Last updated: July 16, 2026
DTF Pilot provides gang-sheet building, rendering, and order-production tools for print shops ("merchants"). This policy explains what data we process, why, for how long, and your rights. Short version: we process the minimum needed to run your gang-sheet production and billing, we never sell data, and customer artwork is deleted automatically after orders complete.
Merchant account data — your email address, company name, license key, store domain(s), and a securely hashed password (we can never read the original). Purpose: operating your account, licensing, and support.
Billing and usage data — your credit balance, transactions, downloads, printed area, and order references (order numbers and sale amounts). Purpose: metering, billing transparency (your transaction log), and your own usage reports. Card payments are handled by Stripe or Shopify Billing — we never see or store card numbers.
Your customers' order data — when you use our order tools (dashboards, the Flight Deck desktop app), we relay order details from your store — order number, line items, and, where you have granted access, the buyer's name and shipping address. Purpose: solely so you can identify, print, and ship the order (order fulfillment / store management). This data is displayed to you at request time; we do not build customer profiles, do not use it for marketing or analytics, and do not sell it — ever.
Customer artwork — files your buyers upload to the builder are stored encrypted in Google Cloud so we can render production sheets. Purpose: producing the print files you sell.
Customer artwork and rendered print files are deleted automatically on a retention schedule after the order reaches a completed or cancelled state (typically within about 48 hours, configurable per shop). Billing records (transactions, download logs) are retained for as long as your account exists, as required for accurate billing and accounting. If you close your account, contact us and we will delete your data except where retention is legally required.
All data is encrypted in transit (TLS) and at rest (Google Cloud managed encryption, including backups). Access is restricted to authorized personnel, is logged, and production systems are separated from test systems. We maintain a security incident response process; if an incident affects your data we will notify you without undue delay at your account email.
We use Google Cloud Platform (hosting, storage, USA), Stripe (payments), Shopify (billing and order APIs, for Shopify stores), and Resend (transactional email). Each processes data only as needed to provide their service to us.
You may request access to, correction of, or deletion of your personal data at any time. For your customers' data we act as a processor on your instructions — deletion requests from your buyers should go to you, and we honor the platform deletion mechanisms (including Shopify's GDPR webhooks) automatically.
Privacy questions or requests: support@dtfpilot.com. We answer within 30 days.