Information We Collect

• Account data you give us — your name, email address, billing information and business details when you create an account, together with any messages you send to our support team.
• Connected shop data — when you link an e-commerce platform (Etsy, Amazon, Shopify, TikTok Shop), we read order details, listing and product information, inventory levels and sales figures for the shops you authorise, solely to fulfil orders, manage listings and produce analytics for you. Order details include your buyers’ names and shipping addresses, because producing and shipping an order requires them. For your buyers’ personal data you are the controller and we act as your processor, handling it only on your instructions.
• ChatGPT app data — when you connect the DodgePrint app for ChatGPT, we receive the tool calls that ChatGPT makes on your behalf and the arguments attached to them. This is described in full in the section on the ChatGPT app below.
• Etsy market-research data — publicly available listings, shops, keywords and aggregated sales signals collected from Etsy, as described in the market-research section below. This data is about public storefronts, not about you.
• Technical and usage metadata — IP address, browser and device information, and request logs including timestamps and which endpoints or tools were called, generated when you use our website, our API or the ChatGPT app. We state this explicitly because we do collect it: we use it to keep the service running, diagnose faults and detect abuse, and for nothing else.

Data We Never Collect

• Payment card data subject to PCI DSS. Your DodgePrint subscription is handled by a third-party payment processor; card numbers never reach our servers, and we never receive your buyers’ card details from any connected marketplace.
• Protected health information.
• Government identifiers, such as social security numbers, national identity numbers or individual tax identification numbers.
• Access credentials and authentication secrets — we never ask you to enter a password, API key, MFA or one-time code into the DodgePrint app for ChatGPT, and no tool accepts them as input. Marketplace integrations are authorised through each platform’s own flow, and what we hold is the resulting access token, never your password.
• Special-category or sensitive personal data as defined in your jurisdiction, including racial or ethnic origin, political opinions, religious or philosophical beliefs, trade-union membership, genetic or biometric data, health data, and data concerning sex life or sexual orientation.
• We also do not use the metadata we do collect — IP addresses, timestamps, query patterns — for behavioural profiling, advertising, ad targeting or cross-site tracking, and we never sell it.

How We Use Your Information

The DodgePrint App for ChatGPT (MCP Connector)

• What we receive from ChatGPT — only the tool call and the arguments attached to it, for example a shop identifier, an order number, a keyword or a date range. We do not receive your ChatGPT conversation history, your prompts, your uploaded files or your custom instructions. Where ChatGPT passes a pseudonymous user identifier so that we can match the request to the DodgePrint account you linked, we use it for that purpose only.
• What we send back — only the result of the tool you invoked: shop, listing, order, catalogue, fulfilment, inventory, finance or market-research data, scoped to the workspaces you authorised. Order results include a buyer summary, so they can contain your buyers’ names and shipping addresses; ask for an order and that information is returned into your ChatGPT session, where OpenAI also handles it. We do not keep a copy of what the model then writes.
• Authorisation and tokens — connecting the app runs an OAuth 2.0 authorisation-code flow against your DodgePrint account. You see exactly which permissions are requested before you approve, and we request only the scopes the tools need. We store the resulting access and refresh tokens encrypted at rest, scoped to the workspaces you granted, and the scope is verified on every tool call. Expired or revoked tokens are rejected. We never receive or store your DodgePrint password or any marketplace password through the app.
• Logging — we keep an operational record of each tool call: the tool name, timestamp, workspace, status code, response time and a correlation identifier used to trace faults. We redact personal data before writing to these logs, and we do not store raw prompt text or the content of your conversation with ChatGPT. The records are used only to run the service, diagnose errors and prevent abuse, and are deleted on the schedule set out in the retention section below.
• Account linking and write access — linking your DodgePrint account is an explicit step you take, and the permissions being requested are shown to you before you approve them. Some tools only read your data and some change it; the operations that could reach your buyers or spend money are blocked outright, as described below.
• What the app cannot do — it cannot publish to a marketplace, send anything to your buyers, add tracking, or spend money. Our server refuses these operations and returns a block reason, whichever tool asks for them, so neither you nor the model can trigger them through ChatGPT.
• OpenAI’s role — ChatGPT is operated by OpenAI, not by us. Anything you type into ChatGPT, and anything we return into that conversation, is also handled by OpenAI under OpenAI’s own privacy policy, which we do not control.

Etsy Market Research Data

• This data describes public storefronts and public listings. It is not derived from your orders, your customers, or any other DodgePrint customer’s private account data.
• We do not collect buyer names, buyer addresses, reviews tied to identifiable individuals, or any end-customer personal data as part of market research.
• The research queries you run are private to your workspace. We do not share them with other users and we do not sell them.
• Where a shop owner’s name appears as part of a public Etsy shop profile, we treat it as personal data and honour deletion requests. If you own an Etsy shop and want it excluded from our research index, write to [email protected] and we will remove it.

Information Sharing & Disclosure

• E-commerce platforms you have connected (Etsy, Amazon, Shopify, TikTok Shop) — as required for the integration you enabled to function.
• Fulfilment and print providers you have selected — to produce and ship the orders you route to them.
• Cloud infrastructure and hosting providers — to store and serve your data.
• Operational service providers — error monitoring, analytics and customer-support tooling used to run and support the platform.
• Payment processors — to handle billing for your DodgePrint subscription.
• OpenAI — only if you choose to connect the DodgePrint app for ChatGPT. The results we return are delivered into your ChatGPT session and are from that point also handled by OpenAI under OpenAI’s privacy policy.
• Legal and regulatory authorities — where the law requires it, or to establish, exercise or defend legal claims.
• A successor entity — if DodgePrint is involved in a merger, acquisition or sale of assets, in which case we will notify you before your data becomes subject to a different privacy policy.

International Data Transfers

Data Security

How Long We Keep Your Data

Your Rights

Your Controls for the ChatGPT App

• Disconnect from the ChatGPT side — in ChatGPT, open Settings, go to Apps & Connectors, select DodgePrint and choose Disconnect. The app immediately loses access and ChatGPT stops calling our tools.
• Revoke from the DodgePrint side — revoke the ChatGPT authorisation in your DodgePrint account settings, or email [email protected] and we will revoke it for you. Either way your access and refresh tokens are deleted immediately and any further tool call from ChatGPT fails with an authorisation error.
• Choose what the app can reach — the app operates only on the workspaces you granted when you authorised it. You can switch which of those workspaces is active during a conversation, but connecting the app never grants access to a workspace you did not authorise.
• Delete your ChatGPT app data — email [email protected] from your account address with the subject “ChatGPT app data deletion”. We will delete your stored tokens and your tool-call logs within 30 days and confirm in writing.
• Delete everything — you can close your account and have the associated data deleted from the account deletion page, or by contacting [email protected]. Records we are legally required to retain, such as invoices, are kept for the periods set out above and then deleted.

Children’s Privacy

Multi-Platform Developer Compliance

• We follow each platform’s specific data handling guidelines and requirements.
• Customer data from all platforms is used solely for order fulfilment and the analytics we provide back to you.
• We never use platform customer data for marketing, and we never share it with third parties outside the categories of recipient listed above.
• Each platform’s data is isolated per workspace and handled according to that platform’s policies.
• Each tool we publish for ChatGPT has its own description, input schema and annotations. Operations that would reach your buyers, publish to a marketplace or spend money are blocked on our server and return a block reason, regardless of which tool asks for them.

Changes to This Policy