Privacy Policy
Effective August 30, 2026
This explains what personal information DTF Station LLC handles when a print shop uses Kova, why, and what choices people have.
Two different roles
For a shop’s own staff accounts, we are the controller. We decide what to collect to run the service and are directly answerable for it.
For the shop’s customers, we are a processor acting on the shop’s instructions. When an order arrives, the customer’s name, email and shipping address enter Kova because the shop put them there. The shop decides why that data exists and how long to keep it; we handle it only to provide the service, and we act on the shop’s instructions about it. If you are a customer of a print shop and want your information corrected or deleted, contact that shop — they can reach us if they need help.
What we collect
From shop staff
- Name, email address and password (stored only as a secure hash).
- The shop you belong to and your role in it.
- Records of significant actions taken in the app — who pressed a unit, who shipped an order, who changed a setting, who exported data. This is the activity log, and it exists so shops can answer their own questions.
- Ordinary technical logs: IP address, browser type, timestamps, error traces.
From the shop’s orders (on the shop’s behalf)
- Customer name, email address and shipping address.
- Order contents, artwork and mockups uploaded for printing.
- Production records for each garment.
Payment information
Subscription payments are processed by Stripe. Card numbers never reach our servers. We store only a customer identifier, the plan, and the subscription’s status.
Why we use it
- To provide Kova — nesting artwork, producing print files, tracking units, printing shipping labels.
- To authenticate people and enforce staff roles.
- To bill subscriptions and enforce plan allowances.
- To send transactional email: password resets, quotes, receipts, tracking.
- To keep the service secure and diagnose faults.
- To meet legal and tax obligations.
We do not sell personal information, we do not share it for advertising, and we do not use your artwork or your customers’ data to train machine-learning models.
Who we share it with
Only the service providers needed to run Kova, each handling data under contract and only for that purpose:
| Provider | What it handles |
|---|---|
| Render | Application hosting and the database (United States) |
| Cloudflare R2 | Artwork and print file storage (United States) |
| Stripe | Subscription payments and sales tax |
| Resend | Transactional email delivery |
| EasyPost | Shipping labels and tracking, when enabled |
| Anthropic | Powers the in-app assistant, when a shop uses it. Prompts are not used to train models. |
We may also disclose information where the law requires it, or to protect our rights or someone’s safety. If DTF Station LLC is ever sold or merged, data may transfer with the business, and this policy continues to apply until replaced.
How long we keep it
- Artwork and order records: for as long as the shop’s account is open, so old orders can be reprinted.
- Rendered print files: 90 days after the sheet is printed, then deleted. They are rebuilt on demand from the stored layout.
- After an account closes: 30 days, then deleted.
- Activity logs and records we must keep for tax or legal reasons: retained for the period the law requires.
Security
- Encrypted in transit (HTTPS) and at rest.
- Stored credentials for connected services — store tokens, supplier and carrier keys — are encrypted with a separate key before they are written down.
- Each shop’s data is separated by tenant, and staff roles limit what any one person can reach.
- Significant actions are recorded in the activity log.
No system is perfectly secure. If a breach affects personal information, we will notify affected shops without undue delay and tell them what we know.
Your rights
Depending on where you live — including under the GDPR in Europe and the UK, and the CCPA/CPRA in California — you may have the right to access, correct, delete or receive a copy of your personal information, to object to or restrict certain processing, and to withdraw consent. California residents have the right not to be discriminated against for exercising these rights; we do not sell or share personal information as those laws define it.
Shops can export their data at any time from Settings → Export, without asking us. For anything else, write to privacy@kovaprints.com and we will respond within 30 days. If you are a customer of a print shop, please contact that shop first — the data is theirs, and they can act faster than we can.
International transfers
Kova is hosted in the United States. If you use it from elsewhere, your information is transferred to and processed in the United States, and we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses where they apply.
Children
Kova is business software and is not directed at children under 16. We do not knowingly collect their information.
Cookies
We use cookies that are strictly necessary to keep you signed in and to keep the app secure. We do not use advertising or third-party tracking cookies.
Changes
We will post any update here with a new effective date, and give notice in the app or by email when the change is material.
Contact
DTF Station LLC
REVIEW — add the registered business address
privacy@kovaprints.com