Privacy Policy

This Privacy Policy explains what information Mormir Foundry LLC ("PewPreview," "we," "us") collects when you use the PewPreview website, studio, mobile app, shop dashboard, and related services (the "Service"), how we use and share it, how long we keep it, and the choices and rights you have. It is written to describe what the Service actually does today. When we add a feature that changes how data is handled, we update this page.

1. Who this covers and our role
2. Information we collect
3. How we use information
4. Images, previews, and AI
5. How we share information
6. Shop customers: shops are the controller
7. Emails we send
8. Cookies and similar technologies
9. How long we keep information
10. Security
11. Your rights and choices
12. U.S. state privacy disclosures
13. Users in the EEA, UK, and Switzerland
14. Children
15. Mobile app
16. International transfers
17. Changes to this Policy
18. Contact

1. Who this covers and our role

This Policy covers everyone who interacts with the Service: visitors to pewpreview.com; people who generate previews in the free studio or the mobile app; account holders and purchasers; coating shops that subscribe to the Shop Plan ("Shops"); and people who use a Shop's studio, receive a quote or job update from a Shop, or contact a Shop through Find a Shop ("Shop Customers").

For most of this data, PewPreview decides how and why it is processed (we are the "controller" or "business"). For Shop Customer data that a Shop collects through the Service, the Shop is the controller and we process the data on the Shop's behalf. Section 6 explains what that means for you. Paddle, our Merchant of Record, is an independent controller of payment data (Section 5).

2. Information we collect

2.1 Information you give us

• Photos and selections. The photograph you upload, the item type and parts you pick, the colors and finishes you choose, and any notes or instructions you type.
• Account details. Your email address when you create an account or make a purchase. Shop accounts also set a password, which is stored only as a one-way hash. Consumer accounts sign in with a one-time email link and have no password.
• Shop profile. If you are a Shop: business name, address and ZIP code, description, logo, portfolio images, website, public phone and email, service area, certification claims, review-page link, notification email, and any CRM webhook address you connect. Business details you choose to list in Find a Shop are public.
• Shop Customer details. If you use a Shop's studio, the name, email address, phone number, ZIP code, and notes you enter. If you contact a Shop through Find a Shop: name, email, phone, message, and optionally a preview you attach. If you accept a Shop's quote: the typed name you enter as your signature and the time of acceptance.
• Shop records. Customer records, quotes, job details, intake and progress photos, internal notes, and reports that a Shop enters in the dashboard.
• Support and correspondence. Anything you send us by email.

2.2 Information collected automatically

• Device fingerprint. To meter free previews and stop abuse of the shared free-preview pool, the studio and mobile app compute an anonymous identifier from device characteristics and send it to us. On the web this is a set of one-way hashes derived from things like your browser's canvas and audio rendering, graphics renderer, installed fonts, screen size, time zone, and locale. In the mobile app it is a random identifier stored on your device (on Android, the Android ID). We also record the IP address, a hash of certain request headers, and the operating-system and browser family of the request. We store these as security records and group similar devices together. The fingerprint is not shared with advertisers or joined with third-party data.
• Usage and account activity. Previews generated, credits spent and refunded, plan status, referral and promo-code activity, and the actions Shops take in the dashboard (an audit trail of events such as "lead captured" or "quote sent").
• Server logs. Requests to our servers are logged with IP address, time, URL, and response status for security, debugging, and rate limiting.
• Website analytics. Google Analytics runs on our public marketing pages (home, pricing, legal pages, Find a Shop, Pew-Price, the shop demo, and checkout return pages) and records pages viewed, approximate location, device and browser type, and referring site. It does not run inside the studio, the account page, the shop dashboard, quote or job pages, or the mobile app.
• Error reports. If our error-monitoring service is enabled, server errors are reported with the error message, stack trace, request URL, and method.

2.3 Information from others

• Paddle sends us the email address used at checkout, the products bought, and transaction and subscription identifiers so we can credit your account. We never receive your full card number.
• Shops may enter information about you as their customer (see Section 6).
• Referrals. If you arrive through someone's referral link, we record the referral code so that person can be credited when you make a purchase.

3. How we use information

We do not make decisions about you that have legal or similarly significant effects using solely automated processing. The automated upload screen only decides whether an image can be rendered, and you can ask a person to review a rejected image (Section 4).

4. Images, previews, and AI

Your uploaded photo is not stored by us. When you upload a photo, it is reduced in size in your browser or app and sent to our AI provider (Google Gemini, reached through the Portkey gateway) twice: first to an automated content-safety screen, then, if it passes, to generate the preview. The screen looks for content we do not allow: people under 18, nudity or sexual content, graphic injury, and violence against people. Photographs of hardware, parts, and gear are what the Service is for and are allowed. A photo that fails the screen is rejected, no preview is generated, no credit is used, and the photo is not kept. The AI provider applies its own safety filtering as a second check, so an image that passes our screen can still be refused at generation time, in which case your credit is returned.

