Privacy Policy

Welcome to Printion ("we", "our", "us"). Printion is a software-as-a-service application available at https://printion.pro that converts Notion pages into professionally designed PDF documents.

This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our service. By accessing or using Printion, you agree to the practices described in this policy.

Printion is operated by a solo developer based in France. If you have any questions about this policy, please contact us at contact@printion.pro.

We collect the following categories of data:

2.1 Account Information

When you sign in with Notion OAuth, we receive and store the following information from your Notion account:

• Your Notion user name and email address
• Your Notion workspace name and ID
• Your Notion OAuth access token (encrypted at rest), which allows us to read the pages you have shared with the Printion integration
• Your Notion avatar URL

2.2 PDF Generation Data

When you generate a PDF, we temporarily access the content of the Notion page you selected. This content is processed in memory to generate your PDF and is not permanently stored on our servers. We do log the following metadata:

• The Notion page ID that was converted
• The timestamp of the generation
• The theme and settings used
• Whether the generation succeeded or failed
• The file size of the generated PDF

2.3 Usage and Analytics Data

We automatically collect certain information when you visit and interact with Printion, including:

• Pages visited and features used
• Browser type and version
• Device type and screen resolution
• Referring URL
• Approximate geographic location (country/region level)
• Session duration and interaction patterns

This data is collected through Vercel Analytics and Vercel Speed Insights, which are privacy-focused and do not use third-party cookies for tracking.

2.4 Payment Information

If you subscribe to a paid plan, your payment information (credit card details, billing address) is processed and stored exclusively by our payment provider, Lemon Squeezy. We never see or store your full credit card number. We only receive confirmation of payment status, subscription plan, and billing email from Lemon Squeezy.

We use the data we collect for the following purposes:

• PDF generation: To access your Notion pages and convert them into PDF documents as you request
• Account management: To create and maintain your Printion account, manage your subscription, and track your usage against plan limits
• Service improvement: To analyze usage patterns, identify bugs, and improve the performance and reliability of Printion
• Communication: To send you important service notifications such as changes to your account, subscription status, or this privacy policy
• Security: To detect and prevent abuse, fraud, or unauthorized access to our service

We do not sell your personal data to third parties. We do not use your data for advertising purposes. We do not use your Notion page content for any purpose other than generating the PDF you requested.

Under the General Data Protection Regulation (GDPR), we process your personal data on the following legal bases:

• Contract performance: Processing your account data and Notion page content is necessary to provide the PDF generation service you requested
• Consent: You provide consent when you authorize the Notion OAuth connection and when you accept cookies on our website
• Legitimate interest: We process analytics data to improve our service, which constitutes a legitimate business interest that does not override your privacy rights
• Legal obligation: We may process data as required by applicable law, such as tax and accounting requirements related to paid subscriptions

We retain your data according to the following schedule:

• Notion page content: Not stored. Content is processed in memory during PDF generation and discarded immediately after
• Generated PDFs: Temporarily stored for download (up to 1 hour), then permanently deleted from our servers
• PDF generation logs: Retained for 12 months for usage tracking and debugging purposes, then automatically deleted
• Account data: Retained for as long as your account exists. When you delete your account, all associated data is permanently removed within 30 days
• Analytics data: Retained according to Vercel Analytics' data retention policies (typically 30 days for detailed data)
• Payment records: Retained as required by applicable tax and accounting laws (typically 7 years for financial records)

We use the following third-party services to operate Printion. Each service has its own privacy policy governing how it processes data:

6.1 Vercel (Hosting & Analytics)

Printion is hosted on Vercel's infrastructure. Vercel processes requests to our application and provides analytics and performance monitoring through Vercel Analytics and Vercel Speed Insights. Vercel servers are located in the United States and other global regions.

Privacy policy: https://vercel.com/legal/privacy-policy

6.2 Turso (Database)

We use Turso as our database provider to store account information, subscription data, and PDF generation logs. Turso provides a distributed SQLite database service.

Privacy policy: https://turso.tech/privacy-policy

6.3 Lemon Squeezy (Payments)

We use Lemon Squeezy as our merchant of record for processing payments, managing subscriptions, and handling billing. When you subscribe to a paid plan, your payment information is processed directly by Lemon Squeezy. We do not have access to your full credit card details.

