Privacy policy
Last updated: November 1, 2026
This policy covers the website imprime.io (including the documentation) and the hosted service app.imprime.io. It does not cover self-hosted instances of Imprime: whoever runs one is responsible for the data it holds, and none of it reaches us.
Who is responsible
Section titled “Who is responsible”The data controller is Rémi Dufeu, entrepreneur individuel (EI), 990 boulevard Guillaume Apollinaire, 06600 Antibes, France — SIREN 888 062 460. For any question or request about your data: contact@imprime.io.
The website
Section titled “The website”The website sets no cookies, runs no analytics and loads nothing from third parties. Your choice of light or dark theme is kept in your own browser (local storage) and never sent to us. Like any web server, our host records technical logs (IP address, date, page requested) for security purposes.
The hosted service
Section titled “The hosted service”| Data | Why | Legal basis |
|---|---|---|
| Account: name, email address, password (stored hashed), whether your address is verified | Create and secure your account, sign you in | Performance of the contract |
| Sign-in with Google, GitHub or Microsoft: the name, email address and profile picture that provider shares | Sign you in without a password, if you choose to | Performance of the contract |
| Sessions: a session cookie, your IP address and browser user agent | Keep you signed in, detect suspicious sign-ins | Performance of the contract, legitimate interest (security) |
| API keys (stored hashed) | Let your programs and AI agents use your account | Performance of the contract |
| Your content: templates, images, fonts and variables you create or upload | Provide the service | Performance of the contract |
| Values for previews created by an AI agent | Show you the document before you print it | Performance of the contract |
| Technical logs | Security, abuse prevention, troubleshooting | Legitimate interest |
The values you send to the export API are used to render the PDF and are not stored.
We send you account emails only (for example, to verify your address). We do not sell your data, use it for advertising, or share it with anyone other than the service providers listed below.
Personal data inside your documents
Section titled “Personal data inside your documents”When the values you send contain personal data (your customers’ names, addresses, amounts…), you are the controller of that data and we process it on your behalf, as your processor. The terms of service set out how we do it.
Service providers
Section titled “Service providers”| Provider | Role | Location |
|---|---|---|
| OVH SAS | Hosting of the website and application, sending of emails | France |
| MongoDB, Inc. (MongoDB Atlas) | Database | Stored in the EU: AWS, Paris region (eu-west-3) |
| Google, GitHub, Microsoft | Sign-in, only if you choose it | Their own privacy policies apply |
Your data is stored in the European Union. MongoDB, Inc. is a US company: any transfer of data outside the EU it may carry out is covered by the European Commission’s standard contractual clauses included in its data processing agreement.
How long we keep it
Section titled “How long we keep it”- Account and content: as long as your account exists. After you ask us to delete your account, everything is deleted within 30 days.
- Sessions: until you sign out or the session expires.
- Previews: deleted automatically 24 hours after they are created.
- Images no longer used in any template: deleted automatically after 7 days.
- Technical logs: up to 12 months.
Your rights
Section titled “Your rights”Under the GDPR, you can access your data, have it corrected or deleted, receive it in a portable format, restrict its processing or object to it. To exercise these rights, or to delete your account, write to contact@imprime.io. We answer within one month.
If you believe your rights are not respected, you can lodge a complaint with the French data protection authority, the CNIL.
Cookies
Section titled “Cookies”The application only uses the cookies strictly needed to keep you signed in. They require no consent, and there are no advertising or analytics cookies.
Security
Section titled “Security”Connections are encrypted (HTTPS), passwords and API keys are stored hashed, and access to the production systems is restricted.
Changes
Section titled “Changes”We will update this page if our practices change, and inform you by email of any significant change.