Who we are
GotPrinter is run by {{COMPANY_LEGAL_NAME}}, {{REGISTERED_ADDRESS}} (“GotPrinter”, “we”, “us”). For the personal data described here we are the Data Fiduciary under India’s Digital Personal Data Protection Act, 2023.
This policy covers:
- the website
gotprinter.com; - the outlet page you open by scanning an outlet’s QR code (
print.gotprinter.com); - the outlet partner portal (
partner.gotprinter.com) and the advertiser portal (ads.gotprinter.com); - the GotPrinter app that outlets install on the Windows computer connected to their printer.
The print outlet is an independent business, not part of GotPrinter. It receives your document so it can print it. What happens at its counter, such as pages left behind, is the outlet’s responsibility.
If you print at an outlet
You don’t need an account
We don’t ask for your name, phone number or email address to print. The outlet page identifies your phone’s browser with a random code instead (see “Device id” below). Our mobile apps, once they launch, may offer an optional account for extra features; printing on the website will still never need one.
Finding an outlet on the map
The outlet finder can sort nearby outlets by distance if you tap “Use my location”. That calculation happens in your browser; your location is never sent to us. The map images themselves come from OpenStreetMap’s tile servers, which see your IP address and the area of the map you view, under their own privacy policy.
Device id
The first time you open an outlet page, your browser creates a random id. It is stored in a cookie and in your browser’s local storage for up to 400 days. We use it to:
- show you which jobs in the outlet’s queue are yours, and nobody else’s;
- resend your document if the outlet’s computer restarts before printing it;
- link an online payment to the jobs it paid for, and refund the right person.
It is not linked to your name or phone number, is not used for advertising, and is not included in our usage statistics. Clearing your browser’s data for the outlet page removes it, and a new one is created on your next visit.
Your document
How it travels. Your document goes directly from your phone to the outlet’s computer whenever a direct connection can be made. When it cannot (usually within about 25 seconds), it passes through our relay server as AES-256-GCM ciphertext. The key is agreed between your phone and the outlet’s computer; we do not hold it and cannot read your document. The page tells you which of the two happened.
Office documents, text files and TIFF images. Word, Excel, PowerPoint and similar documents, plain-text and CSV files, and TIFF images cannot be printed as they are, so your phone first sends them over an encrypted (HTTPS) connection to our own converter, which turns them into a PDF. For these files we do see the document while it is converted. The converter runs in an isolated container with no internet access, receives the file type but not the file name, and keeps nothing: the document and the PDF are not stored or logged. You then preview that PDF, and it travels to the outlet as described above. PDFs and JPEG, PNG, GIF, BMP and WebP photos are never converted and never pass through the converter.
If an encrypted connection cannot be set up either, the document is not sent. It never passes through our relay unencrypted, and the page tells you it could not be sent securely.
What the outlet receives. The document, its file name, your print settings (pages, copies, colour, one- or two-sided) and your device id, which the outlet’s app uses to group your jobs.
On the outlet’s computer. The GotPrinter app keeps your document in memory and does not save it to the computer’s disk. There are two exceptions we know of: Windows’ own print system (the “spooler”) writes a temporary spool file while pages print, as it does for anything printed on Windows; and if a PDF is too unusual for our main renderer, the backup converter works from a temporary file. A document that is waiting for payment is dropped from memory after about 15 minutes if it is not paid for.
On your phone. So that a job can be resent without you choosing the file again, your browser keeps its own copy of documents up to 15 MB each (60 MB in total). The copy stays in your browser’s storage, not on our servers, and is deleted when the job is finished or after 24 hours, whichever comes first. The page also remembers the names of your last 50 uploads on your phone, so the queue can show them to you; the outlet page never shows your file names to other customers.
What we keep on our servers about a print job
- A fingerprint of the document, not the document. It is a keyed hash made with a secret your browser generates and never sends to us, so it cannot be turned back into your file, and nobody holding a copy of a document can use it to find out whether that document was printed. It lets the outlet prove a resent file is the one you sent. The copy used for resending is deleted after 7 days. The same fingerprint and the file’s exact size are also kept with the job record (see below), and the fingerprint is included in usage statistics.
- Job details: the outlet, number of pages, copies, colour or black and white, one- or two-sided, price, the document’s exact size in bytes, its fingerprint, whether it went directly or through the relay, whether it printed, failed or was refunded, and when. These records do not contain your device id, file name or document. They are deleted 90 days after the job ends.
- For online payments: the Razorpay order id and payment id, the amount, the payment and refund status, the outlet, your device id, the job’s fingerprint, the document’s exact size and page details, and the time of each step.
Visits
Your browser counts how many times it has opened an outlet page, and when it first and last did. When you open an outlet page, that count and a short label derived from your device id are sent to that outlet’s app, so the outlet can see how many customers are new or returning.