Generated previews are stored. Each preview is saved as an image in our cloud storage under a long, unguessable address so that it can be shown in your account, your Build Garage, a Shop's dashboard, and any quote it is attached to. Anyone who has that exact address can view the image; it is not listed or searchable, but if you share a preview (for example, by sending someone the image) they can pass it on. Previews are kept until you ask us to delete them (Section 9).

We do not use your photos or previews to train AI models, and we do not permit our staff to browse them except to handle a support request, a safety report, or a legal obligation. Our AI provider processes images as a service provider to us under its API terms.

Automated screening is imperfect in both directions. If a photo of your own hardware is declined, email support@pewpreview.com and a person will look at it. We do not operate a dedicated child-sexual-abuse-material detection service of our own; where we become aware of illegal material we remove it and report it to the appropriate authorities as the law requires. To report content or conduct you believe violates our Terms, email support@pewpreview.com.

5. How we share information

We do not sell personal information, and we do not share it for cross-context behavioral advertising. We share information only as follows.

5.1 With Shops

If you generate a preview through a Shop's studio, or contact a Shop through Find a Shop, the information you enter (name, email, phone, ZIP code, notes, message) and your preview are delivered to that Shop in its dashboard and by email, and, if the Shop has connected a CRM or other integration, sent to the address the Shop configured. From that point the Shop holds its own copy under its own privacy practices (Section 6).

5.2 Service providers

These companies process data on our behalf, under contracts that limit their use of it to providing their service to us.

5.3 Payments (two controllers)

Purchases are processed by Paddle.com Market Limited and its affiliates ("Paddle"), which act as Merchant of Record. For payment transactions Paddle is an independent controller of your payment and billing information and processes it under Paddle's privacy policy. Because there are two controllers, a request to access or delete payment records may need to be made to Paddle as well as to us. The mobile app sells nothing in-app.

5.4 Legal, safety, and business transfers

We may disclose information to comply with law or a valid legal request; to enforce our Terms; to protect the rights, property, or safety of PewPreview, our users, or the public; and to report illegal material. If PewPreview is involved in a merger, acquisition, financing, or sale of assets, information may be transferred as part of that transaction, subject to this Policy.

5.5 Aggregated and de-identified data

We create and use statistics that do not identify anyone (for example, which finishes are most requested in a region) to operate and improve the Service and to provide market and demand reports to Shops.

6. Shop customers: shops are the controller

When you use a coating shop's studio, contact a shop through Find a Shop, or receive a quote or job update from a shop, that shop is collecting your information to respond to you and do the work you asked about. The shop decides how it uses your information, and it is responsible for its own privacy practices. PewPreview provides the software and stores the data on the shop's behalf, and we use it only to run the Service for that shop (delivering your design and details to the shop, sending you the emails the shop triggers, and keeping the shop's records available to it). We do not use Shop Customer data for our own marketing, and we do not share it with other shops.

To access, correct, or delete information a shop holds about you, contact the shop directly; its contact details are in the emails you received and, if it has a listing, in Find a Shop. If you cannot reach the shop, email privacy@pewpreview.com and we will pass your request to the shop and help where we can.

For Shops. Our Terms of Service require you to use Customer Data only for the customer's request and your business, to comply with applicable privacy, anti-spam, and telephone-marketing laws, to post a privacy notice on any site where you install the studio, and to honor customer requests. When you connect a CRM webhook, the data you receive there is under your control, not ours. We act on your instructions, assist with customer requests, keep Customer Data separated from other shops' data, and delete or return it as described in Section 9.

7. Emails we send

We send only transactional and service emails: sign-in links, purchase confirmations and credit updates, notices about your plan or these policies, and, on behalf of Shops, lead notifications (to the Shop), quote links, quote-accepted confirmations, job status and ready-for-pickup notices, and review requests (to the Shop's customer). Review-request emails link to a review page on a third-party site chosen by the Shop and are limited in frequency. We do not send marketing newsletters, and we do not send text messages. Where a Shop replies to a lead email, the reply goes to the customer's own email address.

8. Cookies and similar technologies

• Google Analytics cookies (_ga and related) on our public marketing pages. You can opt out with the Google Analytics opt-out browser add-on or by blocking cookies in your browser. Where the law requires consent for analytics cookies, we will ask before setting them.
• Referral cookie (pp_ref): if you arrive through a referral link, a cookie holding the referral code is set for 30 days so the referrer can be credited if you buy.
• Sign-in storage. Your session is kept in your browser's local storage so you stay signed in. On the consumer account page this happens only if you tick "Remember me." The shop dashboard keeps you signed in until you sign out.
• Mobile app. The app stores an anonymous device identifier locally (Section 2.2). It uses no advertising identifiers and no tracking.

