Privacy Policy

Introduction

PrintMac is a print-automation tool developed and operated by GlowLustre. PrintMac consists of two components:

• A Google Chrome browser extension that integrates with WhatsApp Web to let users select and print media files — images, PDFs, and documents — without manual downloading.
• A Windows desktop application (print software) that runs locally on the user's computer and handles the actual printing process.

This Privacy Policy explains what information PrintMac collects, how it is used, and how it is protected — across both the extension and the associated subscription service available at printmac.in.

By installing the PrintMac extension or using the PrintMac service, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with these practices, please do not install or use PrintMac.

Information We Collect or Process

2.1 Information You Provide Directly

• WhatsApp Mobile Number: When you subscribe to PrintMac, you provide your 10-digit WhatsApp mobile number. This is used to associate your subscription with your account and for customer support purposes.
• Payment Information: PrintMac uses Paytm as its payment processor. When you make a payment, Paytm collects your payment details. PrintMac's servers receive only the transaction outcome (success or failure), the Paytm transaction ID, and the order amount — not your full payment credentials or bank account details.

2.2 Automatically Collected Information

• Machine Identifier: PrintMac's local Windows software generates a unique machine identifier for the computer on which it is installed. This identifier is used exclusively to identify your subscription entitlement and to prevent a single subscription from being used simultaneously across multiple machines. The machine identifier is an OS-level hardware fingerprint generated and managed by the local software.
• Subscription and Order Records: PrintMac records subscription status, subscription start and expiry dates, order IDs, transaction IDs, and payment mode (e.g., UPI). These records are stored in PrintMac's database to manage and validate active subscriptions.
• Last-Seen Timestamp: Each time your machine checks its subscription status with the PrintMac API, the server records a timestamp of that last contact. This is used for operational monitoring only.

2.3 Extension Browser Storage

The PrintMac Chrome extension uses Chrome's built-in chrome.storage API to store configuration and session state locally in your browser. This information does not leave your device and is not transmitted to PrintMac's remote servers.

2.4 Information We Do Not Collect

WhatsApp Web Interaction

The PrintMac Chrome extension operates as a content script on https://web.whatsapp.com. It injects user-interface elements — checkboxes, a print-action overlay, and a media viewer print button — into the WhatsApp Web page.

Specifically, on WhatsApp Web, PrintMac:

• Detects when you enter WhatsApp's media-selection mode so it can show its print-action overlay.
• Reads the URLs of media files (images, PDFs) that you have explicitly selected for printing.
• Injects a print icon into the WhatsApp media viewer when you open an image or document, allowing you to print it directly from the viewer.
• Triggers WhatsApp's native download mechanism for selected files, which are then sent to the local Windows print software on your computer.

PrintMac does not read, store, or transmit the text content of any WhatsApp messages, the names or phone numbers of your WhatsApp contacts, or any other conversation data.

Files and Media

When you select files on WhatsApp Web and use PrintMac to print them, the following data flow occurs:

1. The PrintMac extension reads the media URL(s) of your selected files from WhatsApp Web's interface on your local browser.
2. The extension uses WhatsApp's native download mechanism to download the selected files (images, PDFs, or documents) to your local machine via Chrome's downloads API.
3. The downloaded files are passed to the local PrintMac Windows software (running on localhost) for processing and printing.
4. The local software handles image-to-PDF conversion, colour splitting, Aadhaar card layout, print-safe image optimisation, and other features — entirely on your device.
5. Once processed, the files are sent directly to your local printer. Files processed locally are not retained by PrintMac after printing is complete.

Account and Subscription Information

PrintMac uses a machine-based subscription model. There are no user accounts with usernames or passwords for end users. Instead, your subscription is tied to a unique machine identifier generated by the PrintMac local software.

