Privacy notice
Last updated 11 September 2026
PrintMo is operated from South Africa and this notice is written to meet the Protection of Personal Information Act, 2013 (POPIA). Where we serve people outside South Africa we apply the same standard as a baseline.
Who we are
PrintMo (printmo.ai) is the responsible party for the personal information described here. You can reach us, including our Information Officer, at hello@printmo.ai. A person reads that address — we do not use unmonitored “no-reply” addresses, because you have rights you need to be able to exercise by replying.
What we collect
- Account information
- Your name, email address and the workspace you belong to.
- What you create
- The research briefs, product definitions and files you make in PrintMo, and their version history.
- Generation records
- What was generated, when, which model was used, and how much it consumed — so we can show you your usage and bill accurately.
- Marketplace data you connect
- If you connect a marketplace account, the data that connection returns, used only to provide the features you asked for.
- Audience data
- Where a feature analyses public creator content, we use official platform APIs or data an account holder has explicitly authorised us to read. We do not scrape. If an authorisation is withdrawn, the data derived from it is deleted.
- Technical information
- Standard server and error logs, including IP address, needed to keep the service running and secure.
We do not collect special personal information, and we do not knowingly collect information from children.
Why we process it, and on what basis
- To provide the service you have asked for — performance of our agreement with you.
- To keep it secure and working, including fraud and abuse prevention — our legitimate interest.
- To bill you accurately — performance of our agreement and our legal obligations.
- To send you service messages such as receipts and important changes — performance of our agreement. Marketing email is separate and only with your consent, which you can withdraw at any time.
Generative AI
PrintMo uses third-party AI models to generate text and other content. The material you submit for a generation is sent to that provider so it can produce a result. We select providers offering business terms under which submitted content is not used to train their models, and we name our current providers below. Your work belongs to you — we do not use it to train any model of our own.
Who we share it with
We use service providers who process personal information on our behalf, under contract and only on our instructions:
- Supabase — database, authentication and file storage (European Union)
- Vercel — application hosting
- Anthropic — AI generation
- Resend — transactional email
- Sentry — error monitoring
- Our payment processor — payments; card details are handled by them and never reach our servers
- Print providers — where you choose to produce a physical product, the details needed to fulfil it
We do not sell personal information, and we do not share it for advertising.
Where it is stored
Our database is hosted in the European Union. Transferring personal information out of South Africa is permitted under section 72(1)(a) of POPIA where the recipient is subject to a law upholding principles substantially similar to ours — the EU's General Data Protection Regulation does so. Some providers listed above operate in other countries under comparable contractual safeguards.
How long we keep it
We keep your account and what you create for as long as your account is open. After you close it we delete or anonymise your personal information within 30 days, except where we must keep specific records to meet a legal obligation, such as tax records.
Your rights
You may ask us to confirm what we hold about you, to correct it, to delete it, or to provide a copy in a portable format. You may object to processing based on legitimate interests, and withdraw consent where we rely on it. Write to hello@printmo.ai and we will respond within a reasonable period.
If you are not satisfied, you may complain to the Information Regulator of South Africa, or to your local data protection authority.
Security
Access to data is restricted by row-level security at the database, so one customer's work is not reachable by another. Data is encrypted in transit and at rest. Where we hold payment details, they are encrypted separately and access is logged.
Cookies
We use only the cookies needed to keep you signed in and to keep the service secure. We do not use advertising or cross-site tracking cookies.
Changes
If we change this notice materially we will tell you by email before the change takes effect.