Privacy Policy
Effective date: November 3, 2026. Version 1.
Effective date: November 3, 2026
Version 2.1
1. About this policy
This Privacy Policy explains how Packlyn Canada ("Packlyn", "we", "us" or "our") collects, uses, shares and protects personal information when you use Packlyn Design Software and your Packlyn account. Packlyn Canada is a print business in Cambridge, Ontario, Canada.
This policy covers:
- Packlyn Design Software, our design app for Windows and macOS (the "app")
- the online version of Packlyn Design Software, which runs in a web browser at https://accounts.packlyn.ca/app/ and uses the same account, designs and plans as the app (the "online version")
- your Packlyn account and the services connected to it, including saving designs to your account, Pro subscriptions, Plyn AI features, messages and refund requests you send from the app, and "Print With Packlyn" quote requests
- the account service's web pages, such as sign-in links and Packlyn's payment page
Our website, https://packlyn.ca, has its own Privacy & Cookie Policy (https://packlyn.ca/privacy/), and the Plyn chat on the website is covered by the Plyn AI Assistant Terms & Conditions (https://packlyn.ca/plyn-terms/). Printing orders are separate agreements with Packlyn Canada.
We handle personal information following the fair information principles in Canada's Personal Information Protection and Electronic Documents Act (PIPEDA): accountability, identifying purposes, consent, limiting collection, limiting use, disclosure and retention, accuracy, safeguards, openness, individual access, and challenging compliance. Where a provincial privacy law applies to you, such as Quebec's, you also have the rights that law gives you.
2. Who is responsible
Packlyn Canada is responsible for the personal information under its control, including information we give to service providers to process for us. The person responsible for privacy at Packlyn Canada oversees how we handle personal information and answers privacy questions, requests and complaints. You can reach them at packlyncanada@gmail.com (please put "Privacy" in the subject line) or through https://packlyn.ca/contact/. Our Security and Privacy Contact page explains how to report a security problem or a privacy concern.
3. Information we collect
We collect only the information we need for the purposes described in this policy. What we collect depends on how you use the app.
Using the app without an account
You can design in guest mode without an account. Guest designs stay on your device and are deleted when you close the app. We do not receive them. Guest mode does not let you download files, keep designs or send quote requests.
Account information
When you create a free account, we collect your name, your email address and a password. We send a 6-digit code to confirm your email address. We store your password only as a scrypt hash, so we never keep the password itself. You can choose an avatar: one of the app's characters or a picture you upload.
If you turn on two-step sign-in, we email you a 6-digit code each time you sign in and store only a one-way hash of it, which stops working after 10 minutes.
Consent records
To create an account, you tick a box (unticked by default) that says "I agree to the Terms of Service and acknowledge the Privacy Policy." We record which version of each document you accepted and when. We also record whether you chose to receive marketing emails, and when you made or changed that choice.
Devices and sessions
When you sign in, we keep a record of the session and the device you signed in on: the device name, the platform (for example, Windows, macOS or the online version), the app version, the browser or app the session was made with, and when the device was first and last seen.
Neither the app nor the online version sends us usage statistics or analytics, and neither contains advertising trackers.
Security information
Like any internet service, our server sees the network (IP) address that each request comes from. We do not store IP addresses in readable form. We store them only as keyed one-way hashes, which we use for security and rate limits. Our request logs contain no personal information. We also keep records of security events, such as failed sign-ins and blocked requests, and an audit log of account and administrator actions.
Your designs and uploaded artwork
Designs you make, including any pictures and artwork you add to them, are kept on your device: on your computer when you use the app, or in your web browser's storage when you use the online version.
With Pro, when you are signed in, the app saves your designs to your account automatically, so you can open them on your computer or any other device you sign in on, in the app or the online version. On the Free plan, designs are saved on your device only and we do not receive them. For each design saved to your account, we store the design file (including the pictures and artwork in it), its title, its folder, a thumbnail, the kind of product it is for, the name of the device it was last saved from, and earlier versions of it. There is no limit on how many designs a Pro account can save or how large they are in total.