What We Store for Subscription Management

• Your machine identifier — a unique identifier for the specific computer running PrintMac.
• Your WhatsApp mobile number (10-digit) — provided by you when subscribing, used for account identification and customer support.
• Subscription status (active, inactive, expired, grace period).
• Subscription start and expiry dates.
• Order IDs and transaction IDs from completed payments.
• Payment amount and mode (e.g., UPI).
• Last-seen timestamp — the last time your machine connected to the PrintMac API.

Authentication

PrintMac uses HMAC-based request signing and RS256-signed JSON Web Tokens (JWTs) to verify subscription status. The extension's background service worker communicates with the PrintMac API to validate your subscription entitlement before enabling premium features. These tokens are short-lived (valid for approximately 1 hour) and are stored locally by the extension.

How We Use Information

PrintMac uses the information it collects for the following purposes only:

• Providing the printing service: Enabling the extension to interact with WhatsApp Web and pass media to the local print software.
• Subscription management: Activating, verifying, and renewing your subscription; preventing use beyond the licensed machine.
• Payment processing: Verifying payment success with Paytm and activating your subscription upon confirmed payment.
• Software updates: Providing version information so the local Windows software can check for and download available updates.
• Preventing abuse: Detecting and blocking misuse of the subscription system (e.g., sharing machine IDs across multiple machines).
• Customer support: Using your WhatsApp number and subscription records to assist you if you contact us with a support request.
• Operational security: Rate-limiting API requests, recording one-time nonces to prevent replay attacks, and logging administrative actions.

PrintMac does not use your information for advertising, marketing profiling, behavioural analytics, or sale to third parties.

Data Sharing and Third Parties

PrintMac shares limited information with the following third parties, solely to provide the service:

7.1 Paytm

PrintMac uses Paytm as its payment gateway for subscription payments via UPI. When you make a payment, your payment details are processed by Paytm directly. PrintMac's API calls Paytm's transaction-status endpoint (via an intermediary verification service at verify.printmac.in) to confirm whether a payment was successful. PrintMac receives only the transaction result and transaction ID — not your bank or card details. Paytm's own privacy policy governs how Paytm handles your payment information.

7.2 QuickChart

The PrintMac extension makes requests to api.quickchart.io (QuickChart) to generate QR code images — for example, to display a UPI payment QR code in the extension's subscription popup. When this feature is used, the data required to generate the QR code (such as a UPI payment link) is transmitted to QuickChart's API. No personal account or file data is sent to QuickChart.

7.3 staticimgly.com

The PrintMac extension has host permission for staticimgly.com, which may be used to serve static image assets within the extension. No personal user data is transmitted to this service.

7.4 MongoDB (Database Provider)

PrintMac's subscription data (machine IDs, WhatsApp numbers, subscription records, payment records) is stored in a MongoDB cloud database. This data is accessed only by PrintMac's backend API and administrative systems.

7.5 No Other Sharing

In the event of a legal obligation (such as a court order or regulatory requirement), PrintMac may be required to disclose information to government or law enforcement authorities. PrintMac will only do so to the minimum extent required by applicable law.

Local Processing

A significant portion of PrintMac's functionality is performed entirely on your local device, without transmitting data to remote servers:

• File downloading: Media files from WhatsApp Web are downloaded directly to your local computer using Chrome's downloads API.
• Image and PDF processing: All image conversion, PDF creation, colour splitting, Aadhaar card layout, and print-safe image optimisation is performed by the local Windows print software on your machine.
• Printing: Files are sent directly from your computer to your locally connected printer. PrintMac does not route print jobs through remote servers.
• On-device AI processing: The extension includes a bundled on-device AI model (ONNX Runtime WebAssembly) that may be used for local image processing features such as background removal. This model runs entirely in your browser and does not send image data to external servers.
• Extension storage: Configuration, authentication tokens, and session state are stored locally in Chrome's extension storage on your device.

The only information transmitted to PrintMac's remote servers is the subscription-management data described in Sections 2 and 5 of this policy. Your files, documents, and WhatsApp content are not sent to PrintMac's servers.