Usage statistics
The outlet page reports a fixed set of technical events, such as whether a transfer succeeded, how it travelled, how long it took, the document’s exact size in bytes and its fingerprint (the keyed one described above, never a plain hash of the file), your phone’s operating system type and whether it was on Wi-Fi or mobile data. Each report carries a random id that lasts only for one page load. Reports never contain file names, document content or your device id. Because the fingerprint is also stored with the job record, and for paid jobs next to your device id, we could match a usage report to a job; we do not do that to identify you, and nobody can match the fingerprint to a document without the secret that stays on your phone. We keep usage statistics for three months.
Unless your browser sends Global Privacy Control or Do Not Track, the outlet page also reports which buttons and steps you use (for example colour or black and white, whether you changed the number of copies, how far you scrolled, how long a step was open, that an error box appeared, and the furthest step you reached before leaving). It never reports what you type, which pages you picked, printer names or error text.
On the same terms it reports whether this browser has opened an outlet page before: first visit, returning, or unknown when your browser does not let us keep the count. It never reports how many times, when, or how long since your last visit, and carries nothing that connects one visit's reports to another's.
Usage statistics on this website
Unless your browser sends Global Privacy Control or Do Not Track, this website counts which buttons you use (for example finding an outlet or entering an outlet code), whether the outlet finder led to an outlet, and which kind of error box appeared. These counts are anonymous. We never send your location or distance from an outlet, what you type into the search box or the outlet code form, or any error text. An event about an outlet listed in the finder is filed under that outlet’s public code and carries no id, so it cannot be tied to your other activity on the page.
Payments
Online payments are processed by Razorpay. Your card, UPI or bank details go to Razorpay, not to us, and we never see them. We do not pre-fill or ask for your phone number or email address at checkout, but Razorpay’s checkout may ask for them; if it does, Razorpay collects them under its own privacy policy. We send Razorpay the amount, the outlet’s code and part of your device id, so a payment can be traced to the right job.
If you pay the outlet in cash, no payment information reaches us.
Network information
Like any website, our servers see your IP address when your browser connects. Our hosting provider processes it to deliver and protect the service. Our own database does not store it. To set up a direct connection to the outlet, your browser also contacts a public Google server that sees your IP address, and the pages load their fonts from Google Fonts.
If you run an outlet (partners)
When you create and use a partner account we collect:
- your email address, which you sign in with using a one-time code;
- your name, mobile number, business name and the type of partner you are;
- your outlet’s details: name, address, outlet code, prices, printers, and the kind of place it is (for example, near a college), which advertisers can target;
- the result of identity (KYC) verification, which we may carry out through a regulated verification partner. We do not store your Aadhaar number;
- bank account details for payouts: account holder name, account number, IFSC and bank name;
- the job, earnings and refund records of your outlets, and the ad pages printed at them;
- technical logs and crash reports from the GotPrinter app on your outlet computer, which we use to fix problems. They are designed not to contain customers’ documents or file names.
We use this to run your account, verify who you are, connect your outlet to customers, calculate and pay what you earn, and meet our legal and tax obligations.
Unless your browser sends Global Privacy Control or Do Not Track, the partner portal reports which steps and buttons you use, such as signing in, the set-up steps, saving prices, listing your outlet, pinning its location, getting a new outlet code, and which kind of error appeared. Events about one of your outlets are filed under that outlet’s code, so they are attributable to you as its owner through your account; they carry no session id. We never send your email, phone number, name, outlet name, address, bank details, prices, the map position you pin, or anything you type.
The GotPrinter app on your outlet computer also reports operational events about your outlet: when the printer becomes ready or unavailable and a broad reason (for example out of paper or offline), how long you took to decide on a jam, a reprint or a one-sided to two-sided turn, setup and update steps and failures, a stuck app window, and that a counter poster was printed. These are always on and have no opt-out, because they are how we keep your outlet working. They never include customers’ documents, file names, error text or any customer identifier. The app also sends the names of your printers, so you can switch each one on or off for GotPrinter orders in the partner portal.
If you advertise
When you create and use an advertiser account we collect:
- your email address, which you sign in with using a one-time code;
- your business name, contact name and phone number;
- your campaigns: the brief, targeting, dates, plan and status;
- the artwork you upload, kept in private storage and sent only to outlet apps that print it;
- a record of every ad page printed: which campaign, which outlet, and when, and any promo code printed on it.
Ads never use customers’ data. Campaigns are targeted by city, area, named outlet or kind of outlet. We do not use anything about the people printing, their documents or their device ids to choose which ad prints.
Unless your browser sends Global Privacy Control or Do Not Track, the advertiser portal reports which steps of booking a campaign you reach, which buttons you use, and which kind of error appeared (for example that a chosen audience had no reach). It never sends your email, name, business name, ad text, artwork, budget, dates or promo codes.
Why we use personal data
- to provide what you asked for: print your document, run your account, run your campaign;
- to take payments, issue refunds and pay outlets;
- to keep the service secure and prevent fraud and abuse;
- to find and fix faults, using the usage statistics and logs described above;
- to meet legal, tax and accounting obligations, and respond to lawful requests.
