Privacy Policy

This policy explains what information Etchly collects, why, who we share it with, how long we keep it, and the choices you have. It covers the Etchly app for Shopify, the web app at app.etchly.com, and our websites. In this policy, "Etchly", "we", "us" and "our" mean Etchly LLC.

Etchly is a made-on-demand service. Merchants design custom leather and leatherette patch headwear and custom patches, sell them in their Shopify stores, and we make and ship each item when a customer orders it.

This policy talks about two groups of people:

• Merchants: businesses that install Etchly or sign in to the web app, and their staff and team members ("you").
• Customers: people who buy from a merchant's store.

For a customer's information, the merchant is in charge, and Etchly processes it only on the merchant's behalf to make and ship the order. For a merchant's own account and business information, Etchly is in charge.

1. Information we get from Shopify

When a merchant installs Etchly, Shopify shares the information the merchant approves on the install screen. We use it only to provide Etchly's service.

• Store information: such as the store's name, domain, plan and currency.
• Staff information: such as the name, email address and language of staff who open Etchly, to keep them signed in and confirm requests come from your store.
• Store contact email: the store owner's email address, as Shopify reports it. We use it only to email the store about what Etchly already shows in the app (such as a product going live), and you can turn each kind of email off in Settings or from the link in the email. We also send one welcome email when you install Etchly.
• Products and orders: the products Etchly creates in your store, and the details of orders for Etchly products that we need to make and ship them. We do not keep customers' names, email addresses, phone numbers or addresses.

Customer name and shipping address (for shipping only). We use the shipping name and address on an order only to:

• confirm the order can be shipped to that destination;
• calculate sales tax on our charge to the merchant, using the address without the customer's name;
• buy and print the shipping label.

It appears on the package label and in the carrier's systems, as delivery requires. We never use customer information for marketing or profiling, and we don't contact customers directly apart from shipping notifications.

2. Information merchants give us

• Artwork and designs: the artwork, backgrounds and text you add, and your design choices. We store your files privately.
• Proof of rights: documents you send to show you have the right to use a design. We use them only to review that design.
• Prices and product details: your retail prices, titles and descriptions.
• Fulfillment profile: the return name and address printed on packages, and your shipping preferences.
• Tax information: if you claim a sales tax exemption on Etchly's charges, your resale certificate and the business details on it. Please don't include a Social Security number.
• Messages: what you send through our contact form (your name, email address, store name if given, topic and message). We use them only to answer you.

3. Web accounts and teams

If someone on your team invites you to Etchly on the web, we use your email address only to send you that invitation. If you sign in to Etchly on the web, we receive your account ID, email address, name, team and role. We use them to sign you in, show you the right stores and designs, decide what you're allowed to do, and protect your account. Sign-in is handled by our sign-in provider; Etchly never sees your password.

4. Payments and sales tax

Merchants pay Etchly from a prepaid wallet, topped up by card through our payment processor. Etchly never sees or stores your full card number; we keep payment records such as amounts, dates and status. Etchly Pro is billed by Shopify. Customers' payments go to the merchant through Shopify's checkout, never to Etchly.

Where sales tax applies to our charges, our tax calculation provider receives the charge amount and the order's shipping address without a name. You can ask for a person to review any decision about your resale certificate by sending us a message.

5. How we use information

We use the information above to provide and support Etchly: to design, publish, make and ship products, run your wallet and charges, keep your account secure, answer your messages, meet our legal and tax obligations, and protect Etchly, merchants and rights holders from fraud and misuse.

We use automated tools, including AI service providers, to help operate Etchly — for example to check uploads for content that may infringe others' rights, to review tax documents and to answer questions in our help chat. We share only what the task needs, never customer data, and we do not allow our providers to use your content to train their models. We do not use your artwork, designs, Shopify data or customer data to train any AI model.

6. Making and shipping orders

Our production team sees only what it needs to make each item. If we use a production partner, it receives only the information needed for its job. To ship a package, the carrier receives the customer's name and shipping address, the merchant's return address and the package details, and we send the tracking details back to Shopify.

