Privacy Policy
This policy explains what SMTagsMaker collects, why, and what you can do about it. We keep it short because we collect very little.
1. What we collect
Account data
When you sign in with Google we receive your name, email address, profile photo URL and a stable Google identifier. If you use the owner password login, we store a salted scrypt hash of the password — never the password itself.
Your content
The Excel/CSV files you upload, the products in them, the designs you create, the images you upload, and the PDFs you generate. This is stored so you can come back and print again.
Usage data
When an export happens we record the account, a short description (layout and time) and the count. We use it to run the free-export limit and to answer support questions. We do not build advertising profiles.
Payment data
Card payments are handled by Stripe. We receive only the confirmation, amount, currency and a Stripe reference. We never see your card number. Stripe's own privacy policy applies to that part.
2. Cookies
We set one session cookie so you stay signed in, and a short-lived cookie during Google sign-in to stop cross-site request forgery. We do not use advertising or analytics cookies, and there is no third-party tracking script on this site.
3. Why we process it
- To give you the account and the studio you signed up for.
- To generate your previews and PDFs when you ask for them.
- To take payment and keep the licence record.
- To answer support email and to keep the service secure.
4. Who touches it
- Google — sign-in only.
- Stripe — payments only.
- Our hosting provider — the server and its backups.
We do not sell your data, share your catalogue with other customers, or use it to train models.
5. How long we keep it
Account and content data stay while your account exists. If you ask us to delete your account, we remove your designs, uploads and generated files, and the account row, within 30 days. Licence and payment records are kept longer where tax law requires it. Server backups roll over within 30 days.
6. Security
Passwords are hashed with scrypt. Sessions are server-side rows behind an HttpOnly cookie and every mutating request carries a CSRF token. Files are served only to the account that owns them. No system is perfect; if you find a problem, email support@smnabhogroup.com and we will fix it.
7. Your rights
You can ask for a copy of your data, a correction, or deletion. Designs can be exported as JSON from the studio at any time. Write to support@smnabhogroup.com and we will answer within 30 days.
8. Children
The Service is for businesses. It is not directed at children under 18 and we do not knowingly collect their data.
9. Changes
If this policy changes in a way that matters, we will date the new version and tell account holders by email before it takes effect.
10. Grievance contact
For privacy requests or complaints: support@smnabhogroup.com, SM Nabho Group, India. If you are not satisfied, you may escalate under the Digital Personal Data Protection Act, 2023.