Legal · effective 2026-10-14
Privacy Policy
What we collect, why, who helps us, and the choices you have.
PR.1Who we are
OSHiN, Decatur, Georgia, is responsible for the personal information described here. This policy covers our website, order screens, accounts, messages, and orders placed by phone or in person.
PR.2What you give us
Your name, phone, email, organisation, billing and delivery addresses, project details, files and photos, messages, sizes and quantities, event dates, language preference, tax-exemption or resale certificates, purchase order details, and, for net accounts, business and reference details.
PR.3Records of what you agree to
1. When you accept an order, sign an order screen or join Print Club, we keep the terms version, a copy of the order or plan, the time, your IP address and browser details. For signed orders we also keep your typed name and drawn signature.
2. When you approve a proof or tell us about a payment you sent another way, we keep your IP address and browser details with it. When you leave a review, we keep your IP address with it.
3. When you tell us about a payment sent by Zelle, bank transfer, check or digital currency, we keep the payer name, reference and, for digital currency, the sending wallet address.
We keep these records to show what was agreed and paid, and to prevent fraud.
PR.4What we record automatically
1. For every visit, whatever you choose in the cookie banner, our own system records the pages visited, how long each page was on screen, the buttons and links you tap (by their label, never what you type), the page or app you came from (for example Instagram or Google Maps, as your browser reports it), the short link or QR code you used to reach us, whether you came through a customer's share link, campaign tags in the link, your device type, your approximate location (country, state and city, as our host resolves it; we do not store your IP address), and a visit identifier kept in your browser's session storage until the tab closes. It does not include your name. These records stay in our own database and are not shared. If you tap Call, our team's phones get a short note of how you found us and the pages you viewed in that visit, so we can help you faster. If you tell us how you heard about us when you order or ask for a quote, we keep that answer with your order.
2. If you send us an enquiry or order during that visit, we link the visit to it, so we can see which pages and channels lead to work.
3. If you choose Accept in the cookie banner, we also keep a visitor identifier and how you first found us in a cookie for 90 days, and load Google Analytics (Cookie notice).
4. Our host, Vercel, counts page views for us without cookies.
5. We use your IP address briefly to protect our forms from abuse. We do not store it with your page visits.
PR.5How we use it
To quote, make, deliver and support your orders; take payments; send order messages; run accounts, memberships and rewards; keep records of agreements and payments; prevent fraud and handle disputes; meet tax and legal duties; and learn which of our pages and channels work.
We do not sell personal information.
PR.6Payments
Card, wallet and bank payments are handled by Stripe on its own systems. We never see or store full card numbers. Stripe tells us your name, email, phone, billing and delivery address, the amount and whether the payment succeeded, and may share limited card details such as brand and last four digits. Files from our library are sold through Gumroad, under its own privacy terms.
PR.7Your files and photos
1. Files and photos you upload are stored privately. They are not public and not indexed.
2. Our team uses them to quote and make your order. When part of an order is made by a production partner, that partner receives only what it needs.
3. So our team can respond quickly, new enquiries, orders and reviews may be sent to our team's phones through a notification service, with your name, the amount and a first photo or the artwork where there is one.
4. Gang sheet designs started without an account and not ordered are deleted after 14 days. We keep other files to make reorders easier, until you ask us to delete them, but we do not promise to keep any file. Please keep your own copies.
PR.8Texts, emails and calls
1. We text and email you about your orders and account: order screen links, receipts, sign-in codes, status updates, ready notices, payment reminders, one reminder if a checkout is left unpaid, membership notices, and a request for a review once your order is finished. These are part of the service.
2. We may also text or email you about reorders, your membership and offers. Each one tells you how to stop them.
3. To stop texts, reply STOP or tell us. We record it, stop texting that number, and send your order updates by email instead. Tell us if you want texts again. Message and data rates may apply.
4. Every marketing email from us has an unsubscribe link. Order emails continue while you have an open order.
5. We do not record phone calls without asking you first.
PR.9Reviews
If you leave a review, we may publish it on our website with the display name you choose (an alias is welcome) or, if you leave it blank, your first initial (for example J***), and a short description of the job. We never publish your full name. The review stays linked to your order in our own records. Our team checks each review before it goes live. We publish every review in full, positive or negative, and only remove personal details such as phone numbers. You can ask us to remove your name at any time.
PR.10Who else sees it
Only the people and services that help us run OSHiN:
- Vercel (website hosting and cookie-free page counts);
- Supabase (database, sign-in codes, file storage);
- Stripe (payments, invoices and memberships);
- Resend (email delivery);
- texts are sent from our team's phones through their mobile carrier. If we start sending texts through a text service (Twilio), it receives your number and the message;
- Pushover (alerts to our team's phones);
- Google (Analytics, only if you choose Accept; and our Google Business listing);
- Gumroad (file library purchases);
- production partners who make part of an order, and carriers who deliver it (only what they need);
- software and AI tools we use to run and maintain our systems, under their business terms.
We may also share information with our accountant or lawyer, with a bank or card network during a payment dispute (T.22), with authorities when the law requires it, and with a business that takes over OSHiN.
PR.11Private order links
Order screens and status pages use private links. Anyone with the link can see that order, so please do not share it. Link previews never show your name or the amount.
PR.12How long we keep it
| Record | How long |
|---|---|
| Orders, invoices, payments and tax records | at least 7 years |
| Agreement records, signatures and acceptance details | as long as we keep the order they belong to |
| Files and photos | to make reorders easier, until you ask us to delete them, with no promise to keep them (PR.7.4); unordered guest gang sheets: 14 days |
| Visit records (PR.4) | until we delete them |
| Marketing preferences and opt-outs | until you change them |
| Account, points and credit | while your account is open, then as part of the order records above |
PR.13Security
We use private storage, encrypted connections, team access limited by role, and staff screens that keep amounts hidden until a team member chooses to show them. No system is perfectly secure. If a breach affects your information, we will tell you where the law requires.
PR.14Your choices
1. You can ask what we hold about you, ask us to correct it, ask us to delete it, or stop marketing messages, by emailing apply@bookoshin.com. We may need to confirm who you are first.
2. We keep records we must keep for tax, for legal claims, or to show what was agreed, even after a deletion request.
3. You can decline non-essential cookies in the cookie banner, and change your choice as our Cookie notice explains.
4. We answer these requests in the same way for every customer, wherever you live, usually within 30 days and no later than 45 days. We will not treat you differently for making a request.
PR.15Children
Our services are not directed at children under 13, and we do not knowingly collect their information. Orders for younger people are placed by a parent or guardian.
PR.16Where data is kept
Our service providers may store and process information in the United States and other countries.
PR.17Changes
We post each new version here with its effective date. If a change is significant, we also say so on our website.
PR.18Contact
apply@bookoshin.com · (727) 641-9774 · Decatur, Georgia, USA.
Questions about any of this? Call (727) 641-9774 or email bookoshin@gmail.com. Our team answers.