Your designs leave your device only when you:
- save a design to your account (automatically or yourself)
- send a "Print With Packlyn" quote request
- use a Plyn AI feature (we send the description you type and the options you choose), or ask Plyn a question in the Plyn chat (we send your question and the last few messages of the conversation). If you ask Plyn without an account, we count your questions by a one-way hashed code made from your network address, never the address itself, so that scripts can't misuse Plyn
- use enhanced Image Upscaling (we send the picture)
If you upload a profile picture, we store that picture.
Your designs may contain personal information about you or other people, such as the names and phone numbers on a business card. We handle that information only to provide the services you ask for. Please make sure you have permission to use other people's information in your designs.
Quote requests
When you send a "Print With Packlyn" quote request, we receive your name, email address, phone number (optional), delivery address (only if you choose delivery), the product options you choose, the print file, a preview, an editable design file (optional) and any attachments you add. We use this information to prepare and send your quotation. Nothing is charged in the app for printing.
Subscription, billing and payment information
Card payments are processed by Square. You enter your card in Square's secure card form on Packlyn's payment page. The full card number and security code (CVV) go straight to Square and never reach Packlyn's servers. Square keeps the card on file for your Packlyn account. To set up your card on file, Square receives your name and email address from us.
We keep records of your plan and subscription status, your billing period and the date you are paid until, Square's references for you as a customer and for your card, the card brand and its last four digits, amounts, sales tax and the tax region, payment dates, receipt numbers (in the form PD-YYYY-NNNNNN) and links to Square's receipts. To work out sales tax, we keep the country and the province or territory of your billing address, and your postal code if you give it. If you use a promo code, we record the code and what it gave you.
Payments can also be arranged directly with Packlyn, for example in cash or by card in the shop, or by Interac e-Transfer to packlyncanada@gmail.com. Packlyn records these payments on your account with the method, the amount and the date.
Messages and refund requests
When you send a message from the app (My Account › Help › Message Packlyn Canada) or a refund request (My Account › My Subscription › "Request a refund"), we keep the request with your account: the kind of request, the reason, the details you write, your email address, the payment it is about (for a refund request) and your plan. The request is also emailed to Packlyn at packlyncanada@gmail.com, with your email address as the reply-to address so we can answer you. Emails you send to us directly are kept in the same mailbox.
When Packlyn staff help you, they may add notes to your account, for example about a refund decision or a payment made in the shop.
Usage and AI requests
We keep monthly usage counts, such as the number of downloads you have made in the period, so we can apply your plan's allowances.
When you use a Plyn AI feature, we keep a record of the request: the kind of request, the AI model used, token counts, the estimated cost, whether it succeeded, and the time. We use these records for Pro's daily Plyn AI amounts, spending limits, abuse prevention and running the service. Packlyn's server does not store your prompts, the AI's answers or your pictures.
4. How we use your information
We use personal information to:
- create and run your account, confirm your email address and let you sign in on the app and the online version
- save your designs to your account, keep their earlier versions and the Trash, and show them on your other devices
- apply your plan's features and monthly allowances
- process Pro subscriptions through Square, record payments made directly to Packlyn, and keep billing and tax records
- run the AI features you ask for and apply their fair use limits
- prepare and send quotations for your quote requests
- answer your messages and decide refund requests
- send account emails, such as sign-in codes, receipts, security notices and at least 30 days' notice before a new price applies to your subscription
- send marketing emails, but only if you have agreed to receive them
- protect your account and the service, including detecting fraud, abuse and attempts to get around plan limits
- answer your questions and requests, including privacy requests
- meet our legal obligations, such as keeping tax records
If we want to use personal information for a purpose not described here, we will tell you first and, where the law requires, ask for your consent.
5. Consent
We ask for consent in clear terms, and we don't ask you to agree to more than we need to provide what you ask for.
- Account: when you sign up, you agree to the Terms of Service and acknowledge this Privacy Policy by ticking a box that is unticked by default.
- Marketing: a separate, optional box, also unticked by default. You don't need to tick it to create an account.
- Actions you start: when you save a design to your account, send a quote request, send a message or refund request, or start an AI operation, you are asking us to send that information where it needs to go to do what you asked.
You can withdraw your consent at any time, subject to legal or contractual limits and reasonable notice. If you withdraw consent we need to provide a service (for example, the use of your email address to run your account), we may not be able to provide it, and we will explain what that means for you.