We rely on your consent, given when you use the service or create an account, and on the legitimate uses the DPDP Act allows, such as meeting a legal obligation. We do not sell personal data, and we do not use it to profile you.
Who else sees it
- The outlet you print at, as described above.
- Cloudflare, which hosts our website, servers, database, file storage, relay and usage statistics, and provides the network relay used when a direct connection needs one.
- Razorpay, which processes online payments and refunds.
- Resend, which delivers sign-in codes by email to partners and advertisers.
- Google, which serves the fonts on our pages and the public server used to set up direct connections, and so sees your IP address.
- Government or law enforcement authorities, when Indian law requires us to share information.
Some of these providers may process data outside India. We only use providers that protect it, and we do not transfer it to any country the Government of India restricts.
How long we keep it
| What | How long |
|---|---|
| Your document on the outlet’s computer | Only while it is being printed or waiting to print; about 15 minutes if it is waiting for a payment that never comes |
| Your document’s copy on your own phone | Until the job is finished, and never more than 24 hours |
| Document fingerprint for resending | 7 days |
| Job record, with the fingerprint and exact file size | 90 days after the job ends |
| Usage statistics, including the fingerprint and exact file size | 3 months |
| Payment, refund and job records | {{PAYMENT_RECORD_RETENTION_YEARS}} (default: 8) years, as tax and accounting law requires |
| Sign-in codes | 10 minutes, and used once |
| Partner and advertiser accounts | While the account is open; after it is closed, only what the law requires us to keep |
| Device id cookie | Up to 400 days in your browser, or until you clear it |
Your rights
Under the DPDP Act you can ask us to:
- tell you what personal data we hold about you and how we use it;
- correct, complete or update it;
- erase it, where we no longer need it and the law does not require us to keep it;
- withdraw your consent, which stops future use but does not undo what was done before;
- name another person to exercise these rights for you if you die or cannot act yourself;
- deal with a complaint about how we have handled your data.
Write to {{GRIEVANCE_EMAIL}}. If you print without an account,
we can only find your records through your device id or the job’s tracking code
(it looks like #TRK-… and is shown on the outlet page), so please include it.
We may need to confirm the request comes from you before acting on it.
If you are not satisfied with our answer, you can complain to the Data Protection Board of India. See Grievances and contact for how we handle complaints and how long we take.
Children
Partner and advertiser accounts are only for people aged 18 or over. The outlet page has no accounts and does not ask who you are, so it cannot know a customer’s age; it collects nothing about any customer beyond what is described above. If you are a parent or guardian and want records linked to a child’s device removed, write to {{GRIEVANCE_EMAIL}}.
Cookies and browser storage
We do not use advertising or third-party tracking cookies. The website
gotprinter.com itself sets none. The outlet page and portals store the following
on your device:
| Name | Where | Why | How long |
|---|---|---|---|
gotprinter_did | Cookie, outlet page | Your device id | 400 days |
gotprinter_uid | Cookie, outlet page | Short guest label derived from the device id, shown in the outlet’s app | 400 days |
gotprinter_device_id | Local storage, outlet page | Backup of the device id, in case the cookie is cleared | Until cleared |
gotprinter_visits | Local storage, outlet page | Visit count and dates | Until cleared |
gotprinter_jobs_v1, gotprinter_staged_v1, gotprinter_batch_order_v1, gotprinter_pending_payconfirm_v1 | Local storage, outlet page | Your current jobs, and the payment they belong to, so a reload or a trip to your UPI app loses nothing | 24 hours or less |
gotprinter database | Browser database (IndexedDB), outlet page | Copies of your documents for resending | 24 hours or less |
gotprinter_my_files | Local storage, outlet page | Names of your last 50 uploads, shown only to you | Until cleared |
gotprinter_tab | Session storage, outlet page | Which tab you were on | Until the tab closes |
partner_token, ads_token and related | Local storage, portals | Keeps you signed in | 30 days, or until you sign out |
Razorpay’s checkout, when it opens, may set its own cookies under Razorpay’s policy. These items are needed for the service to work, so there is no switch to turn them off; you can delete them at any time in your browser’s settings.
Security
All connections to our services are encrypted in transit. Documents that cross our relay are end-to-end encrypted as described above, and an upload that cannot be encrypted is refused. No system is perfectly secure. If a breach affects your personal data, we will tell you and the Data Protection Board of India as the law requires.
Changes to this policy
We will post any change on this page with a new effective date. If a change materially affects how we use data you have already given us, we will tell partners and advertisers by email before it takes effect.
Contact
Privacy questions and requests: {{GRIEVANCE_EMAIL}}, addressed to our Grievance Officer, {{GRIEVANCE_OFFICER_NAME}}. Everything else: {{SUPPORT_EMAIL}} (default: hello@gotprinter.com).