1. Introduction
The Gang Sheet Builder ("we," "us," or "our") operates the website at thegangsheetbuilder.com and provides gang sheet creation services through our platform, including our WooCommerce plugin, canvas editor, and related APIs, and GSB Product Builder, our custom apparel app for Shopify and WooCommerce (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and protect your information when you use our Service.
By using the Service, you agree to the collection and use of information in accordance with this policy.
2. Information We Collect
2.1 Account Information
When you create an account, we collect:
- Name and email address
- Password (stored in hashed form)
- Business name and website URL
- Billing model preference (pay-as-you-go or subscription)
2.2 Shop and Integration Data
When you connect your WooCommerce store, we collect:
- WordPress site URL and shop slug
- WooCommerce product and order data relevant to gang sheet creation
- API access tokens for authenticating your plugin
2.3 Design and Upload Data
When you use our editor or upload files, we collect:
- Uploaded images and design files
- Design configurations (dimensions, layouts, sticker cut lines)
- Generated gang sheet output files
- Thumbnail previews
2.4 Payment and Billing Data
- Credit balance and transaction history
- PayPal subscription and payment identifiers
- We do not store credit card numbers or full payment credentials. All payments are processed through PayPal.
2.5 Usage and Technical Data
- IP addresses and browser user-agent strings
- API request logs
- Feature usage patterns (e.g., which editor tools are used)
2.6 Third-Party Service Data
If you import designs from connected services (Google Drive, Dropbox, Canva), we temporarily access your files through their APIs using OAuth tokens. We do not store your third-party credentials.
2.7 The Gang Sheet Builder for Shopify
When you install The Gang Sheet Builder on your Shopify store, we collect your store's domain, name, contact email, currency and time zone; an access token for your store's API (stored encrypted), used only to read and update the products you enable, to read the orders that contain gang sheets, to price the cart, and to bill you through Shopify; your app settings (product configuration, sizes and prices, extra options, business days and holidays); and your billing status as reported by Shopify (credit purchases and plan subscriptions).
When one of your customers builds a gang sheet on your store, we collect the artwork they upload and how they arrange it, the sheet size, product and options they choose, and the design's name; and, from the order your store creates, the order number, items, amounts and status, and the customer's name, email address, phone number and billing and shipping addresses as entered at your store's checkout. On Shopify this is protected customer data under Shopify's terms. We request only the fields listed and use them to show the order to you, to produce the print-ready file, to match the payment to the sheet's price, and, if you use the fulfillment network, to route the job. Your customer's payment is collected by your store's checkout; we never see card details.
3. GSB Product Builder (Shopify and WooCommerce)
GSB Product Builder is our custom apparel app. It puts a catalogue of wholesale blanks on your Shopify or WooCommerce store, lets your customers design on the garment, quotes the order and takes a deposit through your own checkout, and produces the print files. This section describes the data it processes, in addition to Section 2.
3.1 Store Data
When you install the app on your Shopify store or connect it to your WooCommerce store, we collect:
- Your store's domain, name, contact email, currency and plan
- An access token for your store's API (stored encrypted), used only for the features described here
- Your app settings: print methods and pricing, deposit and shipping rules, and which garments and print areas you offer
- Supplier account credentials for S&S Activewear or SanMar, if you choose to enter them (stored encrypted, used only to place the blank orders you ask for)
- Your subscription status, as reported by Shopify's billing system
3.2 Customer and Order Data
When one of your customers designs and orders through the app, we collect, from the customer and from your store:
- The artwork they upload and where they place it on the garment
- The garment, colours, sizes and quantities they choose
- The quote, the deposit and the payment status of the order
- Their name, email address, phone number and shipping address, as entered at your store's checkout, and the order number
On Shopify this is protected customer data under Shopify's terms. We request only the fields listed above and use them only for the purposes in Section 3.3.
3.3 How We Use It
- To price the design and collect the deposit and balance through your store's checkout
- To produce the print-ready files and mockups for the order
- To show the order to you in the app and on your job ticket
- To estimate shipping: the destination postal code, city, state and country and the parcel weight are sent to our shipping rate provider (EasyPost). No name or street address is sent for an estimate.
- To ship the blanks to your customer when you place a blank order with a supplier: the customer's name, shipping address and email address are sent to that supplier with the order
3.4 Who We Share It With
- Your store: the order and its lines are created in your own Shopify or WooCommerce store, where they are governed by your store's privacy policy. Your customer's contact and shipping details are collected by your store's checkout.
- S&S Activewear and SanMar: only when you place a blank order, and only the shipping details needed to deliver it
- EasyPost: the destination and parcel weight, for a shipping estimate
- Nobody else. We do not sell your customers' data or share it for advertising.
3.5 How Long We Keep It
- Designs, orders and the customer details on them: as long as your store is connected, or until you delete the design
- Shopify stores: when a customer asks your store to erase their data, Shopify tells us and we remove their name, email address, phone number and shipping details from their designs. When you uninstall the app, Shopify tells us 48 hours later and we delete your store's designs, files and settings, keeping only a record that the store was removed.
