Start free
Menu
Features Pricing Apps Guides Docs Sign in

Privacy policy

Last updated: October 17, 2026

1. Information collection

We collect and process information necessary to provide our print shop management service:

  • Account information (business details, user accounts)
  • Order and production data: quotes, sales orders, jobs, invoices and receipts
  • Customer information you provide, such as names, contact details and addresses
  • Payment records you enter, including photos of payment slips
  • Files you upload, such as artwork, proofs and your logo
  • Notes, emails you send from rastr, and your messages to the assistant
  • Error reports from the web app and our servers

We do not take card or bank account numbers. Paddle handles subscription payments (see section 3).

2. How we use information

We use this information to provide our service, process orders, send the emails and notifications you ask for, power search, bill your subscription, fix errors and keep the service secure. We do not sell personal information, and we do not use your shop's data or your customers' data for advertising.

Some features send data to an AI service, and only when the feature is used:

  • The assistant sends OpenAI your message, the conversation so far, your name, email, role and shop name, and the shop records it looks up to answer you. It only looks up what your role can see on screen.
  • Reading a payment slip sends OpenAI the image.
  • Quantity suggestions send OpenAI the text you ask it to read.
  • When AI reminders are switched on, OpenAI gets details of the orders being checked, such as the order number, customer name and due date.
  • The image tools send the image you process to Stability AI (remove background, upscale), to Vectorizer.AI (vectorize), or to our own service (contour cut lines, trim).

3. Information sharing

We share information with the service providers that help us run rastr. Each gets only what it needs for its part:

  • DigitalOcean hosts our servers, database and file storage, so it holds everything stored in rastr.
  • OpenAI, Stability AI and Vectorizer.AI run the AI features in section 2.
  • Algolia runs search. It gets your customers' names, company names, emails, phone numbers, addresses and assigned staff, and for quotes, orders, invoices and receipts their numbers, customer and staff names, totals, status and dates.
  • Sentry receives error reports: the error, the browser or device, and the page it happened on. The web app also records a replay of some sessions, with the text and images on screen masked.
  • Paddle is our reseller and merchant of record for subscriptions. It gets your shop's name and email and your plan, and takes your card details directly.
  • Resend delivers our email. It gets the recipient's address and the email, which can include a quote, invoice, receipt or proof link.
  • Apple Push Notification service and Google Firebase Cloud Messaging deliver notifications to the mobile apps. They get the device's push token and the notification text.
  • QuickBooks Online (Intuit), only when you connect it, gets the customers, products, invoices and payments it syncs.
  • Google runs reCAPTCHA and Google Ads on our website (see section 8).
  • Meta (Facebook and Instagram) runs the Meta pixel on our website, only if you allow ad cookies (see section 8).
  • cdnjs (Cloudflare) serves the phone number field on the signup page, and Bunny Fonts serves the fonts on the order tracking page your customers open. Both see the visitor's IP address.

We also share information when required by law or to protect rights.

4. Data security

Our servers and database are hosted by DigitalOcean in New York, USA. Every connection to rastr uses HTTPS. Passwords are stored as one-way hashes and QuickBooks access tokens are stored encrypted. Each shop's data is kept apart from every other shop's, and inside a shop each role sees only what it should.

Some providers in section 3 may process data outside the United States.

5. Your rights

You have the right to:

  • See and update your information in the app at any time
  • Ask for a copy of your data by emailing privacy@rastr.ai
  • Request deletion of your data (see how to delete your data)
  • Disconnect QuickBooks and revoke access tokens you created

6. Updates to privacy policy

We'll notify you of significant changes to this policy through our platform and via email.

7. Contact us

For privacy questions or concerns, contact us at privacy@rastr.ai

8. Cookies, signup protection and advertising

Our website and the web app set these cookies:

  • rastr_session keeps you signed in. It lasts 30 days.
  • XSRF-TOKEN protects forms from cross-site requests. It lasts 30 days.
  • rastr_consent remembers your choice in "Cookie settings" for six months.
  • rastr_conversion makes sure a completed signup is counted once. It ends when you close the browser.
  • Google Ads cookies (_gcl_ and _ga names), unless you turn them off.
  • Meta pixel cookies (_fbp and _fbc), unless you turn them off.

When it is switched on, our signup form uses Google reCAPTCHA to tell people from bots. Google receives your IP address and details about your browser when the signup page loads. Google's own privacy policy applies to that data.

Our website loads Google Ads and the Meta pixel to see which ads bring shops to rastr. When you sign up, our server also tells Meta that a signup happened. It sends your email, phone number and name as one-way hashes, so none of them leave in plain text, plus your IP address, browser and the pixel cookies above. Meta uses this to measure our ads and show them to similar people.

You can turn this off any time with "Cookie settings" at the bottom of every page. After that nothing is loaded or sent, and the Google Ads and Meta cookies are removed. If you visit from Europe, we ask first and load nothing until you say yes.