Privacy Policy

Last updated: May 2026

1. Who We Are

AIPrinter (available at aiprinter.io) is operated by WAMMA LTD, a company registered in England and Wales with company number 17187505, registered office at 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom. WAMMA LTD is the data controller for the purposes of UK GDPR and the Data Protection Act 2018.

If you have any questions about this policy or how your data is handled, contact us at: aiprinter@wamma.io

2. Information We Collect

We collect only the information necessary to operate AIPrinter:

  • Email address — when you join our waitlist or subscribe to updates
  • Contact form data — your name, email, and message when you contact us
  • Usage data — limited analytics data such as page views and general traffic patterns. This data is aggregated and does not directly identify individuals

3. How We Use Your Information

We use your information to:

  • Send product updates and newsletters
  • Respond to inquiries and support requests
  • Improve our website and services
  • Maintain the security and performance of our platform
  • Comply with legal obligations

4. Legal Basis for Processing

We process personal data under the following legal bases:

  • Consent — when you subscribe to updates or join our waitlist
  • Contract — when processing orders and providing services
  • Legitimate interests — to improve, maintain, and secure our services
  • Legal obligation — where we are required to comply with applicable laws

5. Third-Party Services

We use trusted third-party providers to operate AIPrinter:

  • Google (Gemini, Imagen, Sign-in with Google)— when you generate a design, the prompt text and any reference image you upload are sent to Google's generative-AI APIs (Gemini for sketching, Imagen for finishing). When you sign in with Google, your name, email, and profile picture are transmitted via Google's OAuth flow.
  • Supabase — hosts our database and authentication layer. Stores user accounts, designs, orders, saved addresses, waitlist emails, and generation history.
  • Prodigi — fulfills, prints, and ships orders. We transmit the shipping address, product details, and the print-ready design file at the moment an order is placed.
  • Stripe — processes payments securely. We do not store payment card details; Stripe receives card details directly from your browser.
  • Resend — sends transactional emails (order confirmation, shipped, delivered, refunded). Email addresses are transmitted to Resend for delivery.
  • Formspree — processes contact form submissions from /contact. The name, email, and message you submit are sent via Formspree to our support inbox.
  • Ideal Postcodes — used for UK postcode lookup on the checkout address form. The postcode you enter is sent to Ideal Postcodes to retrieve matching street addresses.
  • Cloudflare Turnstile— protects forms and generations from automated abuse. Turnstile silently processes minimal client-side signals (IP address, TLS fingerprint, User-Agent header, and the Turnstile site key associated with this site’s origin) to distinguish humans from bots. No visible challenge is shown. Cloudflare acts as our data processor for these signals; see Cloudflare’s Turnstile Privacy Addendum for the full details of what Cloudflare collects and how.
  • Vercel — hosts the website and runs our serverless functions. Server logs may include IP addresses, user-agent strings, and request paths for operational and security purposes.

We only share the data necessary for each service to function. All providers are processing personal data on our behalf under data processing agreements, or as independent controllers where required by their own terms (e.g. Stripe for payment processing, Google for AI model usage).

6. Data Retention

We retain personal data only as long as necessary:

  • Email addresses are kept until you unsubscribe or request deletion
  • Contact form messages are retained for up to 12 months unless required for legal or operational reasons

You may request deletion of your data at any time.

7. Your Rights

Under UK data protection law, you have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate or incomplete data
  • Request deletion of your data
  • Restrict or object to processing in certain circumstances
  • Request transfer of your data (data portability)
  • Withdraw consent at any time
  • Lodge a complaint with the UK Information Commissioner's Office (ICO)

8. Cookies

We use essential cookies only for basic website functionality.

We do not use tracking cookies or third-party advertising cookies.

9. Changes to This Policy

We may update this privacy policy from time to time.

Any changes will be posted on this page with an updated “Last updated” date.