Privacy policy

We collect personal information from the following sources.

Information you provide to us. This includes your name, email address, phone number, company name and role, billing and shipping addresses, order and quote details, product Specifications, and the contents of your communications with us (for example, support requests).

Customer Content. When you use our online design tools, including our 3D design tool, or upload your own artwork, we collect and store the designs, artwork, logos, files, and related materials you create or upload. We use and share this Customer Content only to the minimum extent necessary to provide the Services and to produce and deliver your orders, as further described in this Policy and in our Terms of Service.

Payment information. Payments are handled by our third-party payment processor (such as Stripe). We do not collect or store your full payment card number. We may receive limited transaction information, such as a confirmation of payment and the last digits and type of card used.

Information from sign-in providers. If you choose to sign in using a third-party service such as Sign in with Google, we receive basic account information from that provider, including your name, email address, profile picture, and a Google account identifier. We use this information only to create and authenticate your account. We do not access your Gmail, Google Drive, Google Contacts, or any other Google service or data. See Section 2 for more detail.

Information collected automatically. When you use the Services, we and our service providers automatically collect certain technical and usage information through cookies and similar technologies, such as your device type, browser, IP address, pages viewed, referring pages, and how you interact with the site.

If you sign in with Google, our access is limited to authentication only. We request only basic profile and email information (your name, email address, profile picture, and Google account identifier) for the purpose of creating and verifying your account. We do not request or access sensitive or restricted Google data, such as your email content, files, or contacts.

Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data for advertising, and we do not sell Google user data or transfer it to others except as necessary to provide and secure the account sign-in feature, to comply with applicable law, or as part of a merger or acquisition as described in this Policy.

We use personal information to:

provide and operate the Services, including generating quotes, processing sample orders and production orders, and creating and authenticating your account;

produce and deliver your orders, including by sharing your Customer Content and Specifications with our manufacturing and supply partners as needed for fulfillment;

communicate with you, including responding to inquiries, sending order and service messages, and providing customer support;

operate, maintain, secure, and improve the Services, and understand how the Services are used;

conduct analytics and, where applicable, advertising and remarketing, including through partners such as Google Analytics and Google Ads; and

comply with legal obligations, enforce our Terms of Service, and protect the rights, safety, and security of Dylign, our users, and others.

We share personal information in the following ways.

Manufacturing and supply partners. To produce and deliver your orders, we share your Customer Content, Specifications, and related order information with our network of manufacturing and supply partners, which may be located in various regions. We share only what is needed for fulfillment.

Service providers. We share information with vendors that help us operate the Services, such as payment processors (for example, Stripe), hosting and cloud providers, logistics and shipping providers, email and communications tools, customer support tools, and professional advisors. These providers are permitted to use the information only to perform services for us.

Analytics and advertising partners. We work with partners such as Google Analytics and Google Ads, which may use cookies and similar technologies to help us understand site usage and to deliver and measure advertising across sites and over time.

Legal and protective purposes. We may disclose information when required by law, regulation, legal process, or governmental request, or when we believe disclosure is necessary to protect the rights, property, safety, or security of Dylign, our users, or the public, or to detect or prevent fraud.

Corporate transactions. If we are involved in a merger, acquisition, financing, reorganization, or sale of assets, personal information may be transferred as part of that transaction, subject to this Privacy Policy.

We do not sell your personal information for money. Please see Section 7 for how we treat "sharing" of information for cross-context behavioral advertising under California law.

We and our partners use cookies and similar technologies (such as pixels and tags) to operate the site, remember your preferences, measure performance, support analytics, and deliver and measure advertising. Some cookies are necessary for the site to function. Others are optional and help us understand usage or support advertising.

You can usually set your browser to refuse some or all cookies or to alert you when cookies are being used. If you disable certain cookies, some features of the Services may not work properly. If you are located in the European Economic Area (EEA) or the United Kingdom, we will seek your consent for non-essential cookies where required by applicable law.

