Who we are

Printly is a packaging design service run by Walnut. When this policy says "we" or "us", it means Walnut. Questions about your data go to hi@justprintly.com.

What we collect

Account details: your email address and password when you sign up. We store the password only as a hash, never as plain text. In your settings you can add your name, company name, phone number, location and a profile photo.

Sign-in records: each time someone signs in to your account we log the time, the IP address, the browser and whether it worked. That's how we spot sign-ins that weren't you.

Your designs: the projects you save, with their earlier versions, box size, material and a preview image of the folded box. Photos and files you upload go into your asset library along with their name, size and dimensions.

Messages, quotes and orders: whatever you send our team from your account, and any quote requests or orders you place.

Generate with AI: the brief you type and any reference image you add. We also record each use (which model ran, how much it produced and what it cost) to keep track of your usage allowance.

In your browser: your sign-in session and theme are kept in your browser's local storage, and your language in a cookie. We don't use advertising or tracking cookies.

How we use it

We use your data to run your account, save your designs and show them in the editor, the 3D preview and your exports. We use it to answer your messages and to handle quotes and orders, and to send the emails you need: verifying your address, resetting a password, team invites. We also use it to keep the service safe, for example by limiting repeated sign-in attempts.

We don't sell your data and we don't use it for advertising.

Services we use

Cloudflare R2 stores your uploaded files, project previews and design files. Resend sends our account emails. Replicate runs the AI models behind Generate with AI, and only receives your brief and reference image when you use that feature. Our servers and database run with a hosting provider, which stores the rest of your account data.

We give each of them only what it needs for its job.

How long we keep it

Your account data, designs and files stay with us while your account is open. Files you delete leave your asset library. A sign-in lasts up to 7 days unless you sign out or end it from your settings. An AI concept you don't apply is dropped after 30 minutes.

If you ask us to close your account, we deactivate it straight away. Tell us if you also want your data erased and we'll delete it, apart from records the law makes us keep, such as invoices.

Your choices

You can see and change your profile details in your account settings, and sign out every other device from there at any time.

You can also ask us for a copy of your data, ask us to correct it, or ask us to delete it. Write to hi@justprintly.com from the address on your account and we'll take it from there.

Keeping it safe

Passwords are stored hashed. The token your browser uses to sign requests expires after 15 minutes and is renewed in the background, and repeated sign-in attempts are slowed down. No system is perfectly safe, so if you think someone has got into your account, tell us at hi@justprintly.com straight away.

Changes to this policy

When we change this policy we update the date at the top. If a change affects how we use your data, we'll also tell you by email or in your account.

Contact

Questions or requests about your data: hi@justprintly.com.