Privacy policy: https://www.lemonsqueezy.com/privacy

6.4 Notion (OAuth & API)

We integrate with Notion's API using their official OAuth flow to access pages you have explicitly shared with the Printion integration. We only request read access to the pages you share.

Privacy policy: https://www.notion.so/Privacy-Policy

Printion uses the following types of cookies:

7.1 Essential Cookies

These cookies are strictly necessary for the operation of Printion. They include:

• Authentication session cookie: Used to keep you logged in after authenticating with Notion OAuth. This cookie is encrypted and expires when you log out or after 30 days of inactivity

7.2 Analytics Cookies

Vercel Analytics and Speed Insights may use lightweight, privacy-focused cookies or identifiers to measure page performance and usage. These do not track you across other websites and do not collect personally identifiable information.

You can control cookie settings through your browser preferences. Note that disabling essential cookies will prevent you from using Printion's authenticated features.

We take the security of your data seriously and implement the following measures:

• All data in transit is encrypted using TLS 1.2 or higher (HTTPS)
• Notion OAuth tokens are encrypted at rest in our database
• Database access is restricted and requires authentication
• We use environment variables and secret management for all API keys and credentials
• Our application is hosted on Vercel's secure infrastructure with built-in DDoS protection
• We regularly review and update our dependencies to patch known security vulnerabilities
• Notion page content is never written to disk and is processed only in memory

While we implement reasonable security measures, no method of electronic storage or transmission over the Internet is 100% secure. We cannot guarantee absolute security of your data.

Printion is hosted on Vercel, whose primary servers are located in the United States. If you are accessing Printion from outside the United States, your data will be transferred to and processed in the United States.

For users in the European Economic Area (EEA), the United Kingdom, or Switzerland, these transfers are conducted in compliance with applicable data protection laws. Vercel participates in data protection frameworks and implements appropriate safeguards, including Standard Contractual Clauses (SCCs), to ensure your data is protected during international transfers.

By using Printion, you acknowledge and consent to the transfer of your data to the United States for processing as described in this policy.

Depending on your location, you may have the following rights regarding your personal data:

• Right of access: You can request a copy of all personal data we hold about you
• Right to rectification: You can request that we correct any inaccurate personal data
• Right to erasure: You can request that we delete your account and all associated personal data. You can also delete your account directly from your dashboard
• Right to data portability: You can request an export of your data in a structured, machine-readable format
• Right to withdraw consent: You can revoke Printion's access to your Notion workspace at any time through your Notion settings, or by deleting your Printion account
• Right to object: You can object to processing of your personal data based on our legitimate interests
• Right to restrict processing: You can request that we limit how we use your data in certain circumstances

To exercise any of these rights, please contact us at contact@printion.pro. We will respond to your request within 30 days.

If you are a resident of the European Economic Area (EEA), the following additional provisions apply:

• Printion acts as the data controller for the personal data described in this policy
• We process your data only with a valid legal basis as described in Section 4
• We apply the principle of data minimization and only collect data that is necessary for providing our service
• We implement privacy by design principles, such as not storing Notion page content and encrypting sensitive data
• You have the right to lodge a complaint with your local data protection supervisory authority if you believe we are not handling your data in compliance with the GDPR
• In the event of a data breach that poses a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours and inform affected users without undue delay

For users in France, you may contact the Commission Nationale de l'Informatique et des Libertés (CNIL) at www.cnil.fr.

Printion is not intended for use by individuals under the age of 16. We do not knowingly collect personal data from children under 16. If you are a parent or guardian and you believe your child has provided personal data to Printion, please contact us at contact@printion.pro and we will promptly delete that information.

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service features. When we make significant changes, we will:

• Update the "Last updated" date at the top of this page
• Display a notice on our website or within the application
• Send an email notification to registered users for material changes

We encourage you to review this policy periodically. Your continued use of Printion after any changes constitutes your acceptance of the updated policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• Email: contact@printion.pro
• Website: https://printion.pro

We aim to respond to all inquiries within 30 days.