Privacy Policy

Who is responsible for your data

imPrintX is built and run from The Commonwealth of The Bahamas. The person who operates imPrintX is the data controller for the personal data described here.

Write to ixsupport@smartimprint.co about anything on this page — including asking for a copy of your data, asking us to correct it, or asking us to delete it.

The law that applies

We are a Bahamian business, so Bahamian data protection law governs how we handle your personal data — whichever country you are in when you use imPrintX. The rights set out below are the ones that law gives you.

What we store

Your account:

• Your name and email address.
• Your password, stored only as a bcrypt hash. We cannot read it, and neither can anyone who obtains the database.
• Your plan, its expiry date, and how many seats it covers.

Your work:

• Projects you create — their names, folders and settings.
• Floor plans you upload, stored as the original PDF.
• Everything you place on a drawing: devices, cables, walls, rooms, rack layouts, scale calibration and the underlying CAD document.
• Small preview thumbnails, so the dashboard can show your projects.

Activity:

• A log of significant actions — signing in, creating, exporting, sharing, deleting — with the time and the IP address the request came from.
• Failed sign-in attempts, which we keep so we can detect someone trying to break into an account.

Support conversations:

• What you ask the support assistant and what it answers, kept so we can see what people get stuck on and whether the answers were any good.
• Your email address alongside the conversation, when you were signed in. If you were not, the conversation is kept without one.

Payments:

• A record of each invoice: which plan and term, the dollar amount, its status, and when it settled.
• We never see or store a card number, because there are none — payment is in Bitcoin.
• We do not store your Bitcoin wallet or its balance. We see a payment arrive against an invoice, nothing more.

Why we store it

To run the service: to sign you in, to show you your drawings, to know what your plan entitles you to, and to tell you when a term is ending. The activity log exists so that you and we can see what happened to an account, which matters both for support and for security.

We do not sell your data, we do not share it with advertisers, and we do not use your drawings to train any model.

Who else sees it

Running imPrintX means using a handful of other companies. Each sees only what it needs to do its job:

• Vercel — hosts the application and handles requests, so traffic passes through their infrastructure.
• Our database host — stores everything described above.
• BTCPay Server — creates and monitors Bitcoin invoices. It is self-hosted and non-custodial, so no payment processor takes a cut or holds your coins.
• Anthropic — powers the two AI assistants. See below, because this one is worth being specific about.

Your data leaves The Bahamas

Every company listed above operates outside The Bahamas, principally in the United States. So although we are a Bahamian business, your personal data is stored and processed abroad. We would rather say that plainly than bury it.

We rely on that transfer being necessary to perform our contract with you: there is no version of imPrintX that stores your drawings, signs you in or answers your questions without sending data to the hosts that run it. By using the service you are asking us to do exactly that.

If you would rather your data did not leave The Bahamas, we cannot currently offer that, and the honest answer is not to open an account.

What the AI assistants send

imPrintX has two assistants, and both work by sending your message to Anthropic to be answered. What accompanies your message differs:

• The design assistant sends context about the project you have open — device markups, detected rooms, the project name — because it cannot advise on a drawing it cannot see.
• The support assistant sends your plan, whether it is active, and your recent invoice records, so it can answer questions about your own account. It is given this by our server based on who you are signed in as; it cannot see anyone else’s account.

If you would rather not send project details to a third party, do not use the design assistant — the rest of imPrintX works without it.

Cookies

One cookie, for your login session. It is what keeps you signed in. There are no advertising cookies, no analytics cookies and no third-party trackers, which is why you have never seen a consent banner here.

If you use imPrintX without an account, your work is kept in your own browser's storage rather than on our servers, and clearing your browser data will remove it.

Sharing a drawing

When you share a project, we create a link containing a random token. Anyone with that link can view what you shared, without signing in — that is the point of it, but it does mean the link should be treated as the key. Sharing can be turned off again, which invalidates the link.

How long we keep it

Your account and work are kept for as long as your account exists. Ask us to delete your account and we will remove it along with its projects and uploads.

Invoice records outlive the account, because we have to be able to account for money that changed hands. They contain what was paid and when, not what you drew.

Your rights

Bahamian data protection law gives you the following. Exercising any of them costs nothing and will not affect your account:

• Access — ask for a copy of the personal data we hold about you, and what we do with it.
• Rectification — have anything inaccurate corrected.
• Erasure — ask us to delete your personal data, including your account and its contents.
• Restriction — ask us to stop processing your data while a dispute about it is sorted out.
• Objection — object to our processing of your data.
• Portability — receive your data in a usable form, or have it transferred elsewhere. Your drawings you can export yourself at any time, without asking us.
• Withdraw consent — where we relied on your consent, you can take it back, though that does not undo what was already done with it.
• Complain — take the matter to the regulator, and seek compensation through the courts if you have suffered damage.

Ask by writing to ixsupport@smartimprint.co. We may need to confirm who you are first, so that nobody can use these rights to get at someone else's data.

Complaining about us

Come to us first if you can — most things are a misunderstanding we can fix quickly. But you do not have to. You can complain directly to the Office of the Data Protection Commissioner in The Bahamas, which supervises how businesses here handle personal data.

Marketing

We do not send marketing email, and we will not start without asking you first. What we do send is transactional: a note that a payment confirmed, or that a term is ending. Those are part of the service rather than promotion, so they are not something you opt into separately — though you can close your account at any time.

Security

Passwords are hashed, sessions are signed, and sign-in attempts are rate limited. Traffic is encrypted in transit. No system is perfect: if we ever discover a breach affecting your data, we will tell you what happened rather than hope you do not notice.

Concretely, that means reporting a qualifying breach to the Data Protection Commissioner within 72 hours of becoming aware of it, and telling you directly where the breach is likely to put your rights or interests at risk. We commit to that here so it is a promise to you, not only an obligation to a regulator.

Getting in touch

Any question about your data — including asking for it or asking us to delete it — reaches a person, not a queue. Use the support chat on the payment guide or write to us directly.