- WooCommerce stores: contact us and we remove the same data on request
- Access tokens and supplier credentials: deleted when you uninstall the app or disconnect your store
3.6 Your Customers' Rights
Your customers exercise their rights through your store. When a customer asks you what we hold about them, Shopify passes the request to us and we send it to you within 30 days. On WooCommerce, contact us at support@thegangsheetbuilder.com and we will answer within 30 days.
4. How We Use Your Information
We use collected information to:
- Provide, operate, and maintain the Service
- Process your gang sheet designs and generate output files
- Manage your account, billing, and credit balance
- Authenticate your WooCommerce plugin and API requests
- Send important service-related communications
- Monitor usage for billing calculations (square inches, downloads)
- Improve and optimize the Service
- Detect and prevent fraud or abuse
5. Data Storage and Security
Your data is stored on secure servers. We implement appropriate technical and organizational measures to protect your personal information, including:
- Encrypted API tokens and hashed passwords
- HTTPS encryption for all data in transit
- Access controls limiting data access to authorized personnel
- Regular security reviews of our infrastructure
Design files and uploaded images are stored on our servers and are accessible only to you and your authorized shop integrations.
6. Data Sharing and Disclosure
We do not sell your personal information. We may share information only in the following circumstances:
- Payment Processing: Transaction data is shared with PayPal to process payments.
- Third-Party Integrations: When you authorize connections to Google Drive, Dropbox, or Canva, data flows through their APIs under their respective privacy policies.
- Legal Requirements: We may disclose information if required by law, court order, or government request.
- Business Transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction.
7. Data Retention
We retain your data for as long as your account is active or as needed to provide the Service. Specifically:
- Account data: Retained until you request account deletion
- Design files: Retained while your account is active; deleted upon account closure
- Transaction records: Retained for accounting and legal purposes as required by law
- Server logs: Retained for up to 90 days
- Shopify stores, customer erasure: when a customer asks your store to erase their data, Shopify tells us and we remove their name, email address, phone number and addresses from their orders; the order record and the artwork remain without any identity attached
- Shopify stores, data requests: when a customer asks your store for a copy of their data, Shopify tells us and we send what we hold about them to your store's contact email
- Shopify stores, uninstall: when you uninstall the app, Shopify tells us 48 hours later and we delete your store's designs, files, product configuration and settings, keeping only your account, its credit balance and transaction history, and a record that the store was removed
8. Your Rights
You have the right to:
- Access your personal data stored in our systems
- Correct inaccurate information in your account
- Delete your account and associated data
- Export your design data
- Withdraw consent for optional data processing
To exercise these rights, contact us at support@thegangsheetbuilder.com.
9. Mobile App: Information We Collect
Our iOS and Android apps collect the following. Each item is used only for the purpose stated and is never sold.
- Camera. With your permission, to take photos to upload as artwork or to share in a support chat. We access the camera only while you are actively using that feature.
- Photo library. With your permission, to let you choose existing images to upload as artwork, and to save finished images back to your device. We do not scan or index your library.
- Push notification token. A device token issued by Apple (APNs) or Google (FCM) so we can notify you about order status and new messages. It identifies a device, not you personally, and is deleted when you delete your account or sign out.
- Sign in with Apple / Sign in with Google. If you choose social sign-in we receive a unique identifier and the email address you agree to share. If you use Apple's Hide My Email, we only ever see the relay address. We never receive your password.
- Two-factor authentication data. If you turn on two-factor authentication we store an authenticator secret, a set of single-use recovery codes, and an identifier for each device you mark as trusted. If you choose email codes instead, we store a short-lived one-time code. These exist only to verify it is you signing in, are never used to identify or track you, and are deleted when you delete your account.
- Messages you send. Chat messages between you and a shop, including any images you attach, are stored so both sides can see the conversation history.
- Account details. Your name, email address and, if you provide them, phone number and billing/shipping addresses.
We do not use third-party advertising or tracking SDKs, and we do not track you across other companies' apps or websites.
10. Mobile App: Deleting Your Account
You can delete your account at any time from Settings inside the app. When you do, we immediately revoke your Sign in with Apple authorization, sign you out of every device, delete your push notification tokens and in-app notifications, and erase your name, email address, phone number, addresses and sign-in identifiers. Records the shop is required to keep for accounting and tax purposes, such as completed orders and tax-exemption certificates, are retained by that shop, with your personal account unlinked from them.
11. Cookies and Tracking
We use essential cookies for session management and authentication. We do not use third-party advertising trackers. Our use of cookies is limited to:
- Session cookies for login state
- CSRF protection tokens
12. Children's Privacy
The Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you become aware that a child has provided us with personal data, please contact us and we will take steps to delete such information.
13. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the "Last updated" date. Your continued use of the Service after changes constitutes acceptance of the updated policy.
14. Contact Us
If you have questions about this Privacy Policy, please contact us at:
support@thegangsheetbuilder.com