6. Marketing emails
We send marketing emails only to people who have given express consent, in line with Canada's Anti-Spam Legislation (CASL). Every marketing email includes an unsubscribe link. You can also turn marketing emails off at any time in My Account › Privacy And Data.
Account emails, such as sign-in codes, receipts and security notices, are sent whether or not you receive marketing emails, because they are needed to run your account.
7. How we share information
We do not sell personal information. We share it only as described below.
Service providers
We use service providers to run parts of the service. Each receives only the information it needs to do its work:
- Square (Block, Inc. and its Canadian affiliate) processes card payments, keeps your card on file and may send its own receipts. It receives your name, your email address, your card details (which you enter in its card form) and the amounts charged. Square processes information in Canada and the United States.
- Cloudflare hosts packlyn.ca and the account server (accounts.packlyn.ca), including our database and the designs saved to accounts (encrypted), on servers that may be located outside Canada, and delivers the emails sent from packlyn.ca. Cloudflare also keeps its own recovery copies of the account server's storage.
- An email delivery provider sends our emails, such as sign-in codes, receipts and notices.
- Google provides Packlyn's mailbox, packlyncanada@gmail.com, which receives the emails you send us and the messages and refund requests sent from the app.
- Anthropic (Claude) processes Plyn's online chat answers, and the descriptions you give Plyn AI when the free services have reached their daily limits or aren't available.
- Groq processes the descriptions you give Plyn AI for writing, colour palettes, design content and vector artwork. Cloudflare (Workers AI) processes them, and descriptions of pictures, only when Packlyn has switched that service on.
- Stability AI processes enhanced Image Upscaling requests, only when Packlyn has switched that feature on.
- Openverse receives the search words you type when you use the free photo search. The results are public-domain or CC0 pictures.
- DuckDuckGo and Wikipedia receive only the text of your question when Plyn uses a free web look-up.
AI providers
AI requests go through Packlyn's server, which holds the keys to the AI services. We send the description you type and the options you choose (such as format, style, brand name and other details you type) and, for enhanced upscaling, the picture. The AI providers process these requests under their own terms and may keep data as their terms allow.
Some Plyn help answers come from help information built into the app. The AI tools that run on your device (remove background, smart cut-out, object eraser, auto-enhance and the included Image Upscaling) don't send your pictures anywhere.
Legal and safety reasons
We may disclose personal information where the law requires or allows it, for example to respond to a valid court order, to prevent fraud, or to protect the rights and safety of our customers, Packlyn or others.
8. Storage and processing outside Canada
Packlyn Canada is in Ontario, but much of the information described in this policy is stored or processed outside Canada:
- our account server and website are hosted by Cloudflare on servers that may be located outside Canada, including in the United States
- Square processes payments in Canada and the United States
- our AI providers and other service providers may process and store information in the United States and other countries
Information stored or processed in another country is subject to that country's laws, which may allow courts, law enforcement and national security authorities there to access it. When we use a service provider, Packlyn remains responsible for the personal information we give it. We give each provider only what it needs for its work, and we use providers whose terms include protections for the information they handle for us. If you have a question about how a provider outside Canada handles your information, contact us.
9. How long we keep information
We keep personal information only as long as we need it for the purposes in this policy, or as long as the law requires. In summary:
- Account information: while your account is open, and during the 30-day restore window after you ask to delete it.
- Designs saved to your account (Pro saves up to 50): until you delete them, or until deletion of your account is complete. When our server needs room, designs in the Trash and earlier saved versions may be deleted sooner, oldest first; the current version of every design you keep is not deleted.
- Earlier versions of a design: the newest 20 versions of each design are kept by default.
- The Trash: deleted designs are kept for up to 15 days, then deleted permanently.
- Billing and tax records: as long as the law requires. Canadian tax law generally requires business records to be kept for six years.
- Quote requests, messages and refund requests: kept as business records.
- Security records: security events and the audit log are kept for security and accountability.
- Backups: kept with restricted access and replaced on a regular cycle.
Nothing is deleted because Pro ends. Our Data Retention Policy lists each kind of information and how long it is kept, and our Data Deletion and Account Closure Policy explains what happens when you delete your account.
10. Accuracy
You can keep your account information accurate and up to date by editing your profile in My Account. If something is wrong and you can't change it yourself, contact us and we will correct it.
