Privacy Policy

1. Who we are

Thintent is operated by THINTENT LTD, a company registered in England and Wales (company number 17022244) with its registered office at 71–75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom. For anything privacy-related, contact info@thintent.com.

Two roles apply under UK data protection law. For the account details of print shops using Thintent, we are the controller. For the customer data those shops enter — their customers' names, emails, and addresses on quotes and invoices — the shop is the controller and we act as its processor: we only handle that data to provide the service.

2. What we collect

• Account data — your email address and name, used to sign you in (by email link) and to send you service emails.
• Shop data — your business details, quotes, invoices, jobs, and uploaded files such as your logo.
• Your customers' data — the names, email addresses, and delivery addresses you enter, processed on your behalf.
• Payment data — subscription billing and customer payments run through Stripe. We see payment status and metadata, never card numbers or bank credentials.
• Technical data — IP addresses (used for rate limiting on public pages) and error diagnostics, which can include IP address and browser details, for keeping the service working and secure.

3. Why we use it

We process personal data to run the service you signed up for (performance of a contract); to keep the service secure, rate-limited, and monitored for errors (our legitimate interests); and to keep billing records we're legally required to keep (legal obligation). We don't sell personal data or use it for advertising.

4. Who we share it with

We use a small number of service providers to run Thintent, each processing data only on our instructions:

• Stripe — subscription billing and customer payments
• Resend — sending emails (sign-in links, quotes, invoices) and tracking whether they were delivered
• Amazon Web Services (S3) — file storage for uploads such as logos
• TiDB Cloud — database hosting
• Sentry — error monitoring
• Vercel — application hosting

Some of these providers process data outside the UK. Where they do, transfers are covered by appropriate safeguards such as the UK extension to the EU–US Data Privacy Framework or standard contractual clauses.

5. Cookies

Thintent sets essential cookies only: a session cookie that keeps you signed in. There are no analytics, advertising, or tracking cookies of any kind — which is why you don't see a cookie banner.

6. How long we keep it

We keep your data for as long as your account is active. When you close your account, it isn't immediately deleted — it's kept so the account can be reopened if closing was a mistake, and billing records are kept as long as tax law requires. If you want your data deleted sooner, email info@thintent.com and we'll remove everything we're not legally required to keep.

7. Your rights

Under UK GDPR you can ask for a copy of your personal data, have it corrected or deleted, receive it in a portable format, and object to or restrict certain processing. Email info@thintent.com to exercise any of these — we'll respond within a month. If you're a customer of a print shop that uses Thintent, the shop is the controller of your data, so contact them first; we'll help them fulfil your request.

You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.

8. Changes

If we change this policy, the latest version will always be at this page, with the date above updated. For material changes we'll let you know through the service or by email.