Privacy Policy

Effective October 17, 2026

DMP enterprise LLC operates POD Mass Product Creator at podmassproductcreator.com. This policy explains how we handle information when you visit our website or use our product-creation and mockup software.

Information we collect

• Account information: your email address (including valid emails submitted during incomplete signup attempts), signup submission dates, a hashed password, account creation date, plan, and product-creation usage.
• Your work: uploaded designs, product photos, artwork files, product settings, titles, descriptions, pricing, product identifiers, generated images, prompts, and job history, including progress and error messages.
• Connected accounts: API credentials you provide, store identifiers, and product or template information retrieved from services you connect.
• Payments: subscription and payment status, Stripe customer and checkout identifiers, paid amounts, currencies, and verification timestamps. Stripe processes checkout and payment-card details; our application does not store full card numbers.
• Technical information: our hosting and measurement services may receive IP addresses, browser and device information, requested pages, timestamps, referring links, advertising identifiers, and information about visits, signups, and purchases.
• Service activity: the most recent signed-in visit, application page identifier, latest request or connection error status, and onboarding progress, including the first successful preview, starter download, product handoff, billing visit, and checkout start. The private owner dashboard uses these milestones and timestamps to identify setup and payment-flow problems. Activity reporting does not store API keys, passwords, request bodies, or URL query strings.
• Communications: information you send when requesting support or exercising privacy choices.

How we use information

We use this information to create and authenticate accounts, provide and troubleshoot the service, process subscriptions, enforce plan allowances, execute the product and image-generation actions you request, respond to communications, secure the service, and measure advertising effectiveness.

Services that receive information

Information is shared as needed to operate the features you use:

• Render: hosts the application and its stored files and database.
• Stripe: processes payments and subscription management.
• Printify: receives credentials and artwork, product configuration, and listing information needed to carry out actions in your connected store.
• Anthropic: receives relevant design images, text, and instructions when you use features powered by its API.
• Photoroom, Higgsfield, and Dynamic Mockups: receive relevant images or artwork, prompts, template selections, and API authentication when you request generation through the selected provider. These services use your connected account and may charge separately. For included subscriber product-photo images, the configured provider processes your photo and scene description through our funded provider account. Higgsfield uploads may be available through a provider-hosted image URL. Product-photo inputs are removed from our active storage once all queued variations finish or fail; providers apply their own retention policies.
• Google: receives technical information when Google Fonts load. When configured, Google Ads tags measure website activity and conversions, including signups and purchases. Google Analytics measures page visits, successful registrations, and verified paid checkouts in our dedicated POD property. These events include payment amounts and transaction identifiers, but not passwords, full card numbers, or customer email addresses.
• Reddit: when configured, the Reddit Pixel measures page visits, completed account registrations, and confirmed initial paid checkouts. The optional server integration sends those registrations and paid checkouts with matching conversion identifiers, payment value and currency, a hashed email address, and the Reddit ad click identifier when available. Passwords, payment-card details, artwork, and connected-service credentials are not sent through this integration.

These providers process information under their own terms and privacy policies. Connecting an API does not imply that we are endorsed by or formally partnered with its provider. We may also disclose information when required by law, to respond to lawful requests, or to protect the rights and security of our business and users.

Cookies and browser storage

We use a session cookie for sign-in and session features. Browser session storage remembers product and design selections. Configured Google Ads tags may use cookies or other identifiers for advertising measurement. Google Analytics also uses browser identifiers to measure visits and conversions; Google signals and advertising personalization are disabled for our dedicated Analytics tag. You can manage cookies in your browser; blocking necessary cookies can prevent sign-in or other features from working. Google provides advertising controls at My Ad Center and explains its use of information at Google partner sites privacy information.

Storage, retention, and security

For advertising attribution, we retain the most recent campaign tags and Reddit click identifier for use during a 28-day attribution window. The Reddit integration honors Global Privacy Control and Do Not Track signals. Pending server conversion payloads expire after 47 hours and are cleared after delivery; a minimal conversion record prevents duplicate reporting.

Account records, designs, generated files, settings, and job history are stored to operate your workspace. Canceling a subscription does not automatically delete your account or stored work. Retention depends on the type of information and operational, accounting, security, and legal needs; we do not currently apply one fixed deletion period to all records. Copies may remain in backups or service-provider records after removal from the active application.

Passwords are stored as salted hashes, stored API credentials are encrypted, and the website uses HTTPS. No system can guarantee absolute security. Keep your credentials private and revoke provider API keys if you no longer want the application to use them.

Your choices and requests

You can manage connected credentials through available account settings and revoke credentials directly with the provider. You can request access to, correction of, or deletion of your personal information by contacting us below. We may need to verify your identity and may retain information needed for legal obligations, security, or resolving disputes. Removing information from our service does not automatically remove products already created in Printify or records held by external providers. Depending on where you live, applicable law may provide additional privacy rights.

International processing

Our service and its providers may process information in the United States and other countries where they operate. Those countries may have different data-protection laws from your location.

Children

This business software is intended for adult users, not children under 13. If you believe a child has provided personal information, contact us so we can investigate and address it.

Changes to this policy

We will post updates on this page and revise the effective date. Where required, we will provide additional notice of material changes.

Contact

DMP enterprise LLC
Privacy questions and requests: dmpenterprisesllc98@gmail.com