Privacy Policy

1. Who we are

Muglaunch, operated by Accelance ("Muglaunch", "we", "us", or "our"), operates the website muglaunch.com and the Muglaunch platform at app.muglaunch.com (together, the "Services"). Muglaunch is a print-on-demand platform that enables sellers ("Sellers") to create, list, and sell products through sales channels such as Amazon, Shopify, and Etsy, and to have those products produced and shipped to their customers.

This Privacy Policy explains what personal data we collect, why we collect it, how we use, share, protect, and retain it, and the rights you have. For personal data of Sellers who register for an account, Muglaunch acts as a data controller. For personal data of end customers that we receive through a Seller's connected sales channel (for example, an Amazon or Shopify order), we act as a service provider / data processor on behalf of the Seller and the applicable sales channel, and we process that data only to provide our Services.

For any privacy question or request, contact us at [email protected].

2. Data we collect

We collect the following categories of data:

• Account data — name, email address, password (hashed), business details, and billing information you provide when you create and use a Muglaunch account.
• Store and listing data — product designs, listings, pricing, and configuration data you create or upload on the platform.
• Order and customer data — order details received from connected sales channels, including the end customer's name, shipping address, and, where provided by the channel, contact details, solely so that ordered products can be produced and delivered.
• Payment data — processed by our payment providers; we do not store full card numbers.
• Support and communication data — messages you send us via the contact form or email.
• Usage and device data — IP address, browser type, pages visited, and interactions with our website, collected through cookies and similar technologies (see Section 10).

3. Amazon Selling Partner API data

Muglaunch is an Amazon solution provider and accesses Amazon data through the Amazon Selling Partner API ("SP-API") only after a Seller has authorized our application. Our receipt, storage, use, and disposal of information received through the SP-API ("Amazon Information") complies with the Amazon Acceptable Use Policy and the Amazon Data Protection Policy. In particular:

• What we receive. Listing, inventory, and order information for the Seller's account, which may include personally identifiable information of Amazon buyers ("Amazon PII") such as the buyer's name, shipping address, and, where provided, phone number.
• Purpose limitation. We use Amazon Information solely to provide the functions the Seller has authorized: creating and managing listings, and producing, fulfilling, and shipping orders. We never use Amazon PII for marketing or advertising, we never contact Amazon buyers, and we never sell, rent, or otherwise disclose Amazon Information for any purpose other than fulfilling the order.
• Limited sharing. Amazon PII is shared only with the production and shipping partners that need it to print, pack, and deliver the specific order, under written obligations of confidentiality and data protection at least as restrictive as this policy.
• Retention and deletion. We retain Amazon PII only as long as needed to fulfil and support the order, and we delete it no later than 30 days after order delivery. Where we are legally required to keep certain data longer (for example for tax or regulatory compliance), we retain only the minimum required data, stored encrypted and with strictly limited access, and delete it once the legal requirement ends.
• Security. Amazon Information is encrypted in transit (TLS 1.2 or higher) and at rest (AES-256 or an equivalent standard). Access is restricted to personnel and systems that need it to operate the Services ("least privilege"), protected by authentication controls, and logged and monitored. We maintain an incident response plan and will notify Amazon and affected parties of any security incident involving Amazon Information in accordance with our contractual and legal obligations.
• Deletion on request. When a Seller disconnects their Amazon account or closes their Muglaunch account, we delete the associated Amazon Information within 30 days, except for data we must retain by law as described above.

4. Shopify data

When a Seller installs the Muglaunch app, we are automatically able to access certain types of information from the Seller's Shopify account, only within the scopes the Seller approves during installation:

• Store information — the store name, domain, primary contact details, and store settings, used to identify and configure the connection.
• Product and listing data — products, variants, images, and pricing, used to create and sync Muglaunch products with the store.
• Order and fulfillment data — orders for Muglaunch products, including the end customer's name, shipping address, and, where provided, email address or phone number, together with fulfillment status, used to produce, ship, and track ordered products.

