TuliPrint is operated by PrimeCommerce LLC. This policy explains what personal information we collect when you use tuliprint.co (the “Site”) or place an order, how we use it, who we share it with, and your choices.
1. What we collect
- Account & contact details — name, email, phone, billing and shipping addresses, and (for business accounts) company name and resale or exemption certificate.
- Order content — what you ordered, configuration choices, and order history.
- Artwork files — the design files you upload for us to print. Retained for approximately 90 days after your order ships (per our storage lifecycle on Cloudflare R2) so we can fulfill reprints, then deleted.
- Payment information — processed by Stripe. We do not store full payment card numbers on TuliPrint servers; Stripe handles card data as a PCI-DSS Level 1 service provider.
- Site usage — pages visited, referrer, device type, approximate location (from IP), and basic interaction data, collected via Google Analytics 4.
- Operational logs — errors and performance telemetry, collected via Sentry, to keep the Site working.
2. How we use it
- To process and fulfill your orders, including coordinating with our production partners and shipping carriers.
- To send order-related email (confirmations, proofs, shipping notifications) via Resend.
- To respond to support requests.
- To detect and prevent fraud and to comply with legal obligations.
- To measure and improve the Site, products, and pricing.
- With your explicit consent, to send promotional email; you can unsubscribe at any time.
3. Who we share it with
We share personal information with the service providers we use to run TuliPrint, only as needed to deliver your order or operate the Site:
- Stripe — payment processing
- Resend — transactional email delivery (from
admin@tuliprint.co) - Vercel — storefront hosting and edge delivery
- Railway — backend hosting (orders, accounts, admin)
- Cloudflare — DNS, CDN, and R2 object storage for uploaded artwork
- Sentry — error monitoring and performance telemetry
- Google Analytics 4 — aggregate usage analytics
- Print.App — production file generation and proofing for custom-print products
- Production & shipping partners — the printers who produce your order and the carriers (UPS, FedEx) who deliver it
We do not sell your personal information, and we do not share it with third parties for their independent advertising purposes. We may disclose information if required by law, subpoena, or to protect our rights and safety or those of our customers.
4. Cookies and tracking
We use cookies and similar storage to keep you signed in, remember cart contents, and measure Site performance. You can disable cookies in your browser, but parts of the Site may not work as expected (sign-in, cart, checkout). Google Analytics uses cookies to collect aggregate usage data — see Google’s privacy policy for details. To opt out of Google Analytics across the web, install the Google Analytics opt-out browser add-on.
5. Data retention
- Account records — kept while your account is active and for a reasonable period after for tax and dispute records.
- Order records — retained for at least 7 years for accounting and tax purposes.
- Artwork files — retained for approximately 90 days after the order ships, then deleted automatically by our storage lifecycle.
- Analytics data — retained per the configured Google Analytics property settings.
6. Your rights and choices
Regardless of where you live, you can email admin@tuliprint.co at any time to:
- Request a copy of the personal information we hold about you;
- Correct inaccurate personal information;
- Delete your account and the personal information associated with it (subject to legal and accounting retention obligations).
California residents (CCPA / CPRA)
If you are a California resident, you have the right to know what personal information we collect, the right to delete it (with limited exceptions), the right to correct inaccurate personal information, and the right to opt out of any “sale” or “sharing” of personal information as those terms are defined under California law. We do not sell or share your personal information in that sense. To exercise any of these rights, email admin@tuliprint.co. We will not discriminate against you for exercising these rights.
European Economic Area, UK, and Switzerland
We are a US-based business and primarily serve customers in the United States. If you place an order from the EEA, UK, or Switzerland, you have rights under GDPR including the right to access, rectify, erase, restrict, and port your personal data, and to object to certain processing. To exercise any of these rights, email admin@tuliprint.co. Our legal bases for processing are contract performance (your order), legitimate interest (fraud prevention, Site improvement), and consent (where you give it for marketing).
7. Security
We use industry-standard safeguards — HTTPS in transit, encryption at rest on payment and storage providers, restricted internal access — to protect personal information. No system is perfectly secure, and we cannot guarantee absolute security; if a breach occurs that affects your information, we will notify you as required by law.
8. Children’s privacy
The Site is not directed at children under 13 (or under 16 in the EEA), and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact admin@tuliprint.co and we will delete it.
9. Changes to this policy
We may update this Privacy Policy as our practices evolve. The “Last updated” date above will reflect the most recent revision. Material changes will be communicated to active customers.
10. Contact
Privacy questions or data requests: admin@tuliprint.co.
PrimeCommerce LLC
TuliPrint
Mailing address available on request.