Last updated: November 11, 2026
This policy explains what SheetStamp ("we") collects when you use SheetStamp, why, and how long we keep it.
Account data. Your email address, your plan, the month-by-month count of units and requests you have used, and a one-way hash of your API key (we do not store the key itself).
Billing data. If you buy a plan, Stripe collects and stores your payment details. We receive only your Stripe customer and subscription identifiers and your plan. We never see or store card numbers.
Content you send. The label and document data in each request: for example barcode values, product names, prices, and for invoices and packing slips the order number, store name and address, the buyer's name and billing and shipping address, line items and totals. We process this in memory to create the file and return it. We do not store request content or the generated files.
Technical logs. For each request: time, IP address, the endpoint, response status and timing. Logs do not include request content.
The WordPress plugin. Printing from the browser sends nothing to us. Data is sent only when you request an API key, download a PDF or ZPL file, create an invoice or packing slip, view your plan in the plugin settings, or change plan. The plugin readme lists exactly what each action sends.
To provide the Service and create the files you ask for; to send your API key link and essential service emails; to measure usage against your plan; to bill you; and to keep the Service secure and prevent abuse. We do not sell personal data, show adverts or use your content for any purpose other than creating your files.
When you send invoices or packing slips, you decide what personal data about your customers is included and we process it only on your instructions, to produce the document. For that data you are the controller (or "business") and we act as your processor (or "service provider").
Service providers who help us run SheetStamp: our hosting provider (servers), Stripe (payments), and our email delivery provider (key and service emails). They may process data only to provide their service to us. We may disclose data if the law requires it, or as part of a sale or merger of the business, in which case this policy continues to apply to your data.
Request content and generated files: not stored. Technical logs: up to 30 days. One-time key links: expire after 1 hour. Account and usage data: for as long as the account exists, then deleted within 30 days of a deletion request, except records we must keep for tax and accounting. Database backups: 14 days.
All traffic uses HTTPS. API keys are stored only as one-way hashes. Access to the servers is limited to people who need it to run the Service. No system is perfectly secure; if a breach affects your data we will tell you without undue delay.
You can ask us for a copy of your account data, to correct it, or to delete your account, by emailing support@sheetstamp.com from the account's address. Depending on where you live (for example the EEA, UK or some US states) you may have further rights, including to object to or restrict processing and to complain to your data protection authority. We respond within 30 days.
We and our providers may process data in the United States and other countries. Where the law requires it, we rely on appropriate safeguards such as standard contractual clauses.
The SheetStamp website and API do not set tracking or advertising cookies. Stripe's checkout pages use the cookies described in Stripe's own policy.
The Service is for businesses and is not directed at children under 16. We do not knowingly collect their data.
We will post changes here and update the date above. For significant changes we will email account holders.
SheetStamp, 3064 Wake Forest Road #1125, Raleigh, NC 27609. Email: support@sheetstamp.com.