Data Retention

• Subscription records (machine ID, WhatsApp number, subscription status, dates) are retained for as long as necessary to manage your active subscription and to resolve any disputes or support requests relating to past subscriptions.
• Payment and order records (order IDs, transaction IDs, amounts) are retained for the period required for financial record-keeping and fraud prevention.
• Security nonces (used to prevent replay attacks) are automatically deleted after 120 seconds.
• Admin action logs are retained for operational audit purposes.
• Locally stored extension data (Chrome storage) remains on your device until you uninstall the extension or clear extension data through Chrome's settings.
• Files and media downloaded or processed during printing are not retained by PrintMac after the print job is completed. These files remain on your local device under your control.

If you request deletion of your data, PrintMac will make reasonable efforts to remove your personal information from its systems, subject to legal and operational retention requirements. Please contact us using the details in Section 15 to make such a request.

Data Security

PrintMac implements reasonable technical and organisational measures to protect the information it handles:

• API communications between the extension and PrintMac's servers are secured using HMAC request signing and RS256-signed JWTs to authenticate requests and prevent tampering.
• HTTPS is used for all communication between the extension and PrintMac's remote API (api.printmac.in).
• HTTP security headers (including Strict-Transport-Security, X-Frame-Options: DENY, and Referrer-Policy) are applied to the API server.
• Admin access to PrintMac's backend is protected by bcrypt-hashed passwords and session-based authentication.
• Rate limiting is applied to API endpoints to mitigate brute-force and abuse attacks.
• Replay attack prevention is implemented via one-time nonces with a 60-second validity window.
• Database access is restricted to the PrintMac backend API; the database is not publicly accessible.
• The local Windows software communicates with the Chrome extension over localhost only, using short-lived authentication tokens.

Cookies and Similar Technologies

PrintMac Website (printmac.in)

The PrintMac marketing website (printmac.in) is a static HTML page. It does not set any cookies, use tracking pixels, load third-party analytics scripts, or transmit any personal information to remote servers. No cookies are set on the printmac.in website.

Chrome Extension

The PrintMac Chrome extension uses Chrome's chrome.storage API (not browser cookies) to store configuration data and authentication tokens locally in your browser. This data is not shared with third parties and remains on your device.

Backend Admin Interface

PrintMac's backend admin interface uses server-side session cookies for admin authentication. These cookies are marked Secure, HttpOnly, and SameSite=Strict and are only relevant to PrintMac's administrative users — not to end users of the extension.

Children's Privacy

PrintMac is a professional tool designed for use by print shop owners and business operators. It is not directed at or designed for use by children under the age of 13.

PrintMac does not knowingly collect personal information from children under 13. If you believe that a child under 13 has provided personal information to PrintMac, please contact us using the details in Section 15 so that we can take appropriate steps.

Your Rights and Privacy Requests

Depending on your location and applicable law, you may have certain rights regarding your personal information. These may include the right to:

• Request access to the personal information PrintMac holds about your machine or subscription.
• Request correction of inaccurate information.
• Request deletion of your personal data, subject to operational and legal requirements.
• Object to the processing of your personal data in certain circumstances.

To exercise any of these rights, or to ask any question about your personal data held by PrintMac, please contact us directly using the information in Section 15. PrintMac will respond to reasonable requests within a reasonable timeframe.

Uninstalling PrintMac

You can remove the PrintMac Chrome extension at any time through Chrome's extension management page (chrome://extensions). Uninstalling the extension will remove all locally stored extension data from your browser. Your subscription records on PrintMac's servers are not automatically deleted upon uninstall — contact PrintMac if you also wish to request removal of server-side records.

Changes to This Privacy Policy

PrintMac may update this Privacy Policy from time to time to reflect changes in the service, legal requirements, or operating practices. When the policy is updated, the "Last Updated" date at the top of this page will be revised.

The current version of this Privacy Policy is always available at https://printmac.in/privacy-policy. Continued use of PrintMac after a policy update constitutes acceptance of the revised policy. If the changes are material, PrintMac will make reasonable efforts to notify active users.

Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or PrintMac's data practices, please contact us: