Terms of Service

9. Processing your clients' data (DPA light)

When you put data about your clients into your instance (names, e-mail addresses, documents, details of their processes), we process it on your behalf. This section is our data processing agreement under Art. 28 GDPR, in plain language. It applies to trials and to paid instances.

Who is responsible

You are the controller for your clients' data: you decide what goes into your instance and why. LECAP UG (haftungsbeschränkt) is your processor: we process that data only on your instructions. Using the product the way it is built counts as your instruction. If we think an instruction breaks the law, we tell you.

What we use it for

Only to provide the service to you: to run, secure and support your instance. We do not use your clients' data for our own purposes, we do not sell it and we do not train AI models on it.

Who can see it

Only Product Printer staff who run the service, bound to confidentiality. A support session in your instance is time-limited (1, 4 or 24 hours) and needs a reason. You see every session and every database statement in your instance, and you can end a session.

Sub-processors

We use these providers to run your instance. We tell you before we add or replace one, so that you can object.

• Supabase: database, file storage and sign-in. EU (Frankfurt), one separate project per instance.
• Cloudflare: hosting of your instance's web app, DNS and your own domain. Global network.
• Hetzner: the server that runs the AI work of your instance, and the development servers for your client apps. Germany.
• Resend: the e-mails your instance sends. EU (Ireland).
• OpenRouter and the model providers behind it, or the AI you connect yourself (your subscription, your keys or local models): they receive what an AI step works on. Where they process depends on the model; the default models run in the USA.
• GitHub: the code of the applications built for your clients, change requests filed as issues, and instance exports. USA.
• Google Fonts: the fonts on your instance's pages, which means the IP addresses of people who open them. USA.

Not sub-processors for your clients' data: Stripe only handles the billing of your subscription (data about you, not about your clients); if you connect your own Stripe account to bill your clients, Stripe works for you. PostHog runs only on product-printer.ai, only after you accept analytics, and never in your instance.

How we protect it

Each instance has its own database, its own web hosting, its own e-mail subdomain, its own AI key and its own AI server. Data is encrypted in transit (TLS) and at rest by our hosting providers. Credentials are kept in an encrypted vault, and AI keys are encrypted to your instance's AI server. Product Printer operators must sign in with a second factor; for your admins a second factor is available and required for deploy and billing actions. Every operator action on your instance is recorded with a reason in an audit log that cannot be edited. We hold no security certification today.

Deletion

A trial instance becomes read-only after 14 days and is deleted 7 days later; before that, we e-mail you a link to a full export (valid for 30 days). On request we delete your instance and its data; for safety, two operators carry out the deletion after a 72-hour cooling-off period. You can export your instance at any time. Applications built for your clients are not deleted with your instance, because they belong to your clients: tell us if they should be deleted too. Backups held by our providers expire on the providers' own schedule.

If something goes wrong

If we become aware of a breach affecting your clients' data, we tell you without undue delay, with what we know at that point, so that you can meet your own duties (Art. 33 and 34 GDPR).

Your clients' rights

If one of your clients asks you for access to their data, a correction or a deletion, we help you answer. Questions about this section: hello@product-printer.ai.