Privacy policy

1. Data processed

The site processes uploaded PDF files to produce the requested output, technical identifiers needed for free quotas and abuse prevention, information transmitted by the payment provider, and the minimum support data you send us, including any attachment you choose to add.

For physical-product orders, the site also processes the purchased items, amount paid, selected delivery method, customer name, email address, telephone number and delivery address required to prepare and ship the parcel.

For referrals, the site processes the sponsor and referred-account identifiers, referral code, attribution and payment dates, eligible plan, discount amount, reward status and the Stripe identifiers needed to prevent duplicate credits.

The desktop application also sends privacy-minimized technical events: application opening, PDF saving, printing, update status, application version, numeric label/sheet/file counts, normalized error category, a rotating pseudonymous installation identifier and, when signed in, the account identifier. PDF content, file names, recipients, addresses and raw error messages are never included in these usage events.

2. Purposes

These processing operations are used to provide the service, enforce free limits, manage premium access, answer support requests, secure the platform and log useful diagnostic or anti-abuse events.

Physical-order data is used to confirm payment, prepare the order, arrange delivery, provide customer support and notify authorized Label2A4 administration that a parcel is ready to be processed.

Referral data is used to attribute the invitation, apply the referred-customer discount, validate the sponsor credit after 14 days, enforce the annual limit and prevent abuse.

Desktop usage statistics are used only to measure service adoption, understand export and print usage, monitor update adoption, detect technical failures and improve reliability. They are not used for advertising or cross-service tracking.

3. Legal basis

Strictly necessary processing relies on the requested service. Payments are handled by the payment provider. Optional site analytics and conversion events require a specific analytics choice. Advertising uses separate choices managed by Google’s consent service. The consent service can initialize with ad requests paused; advertising is not released merely by accepting site analytics.

Privacy-minimized desktop diagnostics and usage measurement rely on the publisher's legitimate interest in maintaining, securing and improving the subscribed service. You may object to this processing by contacting support.

4. Retention periods

PDF files are processed only for the time required to generate the requested output and are not stored by the site afterward.

Technical cookies and access information are kept only for the time strictly necessary to operate the service. Technical logs and minimum quota or anti-abuse data are kept for 30 days.

The referral attribution cookie expires after 30 days. Referral history is kept for up to 3 years after the last program activity for benefit tracking, dispute handling and fraud prevention, without prejudice to mandatory accounting retention periods.

Desktop usage events are retained for no more than 25 months. The pseudonymous installation identifier is renewed after 13 months. Account deletion removes the direct account link from retained technical events.

Attachments sent to support are used only to handle your request and are not published by the site.

Physical-order and invoice information is retained for the time necessary to fulfil the order and meet applicable accounting, tax and legal obligations. Operational Discord notifications are deleted according to the retention rules of the private channel controlled by Label2A4.

5. Recipients

Payment data necessary to process purchases is handled by a specialized payment provider. Hosting is provided by Vercel Inc.. Audience measurement is supplied by a consent-aware analytics tool. Support requests may transit through the transactional email provider configured for support. Google AdSense may be used to display ads on content pages after consent, and premium users do not receive ads. No PDF is sold, shared or stored for marketing purposes.

Desktop technical usage events are stored by the service database provider and are accessible only to authorized Label2A4 administration.

For physical orders, the information strictly necessary for parcel preparation may be sent through Discord to a private operational channel controlled by Label2A4. It is not posted in a public community channel and is used only for order fulfilment.

6. Your rights

You can exercise your rights of access, rectification, deletion, objection and restriction at support@label2a4.com.