Privacy Policy

1. Who We Are

AIPrinter (available at aiprinter.io) is operated by WAMMA LTD, a company registered in England and Wales with company number 17187505, registered office at 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom. WAMMA LTD is the data controller for the purposes of UK GDPR and the Data Protection Act 2018.

If you have any questions about this policy or how your data is handled, contact us at: aiprinter@wamma.io

2. Information We Collect

We collect only the information necessary to operate AIPrinter:

• Email address — when you join our waitlist or subscribe to updates
• Contact form data — your name, email, and message when you contact us
• Usage data — limited analytics data such as page views and general traffic patterns. This data is aggregated and does not directly identify individuals

3. How We Use Your Information

We use your information to:

• Send product updates and newsletters
• Respond to inquiries and support requests
• Improve our website and services
• Maintain the security and performance of our platform
• Comply with legal obligations

4. Legal Basis for Processing

We process personal data under the following legal bases:

• Consent — when you subscribe to updates or join our waitlist, and for optional advertising cookies (section 8)
• Contract — when processing orders and providing services
• Legitimate interests — to improve, maintain, and secure our services
• Legal obligation — where we are required to comply with applicable laws

5. Third-Party Services

We use trusted third-party providers to operate AIPrinter:

• Google (Gemini, Sign-in with Google)— when you generate a design, the prompt text and any reference image you upload may be sent to Google's Gemini API to create the image. When you sign in with Google, your name, email, and profile picture are transmitted via Google's OAuth flow.
• Google Ads— only if you accept advertising cookies. Google's tag then records which of our ads brought you here, the pages you visit on our site, basic device and browser details, and — if you order — that a purchase happened, its value and an order reference. We use this to measure our adverts. Google also uses it under its own terms; see how Google uses information from sites that use its services.
• Meta (Facebook, Instagram)— only if you accept advertising cookies. Meta's pixel then records which of our ads brought you here, the pages you visit on our site and basic device and browser details. If you order, we also tell Meta directly from our server that a purchase happened, its value, an order reference, your IP address and browser, and your email address in hashed (scrambled) form, so Meta can match the order to an ad. We never send Meta your delivery address or your design. Meta also uses this data under its own terms; see Meta's privacy policy.
• OpenAI— for some products (stickers, at present), the prompt text and any reference image you upload are sent to OpenAI's image-generation API to create the image instead of Google's.
• Supabase — hosts our database and authentication layer. Stores user accounts, designs, orders, saved addresses, waitlist emails, and generation history.
• Prodigi — fulfills, prints, and ships orders. We transmit the shipping address, product details, and the print-ready design file at the moment an order is placed.
• Stripe — processes payments securely. We do not store payment card details; Stripe receives card details directly from your browser.
• Resend — sends transactional emails (order confirmation, shipped, delivered, refunded). Email addresses are transmitted to Resend for delivery.
• Formspree — processes contact form submissions from /contact. The name, email, and message you submit are sent via Formspree to our support inbox.
• Ideal Postcodes — used for UK postcode lookup on the checkout address form. The postcode you enter is sent to Ideal Postcodes to retrieve matching street addresses.
• Cloudflare Turnstile— protects forms and generations from automated abuse. Turnstile silently processes minimal client-side signals (IP address, TLS fingerprint, User-Agent header, and the Turnstile site key associated with this site’s origin) to distinguish humans from bots. No visible challenge is shown. Cloudflare acts as our data processor for these signals; see Cloudflare’s Turnstile Privacy Addendum for the full details of what Cloudflare collects and how.
• Vercel — hosts the website and runs our serverless functions. Server logs may include IP addresses, user-agent strings, and request paths for operational and security purposes.

We only share the data necessary for each service to function. All providers are processing personal data on our behalf under data processing agreements, or as independent controllers where required by their own terms (e.g. Stripe for payment processing, Google for AI model usage and, if you accept advertising cookies, Google Ads and Meta).

6. Data Retention

We retain personal data only as long as necessary:

• Email addresses are kept until you unsubscribe or request deletion
• Contact form messages are retained for up to 12 months unless required for legal or operational reasons

You may request deletion of your data at any time.

7. Your Rights

Under UK data protection law, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate or incomplete data
• Request deletion of your data
• Restrict or object to processing in certain circumstances
• Request transfer of your data (data portability)
• Withdraw consent at any time
• Lodge a complaint with the UK Information Commissioner's Office (ICO)

8. Cookies

Essential.We use essential cookies and similar browser storage for basic website functionality — for example, keeping you signed in and remembering your cookie choice. These don't need your consent.

Advertising (optional). With your consent only, we use Google Ads cookies (such as _gcl_au) and Meta cookies (_fbp, and _fbcif you arrive from one of our Facebook or Instagram ads) to see which of our adverts bring people to AIPrinter and which lead to an order. Neither Google's tag nor Meta's pixel is loaded, and these cookies are not set, unless you click “Accept” on our cookie notice. Without that, we don't send Meta anything about your order either. Rejecting them doesn't change how the site works.

We remember your choice on your device for 12 months if you accept, or 6 months if you reject, and then ask again. You can change your choice at any time with the “Cookie settings” link at the bottom of every page. Our site analytics (Vercel Web Analytics) is cookieless and does not identify you.

9. Changes to This Policy

We may update this privacy policy from time to time.

Any changes will be posted on this page with an updated “Last updated” date.