Security & Privacy FAQ
Frequently asked questions about data security, account safety, GDPR compliance, and privacy on the NowToPrint platform.
Security & Privacy FAQ
Frequently asked questions about how NowToPrint protects your data and privacy.
Data Security
Is my data safe?
Yes. NowToPrint uses industry-standard security measures to protect your information:
- Encryption: All data is encrypted in transit and at rest using AES-256
- Firestore Security Rules: Strict role-based access control rules
- Authentication: Secure identity verification via Better Auth
- HTTPS only: All communication is encrypted over HTTPS
- Regular security audits: Periodic third-party security reviews
ISO 27001: Our data security practices align with international standards for information security management.
How long are my designs stored?
- Active projects: Indefinitely while your account is active
- Drafts: 90 days from last modification
- Completed orders: 1 year after order completion
- Deleted content: Up to 30 days (recovery possible within this window)
Account Security
Is two-factor authentication (2FA) available?
Yes. You can enable 2FA to add an extra layer of protection to your account:
Navigate to Settings → Security.
Find the "Two-Factor Authentication" section and click Enable.
Scan the QR code with an authenticator app (Google Authenticator, Authy, or similar).
Enter the 6-digit code from your app to confirm setup.
Important: Save your recovery codes in a secure location. You will need them if you lose access to your authenticator app.
I forgot my password. What do I do?
Click "Forgot password" on the sign-in page and enter your email address.
Open the password-reset email and click the link inside. The link is valid for 1 hour.
Choose a strong password. If 2FA is enabled, you will be asked for your authenticator code as well.
Privacy & GDPR
How is my personal data used?
NowToPrint is fully compliant with GDPR and applicable data-protection laws:
Data we collect:
- Contact information (email address, phone number)
- Billing details (name, address, VAT number)
- Usage statistics and analytics
- Browser and device information
How we use it:
- Delivering and improving our services
- Customer support
- Legal and compliance obligations
Who we share it with:
- Print shops — only the order details they need to fulfil your job
- Payment processors (Stripe, iyzico) — for payment handling
- Analytics tools — anonymised, aggregated data only
Your data is yours. You can download or delete your personal data at any time from your Profile settings.
How do you use cookies?
| Cookie type | Purpose | Duration |
|---|---|---|
| Essential | Session management and authentication | Session |
| Analytics | Anonymised usage statistics | 1 year |
| Preferences | Language and theme settings | 1 year |
| Marketing | Ad optimisation (opt-in only) | 90 days |
You can update your cookie preferences at any time using the Cookie Settings button in the site footer.
Deleting Your Account
How do I delete my account?
Go to Settings → Account and scroll to the "Delete Account" section.
Enter your password and 2FA code (if enabled).
Select an optional reason and click Delete Permanently.
Warning: Account deletion cannot be undone. All your data will be permanently removed within 30 days.
What gets deleted:
- ✅ Profile and account information
- ✅ All designs and projects
- ✅ Order history
- ✅ Saved payment methods
What is retained (legal obligation):
- ⚠️ Invoices — 5 years (tax law)
- ⚠️ Transaction logs — 7 years (financial regulations)
Can I delete individual designs without closing my account?
Yes. To delete a design:
- Open the design list and click the design you want to remove.
- Click the ⋮ (three-dot) menu and select Delete.
- Confirm the deletion.
For bulk deletion, select multiple designs using the checkboxes, then choose Bulk actions → Delete.
Contact & More Information
Where is the Privacy Policy?
The full Privacy Policy is available at /legal/privacy-policy and linked in the site footer.
How do I contact the data protection team?
- Email: privacy@nowtoprint.com
- Response time: Within 30 days (GDPR Article 12)
What happens in the event of a data breach?
- The relevant data protection authority is notified within 72 hours.
- Affected users receive an email notification promptly.
- We take immediate containment measures and publish a transparent incident report.
Cet article vous a-t-il été utile?
Dernière mise à jour