7. Who we share information with

We share information only as this policy describes:

• Shopify, the platform Etchly is built on;
• service providers that run Etchly for us: hosting and databases; file storage and network; payments and sales-tax calculation; AI services; sign-in; email delivery; and shipping carriers.

Each service provider processes information only to provide its service to us, under an agreement that protects it. We can provide a current list of service providers on request.

We do not sell personal information, and we do not share it for cross-context behavioral advertising. Our websites don't use advertising trackers or analytics.

We may also disclose information if the law requires it, to protect people's rights or safety, to investigate fraud or intellectual property complaints, or to a buyer as part of a merger or sale of our business, in which case this policy would continue to apply to it.

Where information is processed. Etchly is based in the United States. Your information may be processed in the United States and other countries where we or our service providers operate.

8. How we protect information

We protect information with industry-standard safeguards, including encryption in transit and at rest, keeping each merchant's data separate, and limiting access to the people who need it to do their job.

No system is perfectly secure. If we learn of a security incident that affects your information, we will notify Shopify within 24 hours, and affected merchants (and others where the law requires) without undue delay.

9. How long we keep information

We keep information only as long as we need it for the purposes in this policy, or as the law requires:

10. When a merchant uninstalls Etchly

When you uninstall, Etchly's access to your store ends. Orders already accepted for production are still made and shipped, and any wallet balance stays yours (see the Terms of Service).

48 hours later, Shopify asks us to erase the store's data, and within 30 days we:

• delete your designs, files and store details, unless you keep them in an Etchly web account (you can close that account at any time, and we then delete them within 30 days);
• keep only the financial, tax and production records listed in section 9, which contain no customer contact details.

11. Requests from customers

Customers should contact the merchant they bought from. Shopify passes privacy requests to us automatically:

• Access request (customers/data_request): we send the merchant a report of what Etchly holds about that customer's orders within 10 business days.
• Deletion request (customers/redact): Etchly stores no customer names, emails, phone numbers or addresses, so there is no customer profile to erase. We record the request and confirm it's complete.

A customer can also send us a message. Because the merchant controls customer information, we'll pass the request to the merchant and help them answer it.

12. Your privacy rights

Depending on where you live, you may have the right to:

• know and access the personal information we hold about you, and get a portable copy;
• correct inaccurate information;
• delete your information;
• object to or restrict some uses, and withdraw consent where we rely on it;
• opt out of the sale or sharing of personal information (we don't sell or share it);
• ask for a person to review a decision made with automated tools.

European Economic Area, United Kingdom and Switzerland (GDPR). We use merchant information to perform our contract with you, for our legitimate interests in running and protecting a reliable service, to meet legal obligations such as tax and accounting, and with your consent where we ask for it. Customer information is processed on the merchant's instructions. Where the law requires, international transfers rely on the European Commission's Standard Contractual Clauses (and the UK addendum) or another lawful transfer mechanism. You can complain to your local data protection authority.

California (CCPA/CPRA). In the last 12 months we collected identifiers (name, email, account IDs), commercial information (orders and payments), customer shipping addresses (processed for the merchant), and uploaded content, for the business purposes in this policy. We don't sell or share personal information, don't use sensitive personal information to infer characteristics, and won't discriminate against you for using your rights. You may use an authorized agent; we'll ask the agent to prove they're authorized.

How to make a request: send us a message with the topic "Data request", from the email address on your account or naming your store. We'll confirm who you are before acting, and answer within 30 days, or sooner where the law requires; the most it can be is 45 days under the CCPA. See also Your Data & Deletion.

13. Children

Etchly is a business service and isn't directed to children under 16. We don't knowingly collect personal information from children. If you believe a child has given us information, contact us and we'll delete it.

14. Cookies

The Etchly app inside Shopify uses Shopify's session tokens, not tracking cookies. The web app uses a necessary sign-in cookie. Our websites don't use advertising or analytics cookies. If that changes, we'll update this policy and ask for consent where required.

15. Changes to this policy

We'll post any change on this page and update the "Last updated" date. If a change is significant, we'll notify merchants inside the app at least 14 days before it takes effect.

16. Contact

Etchly LLC
6370 W Flamingo Rd., Suite 14K36
Las Vegas, NV 89103
United States

For privacy questions, send us a message and choose the topic "Data request".