11. How we protect information
We use safeguards suited to the sensitivity of the information, including:
- HTTPS for all traffic between the app, the online version and our servers
- passwords stored only as scrypt hashes
- two-step sign-in, available to every customer and required for Packlyn staff
- in the app, sessions tied to the computer they were made on; in the online version, a session cookie that scripts can't read and that isn't sent with requests from other websites
- signed plan tokens, so paid features can't be unlocked by editing files
- designs saved to your account encrypted at rest on our server with AES-256-GCM, and checked against a SHA-256 checksum each time they are opened
- two-step sign-in secrets encrypted with AES-256-GCM
- card details handled only by Square; Packlyn staff can never see your password or your full card number
- files stored under random names and served only to their owner
- checks on uploaded files, with optional virus scanning
- rate limits to slow down abuse
- IP addresses stored only as keyed one-way hashes
- an audit log of administrator actions
- backups with restricted access, encrypted with our server's key (including the copies kept on Packlyn's own computer)
No system is perfectly secure, and we cannot promise that information will never be lost or accessed without permission. You can help protect your account by using a strong password that you don't use anywhere else, turning on two-step sign-in, and signing out of computers and browsers you no longer use.
If a breach of security safeguards involving your personal information creates a real risk of significant harm to you, we will notify you and report it to the Office of the Privacy Commissioner of Canada, as the law requires. Our Security and Privacy Contact page explains this in more detail.
12. Your rights and choices
Access
You can ask what personal information we hold about you, how we use it and who we have shared it with. In the app, My Account › Privacy And Data › Download My Data gives you a copy of your account information, including the designs saved to your account. You can also write to us to ask for information that is not in that copy.
Correction
You can update your profile in My Account, or ask us to correct information you can't change yourself.
Withdrawing consent
You can turn off marketing emails at any time. You can also choose not to use the AI features and not to save designs to your account, and you can delete your account.
Deletion
You can delete designs from your account at any time, and you can delete your account from My Account. Our Data Deletion and Account Closure Policy explains how deletion works, what we keep and why.
Quebec residents
If you live in Quebec, you have rights under Quebec's private-sector privacy law, including the right to be informed about how your information is used, to access and correct it, to withdraw your consent, and to ask for computerized personal information you gave us in a structured, commonly used technological format. You can make these requests using the contact details below.
How we handle requests
We may ask you to confirm your identity before we act on a request, so we don't give your information to someone else. We will respond within the time limits set by applicable privacy law. If we can't give you access to some information, we will tell you why, unless the law prevents us from doing so.
Complaints
If you have a concern about how we handle your personal information, please contact us first so we can try to resolve it. You also have the right to complain to the Office of the Privacy Commissioner of Canada (https://www.priv.gc.ca). If you live in Quebec, you can also complain to the Commission d'accès à l'information du Québec.
13. Children
Packlyn Design Software is not directed to children under 13, and we do not knowingly collect personal information from them. You must be at least 18, or the age of majority where you live, to create an account. Younger people may use the app only with a parent's or guardian's permission, and may not buy anything. If you believe a child has given us personal information, contact us and we will take steps to delete it.
14. Cookies and storage on your device
The desktop app does not use cookies to track you. It keeps your settings, your designs and your sign-in token on your computer. The online version and the account service's web pages use one strictly necessary session cookie, pd_session, only when you sign in on the web, and the online version keeps your designs and settings in your browser's own storage on that device. Neither uses analytics or advertising cookies. Our Cookie Policy explains this in detail.
15. Changes to this policy
We may update this policy when our services or the law change. Each version has an effective date and a version number, and you can find the current version in the app under Legal and Policies. If we make a significant change, we will tell you in the app or by email before it takes effect and, where the law requires, ask for your consent again. Your account records which version of this policy you have acknowledged.
Contact us
If you have a question, request or complaint about this policy or about how we handle your personal information, please contact the person responsible for privacy at Packlyn Canada:
- In the app: My Account › Help › Message Packlyn Canada
- Email: packlyncanada@gmail.com (please put "Privacy" in the subject line)
- Contact page: https://packlyn.ca/contact/
- Packlyn Canada, Cambridge, Ontario, Canada