Privacy Policy
1. Who we are
LabPrints is an assumed name of Kalium L.L.C., a New York limited liability company. Mailing address: PO Box 4026, Clifton Park, NY 12065-0850.
2. Data we handle
This page covers ordering through the LabPrints connector, which lets an AI assistant order prints for you.
- Photos. Your assistant sends us links to your photos. We download each photo once, from the link, and keep the photo with your order. We do not keep the link you sent, because a link can carry a password to your gallery. We keep only a one-way fingerprint of your request, so that a retry does not create a second order; it cannot be turned back into the link.
- Your order brief. The instructions, photo captions and preferences, and options your assistant sends, and any changes you ask for.
- Contact email. The address your assistant gives us. We use it only to send your payment link while checkout is being enabled for your order, and to reach you if something goes wrong with it.
- Shipping address and phone number. The connector does not collect them. You enter your shipping address on our checkout page, which is hosted by our payment processor (section 4). A phone number, if collected at checkout, is used only to ship your order. We ship to addresses in the United States only.
- Payment details. We never see them. They are entered on the checkout page and handled by our payment processor (section 4).
- Account details for connector users. If we issue you an API key for the connector, we keep the email address it is tied to and a one-way hash of the key. We do not keep the key. The email is kept while the account is active and deleted within 30 days of closing it.
- Technical data. Our connector's logs record the IP address each request came from, order and account identifiers, which tool was called, timings and error codes. They do not record photo links, API keys, email addresses, shipping addresses or the content of your requests. The website's own logs record your IP address, user agent and time of visit.
3. How we use it
We use your data only to make your proof, produce and ship your order, contact you when your order needs attention, give support, and keep the service secure. We do not sell it, use it for advertising, or use it to train AI models.
4. Service providers
Hosting. Your photos are stored in a private storage bucket at Amazon Web Services (Amazon S3), in the United States, encrypted at rest. The connector's order records are kept in a database on a server we run at Amazon Web Services in the United States. Nightly backups of that database are kept in a private bucket at Amazon Web Services for 30 days.
Notifications to our staff. When an order is created or approved, the connector sends a notification that contains only an order number, the product and an internal account number, not your name, email or photos.
Payment. After you approve a proof, you pay on a checkout page hosted by a third-party payment processor (Stripe). Stripe collects your payment details, shipping address and email, and calculates sales tax. We never see your card details. Stripe handles your data under its own privacy policy.
Making your proof. A person at LabPrints builds your proof from your photos and brief, on their own computer. Your photos on that computer are deleted within 30 days of shipping. The finished proof comes back to the connector as images, which are deleted 45 days after the proof image is uploaded.
Receipts. After you pay, Stripe emails your receipt, which is your order confirmation.
Printing and shipping. When an order is paid, it goes to our internal print workflow, which creates an internal order record with the recipient's name and shipping address, the shipping method, the order's brief, and a payment reference from Stripe, plus a phone number if one is collected at checkout. Links to your photos that we pass to the print workflow stop working after 7 days. The print files for the order are stored internally and deleted 80 days after upload. Professional print labs produce the order and ship it to the address you entered. They receive the print files and the recipient's name, shipping address and phone number, if one is collected, used only to print and ship the order.
5. Retention
This is how long the connector keeps its own copies. Days are counted from the event in the last column.
| Data | Kept for | Counted from |
|---|---|---|
| customer photos | 45 days | the photos are received, whatever the order's state |
| proof images made for the order | 45 days | the proof image is uploaded |
| the contact email | 45 days | the order is created |
| the order's brief, photo captions and preferences, options, change requests, and a keyed fingerprint of the request and its idempotency key (for safe retries) | 45 days | the order is created (deleted with the photos) |
| everything for a test-mode order: its photos, any proof images and its record | 14 days | the order is created |
| the connector's order records: ids, product, status and timestamps | 365 days | the order is created |
| an API key holder's contact email | 30 days | the account is closed |
| service logs | 90 days | the log line is written |
Backups. The connector's database is backed up every night, and each backup is kept for 30 days. So a database item can remain in a backup for up to 30 days after the date above. For example, an order's brief is deleted after 45 days and can remain in backups for up to 75 days after the order was created. Photos are not copied into the backups.
Order records for paid orders. When an order is paid, our internal print workflow keeps an internal order record (the recipient's name and shipping address, the shipping method, the order's brief, and a payment reference from Stripe, plus a phone number if one is collected at checkout) for at least 7 years, for tax and accounting.
Payment records. Stripe keeps payment records under its own privacy policy. We never see card numbers.
6. Deletion and your rights
Anyone, anywhere, can ask to see, correct or delete their data by writing to the address in section 9. We answer within 30 days.
7. Security
Data is encrypted in transit. Photos are encrypted at rest. Each connector user can see only their own orders.
If we confirm a breach affecting your data, we will tell you without undue delay, and as the law requires.
Report a security issue to security@labprints.com.
8. Changes to this policy
We post changes on this page with a new effective date.