PRINT@

Privacy Policy

Effective 2026-09-30. This explains what Print@ (operated by Spaceship Earth, LLC, a Wyoming limited liability company, doing business as EarthPilot) collects, why, where it goes, and how long it stays. It applies to printat.co, the hosted service, and the parts of the driver that talk to us.

What we collect

Account and device: your email address and your Mac's hostname when you connect a driver; a shop's name, address, email, hours and prices when a shop signs up. A business's contact details can identify a person, for example a sole proprietor.
Relayed documents: when a connected driver sends an order through the cloud, the document passes through our server in memory and is handed to our email provider for delivery to the shop. We do not keep a copy in our database or on disk. Our email provider retains delivery logs and message content for a limited period under its own policy. We keep the job's metadata: shop, destination address, subject, filename, a reference and the time. Subjects and filenames can reveal what a document is.
Portal documents: files sent through the web portal to a Print@ Network shop are stored on our server only so the shop can print them. They are deleted when the shop marks the order picked up, unconfirmed uploads after 2 hours, and anything remaining after 7 days.
Shop facts: if sharing is on (it is by default for connected drivers; turn it off in the console), the driver sends us what it verified about shops: how a shop takes files, hours, prices, and whether an order it sent went through. This describes businesses and may include a business's contact details; it does not include your document or your identity. We store it and serve it to other connected drivers.
Replies: when a shop replies to an order through a Print@ reply address, the message is relayed to the customer and its text is kept with the order so we can debug problems. Replies can contain whatever the shop wrote.
Bug reports and help questions: what you type, an optional screenshot, and, from the driver, diagnostics: versions, settings with keys removed, the last 80 lines of the agent log (which include shop names and job titles), and the last receipt. You choose what to send; screenshots are deleted after 30 days. Do not put confidential documents or credentials in support messages.
Location: to find nearby shops the driver first asks macOS Location Services (usually denied for command-line tools), then looks up your approximate location from your IP address through ip-api.com, then falls back to the home address you set in the console. Your coordinates go to Apple Maps for the shop search. Our shop-facts lookup receives the coordinates of the candidate shops, which are near you. We do not keep a history of your locations; our hosting and edge providers keep short-lived request logs that include your IP address.
Website: our pages load fonts from Google Fonts, which receives your IP address. We run no analytics or advertising trackers on printat.co.

Where it goes

Print shops and printer networks: your document, name and contact email, so they can print it and reach you. Their handling of it is governed by their policies, not ours; enrolled Print@ Network shops also agree to the data-handling rules in our Terms of Use.
Email delivery: outbound mail is sent through Resend; inbound mail to @printat.co is routed through Cloudflare Email Routing and a Cloudflare Worker.
Hosting: our server and database run on Railway in the United States; the site and domain are fronted by Cloudflare.
AI providers, on your Mac: when AI research runs on your Mac, the list of candidate shops, your job's specifications (page count, copies, color, paper, finishing, deadline), your approximate location and previously verified shop facts are sent to the provider you configured: Anthropic through Claude Code, or Anthropic or OpenAI through an API key. Your document is not sent. Your provider account terms govern that processing. We never receive your provider credentials; they stay in the driver's config file on your Mac.
AI providers, on our side: bug-report text and diagnostics, help-page questions, and the public web pages of print shops are sent through OpenRouter to a decision model operated by TypeSafe (typesafe/jev) to classify them. Documents are never sent. OpenRouter's and the model operator's retention policies apply to those requests.

We do not sell personal information and do not share it for cross-context behavioral advertising.

Without a hosted connection

If you do not connect the driver to our hosted service, print jobs are sent through your Mail.app account or SMTP provider rather than our relay, and we receive no job data or shop facts. The driver still makes network requests to Apple Maps, ip-api.com and any AI provider you configured, and checks printat.co once a day for driver updates; you can stop the update check by removing the driver.

How long we keep it

Account and device records: until you disconnect or ask us to delete them. Job metadata, shop replies and support text: up to 12 months for support and abuse prevention. Documents and screenshots: as described above. Shop facts: indefinitely, as they describe businesses. Backups of our database may hold deleted records for up to 30 days.

Security

Data in transit is encrypted (HTTPS, and TLS to email providers where they support it). Access to the server and database is limited to the people who operate Print@. No system is perfectly secure, and email to a shop is only as secure as the shop's mailbox. If we learn of a breach affecting your personal information we will notify you as the law requires.

Your choices and privacy requests

Disconnect any time with printat disconnect; turn off shop-fact sharing in the console; uninstall with ~/printat/uninstall.sh. Whether or not a particular privacy law applies to us, you may ask to access, correct or delete personal information we maintain about you by emailing print@printat.co. You do not need an account. We may verify your identity and retain information needed for legal, security or other permitted purposes. Where privacy law gives you additional rights, we will honor them. We will not treat you differently for making a request.

Do Not Track: our website does not change its behavior in response to browser Do Not Track signals; we honor Global Privacy Control where applicable law requires. Third-party tracking: we do not allow third parties to collect personal information through Print@ about your activities over time and across other websites.

Cookies: the shop portal sets one session cookie to keep a shop logged in; the public pages set none.

If you are in the EU, UK or another place with data-protection law

Spaceship Earth, LLC, a Wyoming limited liability company, doing business as EarthPilot is the controller of the data described here, except that for documents and customer details a shop receives, the shop is a separate controller. We process data to provide the service you asked for (contract), to keep the service secure and improve it (legitimate interests), and where you agree to it (shop-fact sharing, bug reports). We do not currently target users outside the United States, and our servers are in the United States, so your data is processed there. You have the rights to access, correct, delete, restrict and port your data and to object to processing, and to complain to your local authority. Email print@printat.co.

Changes

We will post changes here with a new effective date; for material changes we will give reasonable notice by email or a prominent notice on printat.co.

Contact

Spaceship Earth, LLC, a Wyoming limited liability company, doing business as EarthPilot
30 North Gould Street, Ste R, Sheridan, WY 82801
print@printat.co