Privacy Policy

Who Is Responsible

BrandMyPrint is operated by BrandMug Sdn Bhd in Malaysia. We handle personal data in accordance with applicable Malaysian privacy requirements, including the Personal Data Protection Act 2010 where it applies.

Information We Collect

• Account details such as name, email, phone number, and registration country.
• Shipping details for your own address and saved recipient addresses.
• Uploaded photos, generated artwork, proof files, and print files.
• Order details such as products, sizes, pricing, discounts, and delivery region.
• Pseudonymous usage information such as page views, on-screen content impressions, clicks, selected filters, favourites, generation steps, cart actions, and device category.
• Technical and security information such as IP address, device/browser details, authentication events, service errors, and abuse-prevention records.

How We Use Information

We use your information to provide AI generation, prepare print-ready files, manage orders, deliver products, prevent misuse, and provide customer support.

We also use aggregate usage and operational information to understand which recipients, occasions, styles, homepage content, and AI templates are useful; improve the shopping journey; secure accounts; diagnose failures; and meet legal and accounting duties.

Storage & Access

Images and order files are stored securely in our backend systems. Access is limited to the account owner and authorized BrandMyPrint staff needed for production and support.

Image Retention

AI artwork and customer-uploaded artwork shown in My Artwork are retained for 72 hours, then removed automatically. A face photo you intentionally save as a reusable reference remains in your browser until you delete it or clear that browser's storage. When a saved reference is used for an AI generation, the processing copy follows the same 72-hour retention period.

Files attached to a paid order may be retained longer when needed to manufacture, deliver, support, reprint, refund, or keep required business records for that order.

Service Providers

We use contracted infrastructure, cloud storage, AI processing, email, payment, printing, and delivery providers only where needed to provide the requested service. Stripe processes payment details; BrandMyPrint does not store your complete card number.

Some providers may process data outside Malaysia. We use providers and safeguards appropriate to the service and limit shared data to what is reasonably required.

Saved Addresses

Customers may save their own shipping address and up to 50 recipient addresses for future orders. You can update saved address information during checkout.

Security & Backups

We use access controls, signed requests, encryption in transit, restricted storage rules, retention controls, monitoring, and backups designed to protect customer information. No online system can guarantee absolute security.

Cookies & Local Storage

We use browser storage for sign-in, cart, saved face references, preferences, security, and pseudonymous first-party visitor and session identifiers. Our internal behavior analytics do not include customer names, email addresses, uploaded photos, or AI prompts, and we respect the browser's Do Not Track setting.

We do not currently use third-party advertising trackers. If advertising cookies or third-party marketing analytics are introduced, this policy and any required consent controls will be updated first.

Children

The purchasing service is intended for adults. A parent or guardian should manage any order or uploaded image involving a child.

Your Choices

You can remove saved face references in My Studio and update account or address details from your profile. You may request access, correction, deletion, or withdrawal of consent where applicable. Some order and accounting records may need to be retained to meet legal, fraud-prevention, tax, or dispute obligations.

Contact

For privacy requests, contact support@brandmyprint.com with the subject “Privacy request”. We may need to verify your identity before acting on an account request.