Privacy Policy
Effective Date: May 6, 2026
Secure Printing Services, Inc. ("Secure Print," "we," "us," or "our") operates self-service document printing stations in government facilities and the website at https://www.secureprintingservices.com. This Privacy Policy explains what information we collect, how we use it, and how we protect it.
We are committed to maintaining the trust placed in us by government facilities and their visitors. Our systems are designed and operated in compliance with SOC 2, HIPAA, and PCI-DSS standards.
1. Information We Collect
Documents You Upload
When you use a Secure Print station, you upload files for printing. These files are transmitted over an encrypted connection, processed in isolated cloud storage, and permanently deleted automatically within 24 hours of your session ending — or immediately upon your request. We do not read, index, or share the contents of your documents.
Payment Information
Payment card data is handled exclusively by Stripe, our PCI-DSS Level 1 certified payment processor. Secure Print never sees, stores, or has access to your full card number, CVV, or bank account details. We receive only a transaction confirmation and a partial card descriptor (e.g., last four digits) for receipt purposes.
Email Address (Optional)
If you choose to receive an email receipt, we collect your email address solely to send that receipt. We do not add you to any marketing list, and we do not share your email with third parties for advertising. Email addresses collected for receipts are deleted within 30 days.
Website Visitors
If you visit our website, we collect standard server log data (IP address, browser type, pages viewed, referring URL) through Vercel Analytics for performance monitoring. This data is aggregated and not linked to individual identities.
Contact Form Submissions
If you fill out the contact form on our website, we collect your name, organization, email address, and message. This information is used only to respond to your inquiry.
2. How We Use Your Information
- To process and complete your print job
- To send a receipt if you request one
- To process your payment through Stripe
- To respond to inquiries submitted through our website
- To maintain the security, performance, and reliability of our systems
- To comply with legal obligations and our compliance commitments (SOC 2, HIPAA, PCI-DSS)
We do not sell, rent, or trade your personal information to any third party. We do not use your data for advertising or profiling.
3. Data Retention & Deletion
| Data Type | Retention Period |
|---|---|
| Uploaded documents | Deleted within 24 hours of session end |
| Email addresses (receipts) | Deleted within 30 days |
| Payment transaction records | 7 years (financial compliance requirement) |
| System audit logs | 90 days (SOC 2 requirement) |
| Website analytics | 90 days (aggregated, not personally identifiable) |
| Contact form submissions | Until request is resolved, then deleted |
4. Security
We apply industry-standard security controls at every layer of our system:
- All data in transit is encrypted with TLS 1.2 or higher
- Documents are stored encrypted at rest using AES-256
- Access to production systems is restricted, logged, and audited
- Our infrastructure is subject to ongoing SOC 2 monitoring
- Payment data is handled exclusively through Stripe's PCI-DSS Level 1 environment
Despite these measures, no method of transmission or storage is 100% secure. If you have concerns about the security of your data, please contact us immediately.
5. Third-Party Service Providers
We share data only with service providers that help us operate the platform. Each is bound by a data processing agreement and maintains their own security certifications:
- Stripe — payment processing (PCI-DSS Level 1)
- Amazon Web Services (S3) — encrypted document storage
- Supabase — database (hosted on AWS infrastructure)
- Vercel — web hosting and analytics
- Resend — transactional email delivery
We do not share your information with any other third parties unless required by law.
6. Government Facility Partners
Secure Print operates within government facilities under formal agreements with those agencies. These agreements govern data handling obligations on both sides. We do not share visitor print session data with facility administrators. Aggregate, non-identifiable usage statistics (e.g., total pages printed per month) may be shared with facility partners for operational reporting.
7. Your Rights
Depending on your location, you may have rights regarding your personal data, including:
- The right to access the personal data we hold about you
- The right to request deletion of your personal data
- The right to correct inaccurate data
- The right to object to certain uses of your data
To exercise any of these rights, contact us at contact@secureprintingservices.com. We will respond within 30 days.
8. Children's Privacy
Our stations and website are not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.
9. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will update the Effective Date at the top of this page. Material changes will be communicated to facility partners directly. We encourage you to review this page periodically.
10. Contact Us
If you have any questions about this Privacy Policy or how we handle your data, please reach out:
Secure Printing Services, Inc.