Privacy Policy

DTF Gang Sheet Builder · Last updated 3 August 2026

DTF Gang Sheet Builder ("the app") lets a store's customers arrange artwork on a gang sheet and buy it, and delivers the finished print file to the merchant. This policy describes what the app stores, why, and what it deliberately does not.

What we store

• Artwork files uploaded into the builder, and the print-ready files produced from them. These are the product being bought; they are stored so the merchant can print the order.
• Design layouts — which artwork, at what size, where on the sheet — keyed to an opaque identifier.
• Order references: the order's id and number (e.g. #1042) and which designs it contains, so the merchant's print queue works.
• Merchant credentials required to operate the app (Shopify access tokens, and a Google Drive token if the merchant connects Drive). These are encrypted at rest.

What we deliberately do not store

No customer name, email address, phone number, or shipping/billing address is read or stored by the app — not in designs, not in order records, not in logs. Designs are keyed to an opaque identifier that the app cannot connect to a person.

Google Drive

If the merchant connects Google Drive, the app requests the drive.file scope only — it can create and manage files it created itself (the print files it delivers into the merchant's "Gang Sheets" folder) and cannot see anything else in the merchant's Drive. The app's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Drive tokens are encrypted at rest and deleted when the merchant disconnects Drive or uninstalls the app.

Data deletion

• Merchants can delete uploads and designs from inside the app at any time.
• The app implements Shopify's mandatory privacy webhooks: a customer redaction request erases that customer's designs, and a shop redaction request erases everything the app holds for that store.
• Uninstalling the app revokes its Shopify access immediately.

Third parties

Files and records are stored on Google Cloud Platform (europe-west1). Print files are additionally delivered to the merchant's own Google Drive when the merchant has connected it. Nothing is sold, shared, or used for advertising or model training.

Contact

Questions and data requests: orau.bt@orau.com.tr. See also the support page.