Advertising opt-out. You can opt out of certain interest-based advertising through these resources: Google Ads Settings (https://adssettings.google.com), the Digital Advertising Alliance (https://optout.aboutads.info), and the Network Advertising Initiative (https://optout.networkadvertising.org). Platform-specific controls are also available through the ad settings of partners such as Google, Meta, and Microsoft.

Do Not Track. Some browsers offer a "Do Not Track" (DNT) signal. Because there is no industry-standard approach to responding to DNT signals, we do not currently respond to them. We do honor recognized opt-out preference signals such as Global Privacy Control (GPC) where required by applicable law, as described in Section 7.

We retain personal information for as long as necessary to fulfill the purposes described in this Privacy Policy, including providing the Services, maintaining records of orders and Customer Content, complying with legal and tax obligations, resolving disputes, and enforcing our agreements. When personal information is no longer needed, we will delete it or take steps to anonymize it.

If you request deletion of your personal information, we will process your request within seven (7) days and remove the information from our active systems, and from our backups where technically feasible, except where we are required or permitted by law to retain it.

Marketing communications. We may send you marketing emails, and you can opt out at any time using the unsubscribe link in those emails. We may still send you non-marketing messages, such as messages about your quotes, orders, or changes to our terms or policies.

General rights. Depending on where you live, you may have the right to request access to the personal information we hold about you, to request correction or deletion, and to object to or restrict certain processing. You can exercise these rights, where available, by contacting us using the details in Section 11. We may need to verify your identity before responding.

California residents (CCPA/CPRA). If you are a California resident, you may have the right to know about, access, correct, and delete your personal information, and to opt out of the "sale" or "sharing" of personal information. We do not sell your personal information for money. However, our use of advertising and analytics partners (such as Google Ads) for cross-context behavioral advertising may be considered "sharing" under California law. You may opt out of such sharing by contacting us using the details in Section 11, by using any "Do Not Sell or Share My Personal Information" control we make available, or by enabling a recognized opt-out preference signal such as Global Privacy Control (GPC) in your browser. We will not discriminate against you for exercising your rights.

EEA and UK residents (GDPR). If you are located in the EEA or the United Kingdom, our legal bases for processing include performance of a contract, our legitimate interests in operating and improving the Services, your consent (for example, for certain cookies or marketing), and compliance with legal obligations. You may have rights to access, correct, delete, port, object to, or restrict processing of your personal information, and to withdraw consent at any time.

Dylign is based in the United States, and we and our service providers and partners may transfer, store, and process personal information in the United States and in other countries that may have data protection laws different from those in your country.

Where we transfer personal information from the EEA or the United Kingdom to a country that has not been recognized as providing an adequate level of protection, we will use appropriate safeguards, such as standard contractual clauses approved by the relevant authorities, unless an exemption applies.

We use reasonable technical and organizational measures designed to protect personal information against loss, misuse, and unauthorized access, disclosure, alteration, and destruction. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security. Please use caution when sharing sensitive information online.

The Services are intended solely for businesses and adults and are not directed to or intended for minors. We do not knowingly collect personal information from anyone under the age of eighteen (18). If you are a parent or guardian and believe that a minor has provided us with personal information, please contact us using the details below and we will delete the information.

If you have any questions about this Privacy Policy or our privacy practices, or if you would like to exercise any of your rights, please contact us at:

Dylign Inc. Harvard Innovation Labs, Batten Hall, 125 Western Ave, Allston, MA 02134 Email: [email protected]

If you have concerns or complaints about how we handle your personal information, please contact us first. Depending on where you live, you may also have the right to lodge a complaint with your local data protection authority.

We may update this Privacy Policy from time to time, for example to reflect changes to our practices or for legal or regulatory reasons. When we make material changes, we will post the updated Privacy Policy on this page and update the Effective Date above. Your continued use of the Services after the changes take effect means that you accept the updated Privacy Policy.