• Purpose limitation. We use Shopify data solely to provide the app's functionality: syncing products and fulfilling orders. We do not use Shopify customer data for our own marketing and we do not sell it.
• GDPR webhooks. We implement and honor Shopify's mandatory privacy webhooks. On a customers/data_request we provide the merchant with the customer data we hold; on a customers/redact we delete the customer's personal data; and on a shop/redact (after app uninstall) we delete the store's data, in each case within the timeframes Shopify requires, unless retention is legally required.
• Uninstall. When a Seller uninstalls the Muglaunch app, we stop accessing the store's data and delete stored store and customer data in line with the shop/redact process described above.

5. Other sales channels

The same principles apply to any other sales channel a Seller connects (such as Etsy): we access only the data needed to list products and fulfil orders, we use it only for that purpose, we share it only with the partners needed to produce and ship the order, and we delete it when it is no longer needed.

6. How we use data and legal bases

We use personal data to provide and operate the Services, produce and ship orders, process payments, provide support, secure and improve the Services, comply with legal obligations, and — for Sellers only, and only with consent where required — send product updates and marketing. Under the GDPR our legal bases are: performance of a contract (providing the Services and fulfilling orders), legitimate interests (security, fraud prevention, service improvement), legal obligation (tax and accounting), and consent (marketing communications and non-essential cookies).

7. Sharing and sub-processors

We never sell personal data. We share it only with: production and shipping partners (to print and deliver orders), hosting and infrastructure providers, payment processors, email and support tooling, and analytics providers (website usage only, see Section 10). All service providers are bound by data processing agreements and may use the data only to provide their service to us. Finally, we may also share personal data to comply with applicable laws and regulations, to respond to a subpoena, search warrant, or other lawful request for information we receive, or to otherwise protect our rights.

8. International transfers

Please note that personal data may be transferred outside the European Economic Area and the United Kingdom, including to the United States, where some of our hosting, production, and other service providers operate. Where such transfers take place, we rely on appropriate safeguards such as adequacy decisions or the European Commission's Standard Contractual Clauses, and we require the same of our sub-processors.

9. Retention and security

We keep Seller account data for as long as the account is active and delete or anonymize it within a reasonable period after account closure, except where retention is required by law. End-customer order data is retained only as long as needed for fulfilment and support, subject to the channel-specific deletion timelines in Sections 3 and 4. All personal data is protected with encryption in transit and at rest, role-based access controls, network protections, logging and monitoring, and regular review of our security measures.

10. Cookies and analytics

Our website uses cookies and similar technologies. "Cookies" are data files placed on your device that often include an anonymous unique identifier; for more information about cookies and how to disable them, visit allaboutcookies.org. "Log files" track actions occurring on the site and collect data such as your IP address, browser type, referring/exit pages, and date/time stamps. "Pixels" are electronic files used to record how you browse the site.

We use Google Analytics 4 to understand how visitors use the site and Meta Pixel to measure the effectiveness of our advertising and to show you targeted advertisements we believe may be of interest to you. For more information about how targeted advertising works, visit the Network Advertising Initiative's educational page at networkadvertising.org.

You can opt out of targeted advertising via Facebook's ad preferences and Google's ads settings, opt out of Google Analytics with the Google Analytics opt-out browser add-on, and opt out of some of these services through the Digital Advertising Alliance's opt-out portal at optout.aboutads.info. You can also control cookies through your browser settings. We do not use analytics or advertising tools on end-customer data received from sales channels.

11. Your rights

Depending on your location, you have the right to access, correct, delete, or receive a copy of your personal data, to restrict or object to its processing, to withdraw consent at any time, and to lodge a complaint with your data protection authority. To exercise any of these rights, email [email protected]; we respond within the timelines required by applicable law. If you are an end customer who ordered from a Seller, you can also contact the Seller or the marketplace where you placed your order, and we will support their handling of your request as their service provider.

12. Children

The Services are intended for business use and are not directed at children under 16. We do not knowingly collect personal data from children.

13. Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date above shows when it was last revised. For material changes we will notify Sellers by email or through the platform. Continued use of the Services after an update constitutes acceptance of the revised policy.

14. Contact

For more information about our privacy practices, if you have questions, or if you would like to make a complaint, contact us by email at [email protected], via our contact page, or by mail using the details below:

Accelance
Krabbelaar 8
3362 JM Sliedrecht
The Netherlands