Back to Home
Legal & Compliance · Formulated Apps

Privacy Policy

Last Updated: November 2026 · App: Pro Transfers Builder (DTF Transfers Builder)

1. Introduction

Formulated Apps ("we", "our", or "us") provides Pro Transfers Builder (also known as DTF Transfers Builder), an e-commerce application designed for Shopify merchants to automate the creation, nesting, and printing of Direct-to-Film (DTF) gang sheets.

This Privacy Policy explains how we collect, use, store, and safeguard information when you install our application on your Shopify store, or when your customers use our interactive gang sheet builder, including optional integrations with third-party cloud storage providers such as Google Drive, Dropbox, Microsoft OneDrive, and Box.

2. Information We Collect

We practice data minimization and collect only the information strictly necessary to operate our service:

  • Shopify Merchant Account Data: When a merchant installs Pro Transfers Builder, we access basic store details provided via Shopify APIs (store name, shop domain, merchant contact email, and currency) to manage billing, account configuration, and app settings.
  • Shopify Order Metadata: When an order containing a gang sheet is placed, we receive the Shopify Order ID, line item properties, and selected dimensions to link the generated high-resolution print files to the merchant's fulfillment queue.
  • Customer Artwork & Design Files: We process raster and vector graphic files (such as PNG, PDF, TIFF, SVG, JPEG) uploaded directly or imported by your customers to assemble, auto-nest, and export 300 DPI print-ready gang sheets.
  • Technical & Log Data: Minimal diagnostic server logs (such as request timestamps and error traces) are maintained to troubleshoot rendering failures and ensure 99.9% app reliability.

Third-Party Cloud Storage Integrations (Google Drive, Dropbox, OneDrive & Others)

Pro Transfers Builder allows customers and merchants to optionally import image and artwork files directly from major cloud storage providers—including Google Drive, Dropbox, Microsoft OneDrive, and Box—into the gang sheet builder canvas.

All cloud storage integrations operate under strict principles of user consent, data isolation, and minimal access:

  • Strictly User-Initiated Selection: When you connect any cloud storage service (via Google Drive Picker, Dropbox Chooser, or Microsoft OneDrive File Picker), Pro Transfers Builder accesses only the specific graphic files that you actively choose and click to import. We do not scan, read, browse, index, or access any other directories, private folders, documents, emails, contacts, or unselected files stored in your cloud accounts.
  • Specific & Limited Purpose of Access: Selected cloud files are retrieved solely to place the artwork onto the gang sheet layout, perform automatic resolution/DPI checks, upscale low-resolution assets if requested by the user, and compile print-ready 300 DPI output files for order fulfillment.
  • No Data Sale or Commercial Transfer: We never sell, lease, or rent data received from Google Drive, Dropbox, OneDrive, or any cloud API to third parties, data brokers, or advertising networks. We do not transfer cloud files to any external parties except our secure infrastructure providers (Railway and AWS) solely for processing and hosting the service.
  • No Advertising or Profiling: Artwork and data retrieved from cloud storage providers are never used to serve targeted advertisements, user tracking, or market profiling.
  • No AI/ML Model Training: Artwork and metadata retrieved from cloud storage integrations are never used to train, build, or fine-tune generalized artificial intelligence (AI) or machine learning (ML) models.
  • Encrypted Storage & 30-Day Automated Purge: Cloud-imported files and compiled gang sheets are encrypted using AES-256 at rest. In accordance with our manufacturing lifecycle, files are permanently purged within 30 days of order completion, or immediately upon user request.
  • Provider-Specific Revocation Controls: You can disconnect cloud providers at any time directly in the builder, or revoke authorization in your provider's security portal:
Mandatory Google API Services User Data Policy Disclosure:
Pro Transfers Builder's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

3. How We Use Your Information

All information collected is used exclusively for legitimate business purposes:

  • To provide, operate, and maintain the Pro Transfers Builder storefront application.
  • To convert customer artwork into true-shape nested gang sheets and compile 300 DPI print-ready PDF/TIFF files.
  • To sync print files directly to the merchant's Shopify order administration feed.
  • To process usage billing (first 10 builder orders each month free, then 5% per order, strictly capped at $10.00 USD) through the official Shopify Billing API.
  • To provide customer support and troubleshoot technical print errors.

4. Data Storage, Encryption & Security

We implement comprehensive technical and organizational security measures to protect all customer and merchant data:

  • Encryption in Transit: All communications between the browser, Shopify, cloud providers (Google Drive, Dropbox, OneDrive), and our servers are encrypted using modern Transport Layer Security (TLS 1.3 / HTTPS).
  • Encryption at Rest: All stored customer files, artwork, and generated gang sheets are encrypted using industry-standard AES-256 encryption.
  • Data Isolation: Merchant data and customer files are segregated in isolated cloud storage environments with strict role-based access controls.

5. Data Retention & Deletion Policy

We do not store customer artwork permanently. Because printed gang sheets are commercial manufacturing assets, we retain files for a maximum of 30 days following order completion to allow re-prints for damaged goods or merchant order review.

Following the 30-day retention window, raw customer uploads and intermediate print files are permanently deleted from our servers. If a merchant uninstalls the app, all associated configuration data is purged in compliance with Shopify's mandatory data protection guidelines.

6. Compliance with Privacy Regulations (GDPR & CCPA)

We respect data privacy laws worldwide, including the European Union General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA):

  • Right to Know / Access: You may request a summary of the personal information we maintain about your store or orders.
  • Right to Erasure (Right to be Forgotten): We promptly honor all Shopify GDPR "Customer Data Erasure" and "Shop Redact" webhooks within required statutory deadlines.
  • No Sale of Personal Information: We do not sell, rent, or monetize your personal information or your customers' data under any circumstances.

7. Third-Party Service Providers

We share data only with infrastructure providers essential to delivering the Service:

  • Shopify Inc.: App authentication, storefront rendering, and billing.
  • Google LLC: Optional user-initiated Google Drive file import via Google APIs.
  • Dropbox, Inc. & Microsoft Corp.: Optional user-initiated artwork file import via authorized file choosers.
  • Amazon Web Services (AWS) & Railway: Encrypted cloud hosting, compute, and temporary storage.

8. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect operational, legal, or regulatory changes. Any updates will be posted on this page with an updated "Last Updated" date. We encourage you to review this policy periodically.

Questions or Data Requests?

If you have questions about our privacy practices, our Google Drive integration, or wish to request data deletion, please contact our Data Protection Officer at:

Email: support@formulatedapps.com | legal@formulatedapps.com

Formulated Apps · Calgary, Alberta, Canada