We do not use advertising cookies or third-party tracking pixels. Because we do not track you across other sites, we do not respond differently to "Do Not Track" signals; we treat a Global Privacy Control signal as a request to opt out of sale or sharing, which we honor by default because we do neither.

9. How long we keep information

We may keep information longer where the law requires it, to preserve evidence of illegal activity, or in backups until they cycle out.

10. Security

We protect information with measures that include encryption in transit (HTTPS everywhere), one-way hashing of passwords and access tokens, per-shop data isolation enforced at the database level, unguessable image addresses, rate limiting, secrets kept in a managed vault rather than in code, and access to production limited to the people who need it. No system is perfectly secure; if we learn of a breach affecting your information we will notify you and the relevant authorities as the law requires.

11. Your rights and choices

Wherever you live, you can ask us to:

• access the personal information we hold about you and receive a copy in a portable format;
• correct inaccurate information;
• delete your account, your previews, and your other personal information;
• restrict or object to certain processing, or withdraw consent where processing is based on consent;
• tell us not to sell or share your information (we do neither).

Email privacy@pewpreview.com from the address on your account, or tell us the email or device involved if you have no account. We may ask you to confirm your identity in a way that fits the sensitivity of the request. We aim to respond within 30 days, and within 45 days where U.S. state law allows that period. We will not discriminate against you for exercising your rights. You may use an authorized agent; we will ask for proof of the agent's authority. Requests about payment records may also need to go to Paddle (Section 5.3). Requests about information a Shop holds about you should go to the Shop (Section 6).

You can also: cancel a membership or the Shop Plan at any time from your account or dashboard; stop review-request or job emails by telling the Shop; and turn off "Remember me" by signing out.

12. U.S. state privacy disclosures

This Section supplements the rest of this Policy for residents of California and other U.S. states with comprehensive privacy laws. In the past 12 months we have collected the categories of personal information described in Section 2 (identifiers such as email, IP address, and device identifiers; commercial information such as purchases and credits; internet activity such as usage and analytics data; visual information in the form of photos and previews; and, for Shops, professional and business information), from the sources in Section 2, for the purposes in Section 3, and disclosed them to the service providers in Section 5.2 and, for Shop Customer data, to the Shop you interacted with. We do not sell personal information and do not share it for cross-context behavioral advertising, and we have not done so in the past 12 months. We have no actual knowledge that we collect personal information of anyone under 16. We do not use or disclose sensitive personal information for purposes that require a right to limit. To exercise your rights, use the methods in Section 11. If we deny a request, you may appeal by replying to our decision; we will respond to the appeal in writing.

13. Users in the EEA, UK, and Switzerland

PewPreview is based in the United States and serves primarily U.S. users. If you are in the European Economic Area, United Kingdom, or Switzerland, the legal bases we rely on are listed in Section 3; where we rely on legitimate interests, they are running and securing the Service, preventing abuse, and improving the product, and we have balanced them against your rights. You have the rights in Section 11, plus the right to lodge a complaint with your local data-protection authority. Where consent is required for analytics cookies, we will request it before setting them.

14. Children

The Service is for adults. It is not directed to, and may not be used by, anyone under 18. We do not knowingly collect personal information from children, and our upload screen rejects images that show a person under 18. If you believe a child has provided information to us, email privacy@pewpreview.com and we will delete it.

15. Mobile app

The PewPreview mobile app has no accounts and no in-app purchases. It reads photos only from the library you choose from (it does not access your camera), sends the selected photo to our servers for screening and rendering as described in Section 4, and stores an anonymous device identifier to meter free previews. It does not use advertising identifiers, does not track you across apps or websites, and does not collect your location, contacts, or messages. Previews you save or share leave the app through your device's own share and save features. To delete data associated with your device, email privacy@pewpreview.com with the approximate dates of your previews.

16. International transfers

We process and store information in the United States, and our providers may process it in other countries where they operate. Where the law requires safeguards for transfers out of your region, we rely on our providers' standard contractual clauses or other approved mechanisms.

17. Changes to this Policy

We update this Policy when the Service changes. The date at the top shows the latest version. For material changes we will post a notice on the Service or email account holders before the change takes effect. Earlier versions are available on request.

18. Contact

Mormir Foundry LLC, doing business as PewPreview. Privacy requests and questions: privacy@pewpreview.com. General support: support@pewpreview.com.