Privacy Policy
Last updated: January 21, 2025
Introduction
At Evrylabel, we take your privacy seriously. This Privacy Policy explains how we collect, use, and protect your personal information when you use our service to process Vinted shipping labels. We are committed to transparency and compliance with UK GDPR and data protection regulations.
Information We Collect
We collect the following types of information:
- Account Information: When you create an account, we collect your email address and securely store an encrypted version of your password.
- Subscription Information: If you subscribe to Evrylabel Pro, we collect payment information through our payment processor (Stripe) and store your subscription status and billing period.
- Authentication Data: We use cookies and session tokens to keep you logged in and maintain your session securely.
How We Process Your PDFs (Privacy-First Approach)
Your shipping labels are processed entirely in your browser. This is a key privacy feature of Evrylabel:
- No File Uploads: Your PDF files are never uploaded to our servers or any cloud storage.
- Client-Side Processing: All cropping, rotation, and conversion happens directly in your web browser using JavaScript.
- No Data Storage: We do not store, access, or retain any shipping information, addresses, tracking numbers, or recipient details from your labels.
- Complete Privacy: Your shipping data never leaves your device and is never transmitted to us.
When a label can't be processed, we record an anonymous error report (courier type, page size and device type) with no label content, so we can fix the problem.
Sending Us a Label That Couldn't Be Processed
If one of your labels fails to convert, we offer you the choice to send us that single PDF so we can work out why and fix it. This only ever happens when you tap "Send label" — nothing is uploaded automatically.
- Purpose: Fixing label processing problems, nothing else. We never use it for marketing and never share it.
- What it contains: The label as it came from the courier, which may include the buyer's name and address.
- How it's stored: In private storage that only our team can open. It is not public and cannot be reached by other users.
- How long we keep it: It is deleted automatically within 30 days.
Alongside this, we keep the anonymous error details described above — courier type, page size, page count, device and browser family, and an anonymised outline of where items sat on the page, with every letter and number replaced. No readable label text, images, file names or account identifiers are included.
How We Use Your Information
We use the information we collect for the following purposes:
- Account Management: To create and manage your account, authenticate your identity, and provide access to the service.
- Subscription Billing: To process payments, manage your Pro subscription, and provide access to premium features.
- Service Communication: To send important account notifications, service updates, and respond to your inquiries.
- Service Improvement: To understand how users interact with our service and improve functionality.
Third-Party Services
We use the following third-party services:
- Stripe: We use Stripe to securely process subscription payments. Stripe handles all payment card information and we never store your full payment details. Stripe's privacy policy can be found at stripe.com/privacy.
- Backend Infrastructure: We use secure cloud infrastructure to store account information and manage authentication. All data is encrypted in transit (HTTPS) and at rest.
Data Security
We implement industry-standard security measures to protect your personal information, including encrypted connections (HTTPS), secure password hashing, encrypted data storage, and regular security updates. While no method of transmission over the internet is 100% secure, we strive to use commercially acceptable means to protect your data.
Data Retention
We retain your account information for as long as your account is active or as needed to provide you services. If you delete your account, we will delete your personal information within 30 days, except where we are required to retain it for legal or regulatory purposes. Remember, we never store your shipping label PDFs or their contents.
Your Rights (GDPR Compliance)
Under UK GDPR and data protection laws, you have the following rights:
- Right to Access: You can request a copy of the personal data we hold about you.
- Right to Rectification: You can update your account information at any time through your account settings.
- Right to Erasure: You can request deletion of your account and all associated personal data.
- Right to Data Portability: You can request your data in a structured, machine-readable format.
- Right to Withdraw Consent: You can withdraw consent for data processing at any time by deleting your account.
- Right to Object: You can object to processing of your personal data in certain circumstances.
To exercise any of these rights, please contact us using the information below.
Cookies and Tracking
We use essential cookies to maintain your authentication session and keep you logged in. These cookies are necessary for the service to function and cannot be disabled. We do not use advertising cookies or third-party tracking cookies.
Children's Privacy
Our service is not intended for users under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting the new policy on this page and updating the "Last updated" date. Your continued use of the service after changes are posted constitutes acceptance of the updated policy.
Contact Us
If you have any questions about this Privacy Policy, wish to exercise your data protection rights, or have concerns about how we handle your personal information, please contact us at:
Email: privacy@evrylabel.com