1. Who we are and what this policy covers
EaselZip is currently operated by Marcella Pontes Trindade, an individual based in Brazil. For privacy questions, EaselZip is the controller of the personal data described in this policy unless a provider processes data under its own privacy policy.
This policy applies to easelzip.com, EaselZip accounts, print-pack processing, purchases, transactional emails, and support communications. It does not govern Etsy, Stripe, or other third-party services you choose to use independently.
2. Data we collect
Account and authentication data. We process your email address, display name when available, a stable account identifier, login/session information, and records needed to authenticate your account.
Pack and credit records. We store the artwork or pack name, original file name, processing status, file count, timestamps, credit balance and ledger entries, and temporary download metadata. A file name can reveal personal information, so consider using a neutral name.
Purchase data. We store order and payment identifiers, the credit pack purchased, amount, currency, status, refund or dispute status, and relevant timestamps. Stripe receives payment, billing, device, and fraud-prevention data. EaselZip does not receive or store your complete card number.
Technical and security data. Our hosting, database, security, and other infrastructure providers may process IP address, browser or device information, request timestamps, session information, and operational or error logs when you access the service.
Communications. If you contact us, we process your email address and the content, attachments, and history of the request.
3. Artwork and generated files
Your original JPG or PNG is loaded and processed in your browser and is not uploaded to EaselZip servers. The finished five-file Etsy Upload Pack is uploaded to private storage so an authenticated user can download it across a limited period. It expires after 24 hours. The optional full 21-file archive is built in your browser and is not stored by EaselZip.
Pack records such as the file name, status, file count, and timestamps may remain after the finished ZIP expires because they support account history, credits, troubleshooting, fraud prevention, and business records. See our File Policy for more detail.
4. Why and how we use data
We use data to create and secure accounts; process and deliver print packs; manage credits and purchases; restore credits after confirmed processing failures; provide support; prevent fraud and abuse; maintain logs and diagnose errors; comply with legal obligations; and improve reliability and usability.
Depending on your location and the activity, our legal basis may be performing our contract with you, complying with law, pursuing legitimate interests such as service security and fraud prevention, or your consent where required. We do not use your artwork for advertising or AI training.
EaselZip does not make decisions producing legal or similarly significant effects based solely on automated processing. Stripe and infrastructure providers may apply automated fraud or security checks under their own policies.
5. Service providers and disclosures
We use a limited set of providers that process data to operate EaselZip:
- Supabase for authentication and account infrastructure.
- Stripe for checkout, payments, refunds, disputes, and fraud prevention.
- Resend for transactional account emails.
- Cloudflare for delivery, security, database and private object-storage infrastructure.
- OpenAI / ChatGPT Sites for site publishing and hosting services.
We may also disclose data when legally required, to protect people or the service, in connection with a legitimate business restructuring, or with your direction. We do not sell personal information or share it for cross-context behavioral advertising.
6. Cookies, local storage, and analytics
EaselZip and its providers use essential cookies, browser storage, and session technologies needed for login, security, credits, checkout continuity, and core product operation.
EaselZip uses limited first-party product analytics stored in its own infrastructure to measure visits, completed sign-ups, first pack generation, checkout starts, completed purchases, pack-generation failures, and downloads. These records may include a pseudonymous browser-session identifier for visitors, an account identifier for signed-in users, timestamps, selected credit package, credit quantity, amount, currency, and download type. We do not include artwork, file names, full IP addresses, payment card data, or Stripe secrets, and we do not use third-party analytics or advertising trackers.
If we add third-party analytics, advertising technologies, or other non-essential tracking later, we will update this policy and provide any consent or opt-out controls required by law before using them.
7. Retention and security
The finished Etsy Upload Pack is scheduled to expire after 24 hours. Account, pack-history, credit, purchase, refund, dispute, support, and security records are kept while reasonably needed to provide the service, maintain accurate business and legal records, prevent abuse, resolve disputes, and meet applicable obligations. Provider logs and backups follow the providers' applicable retention schedules.
We use authentication, access controls, private storage, limited-duration downloads, encrypted network connections, and provider security controls. No online system is perfectly secure. Keep your email account protected and never send us passwords, verification codes, or complete payment card details.
8. Your privacy rights and choices
Depending on applicable law, you may request confirmation of processing, access, correction, deletion, anonymization, restriction, portability, information about sharing, withdrawal of consent, or review of certain automated decisions. You may also object to or opt out of processing where the law provides that right. We do not discriminate against users for exercising applicable privacy rights.
Send a request to support@easelzip.com. Tell us the email used for your EaselZip account and the request you want to make. We may need to verify your identity and may retain information that law, security, fraud prevention, accounting, or dispute-resolution obligations require us to keep.
9. International transfers, U.S. users, Europe, and children
EaselZip is operated from Brazil and uses providers that may process data in Brazil, the United States, Europe, and other countries. Privacy protections can differ by country. Where required, we and our providers use legally recognized safeguards for international transfers.
Brazilian users may exercise rights under the LGPD. Residents of U.S. states with applicable privacy laws may exercise the rights granted by those laws. Users in the EEA, United Kingdom, or Switzerland may have GDPR-style rights if those laws apply to the processing. This policy does not claim that every law applies to every user or to EaselZip in every circumstance.
EaselZip is intended for adults and is not directed to children. We do not knowingly collect personal data from anyone under 13, and accounts require users to be at least 18 under our Terms. Contact us if you believe a child has provided information.
10. Policy changes and contact
We may update this policy when EaselZip, its providers, or legal requirements change. We will post the new date here and provide additional notice when a change materially affects your choices or rights.
For privacy questions or requests, contact support@easelzip.com.