly.com from the address on your account and we'll take it from there.
Keeping it safe
Passwords are stored hashed. The token your browser uses to sign requests expires after 15 minutes and is renewed in the background, and repeated sign-in attempts are slowed down. No system is perfectly safe, so if you think someone has got into your account, tell us at hi@justprintly.com straight away.
Changes to this policy
When we change this policy we update the date at the top. If a change affects how we use your data, we'll also tell you by email or in your account.
Contact
Questions or requests about your data: hi@justprintly.com.