We use information to provide and secure NeedlePOD, connect the services you choose, and communicate with you. We do not sell personal information or use it for third-party targeted advertising.
1. Who we are and what this policy covers
NeedlePOD is a Ludustack product. In this policy, “NeedlePOD,” “we,” and “us” refer to the operator of the NeedlePOD website and service. This policy covers needlepod.com, app.needlepod.com, our waitlist, and the NeedlePOD application.
A connected service such as Shopify or Printify handles information under its own privacy policy when you use that service directly. Your storefront customers are governed by the privacy notices you provide for your own business.
2. Information we collect
Information you provide
- Waitlist and communications: email address, optional name, current setup, product challenges, consent records, and messages you send us.
- Account information: email address, optional name and avatar, organization membership, and account preferences.
- Workspace content: designs, artwork files, product information, placement choices, mockups, listing copy, store settings, and other material you choose to upload or create.
- Connection information: identifiers and authorization credentials needed to connect the Shopify and Printify accounts you choose. Provider credentials are stored in encrypted form.
Information collected through use
- Device and request information: IP address, browser or user-agent information, request timing, and security or diagnostic logs.
- Session information: session identifiers, sign-in status, expiration times, and the active workspace.
- Product activity: actions taken in NeedlePOD, provider synchronization state, job status, error details, and records needed to make operations reliable and auditable.
- Connected-service data: store, catalog, product, variant, image, and webhook information returned by Shopify or Printify at your direction.
3. How and why we use information
We use information to:
- provide, personalize, maintain, and improve NeedlePOD;
- authenticate users and protect accounts, workspaces, and connected stores;
- carry out actions you request with Shopify, Printify, and other connected services;
- generate or assist with product analysis, listing copy, mockups, and related workflows;
- operate the waitlist and send early-access or product-research communications you consent to receive;
- diagnose failures, prevent abuse, enforce our terms, and meet legal obligations; and
- understand aggregate product usage without using your information for third-party advertising.
Depending on where you live and the context, our legal basis may be performing a contract with you, your consent, our legitimate interests in operating and securing the service, or compliance with law. You may withdraw consent at any time; withdrawal does not affect earlier lawful processing.
4. AI-assisted features
When you request an AI-assisted feature, NeedlePOD may send the content needed for that request—such as artwork, product images, prompts, or listing information—to configured AI infrastructure and model providers. We use the returned result to provide the feature you requested. Do not include sensitive personal information in prompts or artwork unless it is necessary and you have the right to do so.
6. Cookies and similar technology
NeedlePOD uses essential session cookies to keep users signed in across our application and API. We use Google Analytics on the public landing page to understand visits and improve the site. We disable Google signals and ad-personalization signals in our analytics configuration; Google Analytics may still use cookies or similar technology to provide usage measurements. Cloudflare may use strictly necessary technology to deliver and protect the site. You can limit analytics through your browser's cookie and tracking controls. Blocking essential cookies may prevent sign-in or other product features from working.
7. Retention
We keep information only for as long as reasonably needed for the purposes described here, including providing the service, maintaining security and audit records, resolving disputes, and complying with law. Retention varies by data type. We keep waitlist information until you withdraw consent or it is no longer needed. Account and workspace data is generally retained while your account is active and for a limited period afterward, subject to backup cycles and legal requirements.
8. Security
We use technical and organizational safeguards designed for the nature of the information we handle, including encrypted transport, access controls, tenant isolation, and encryption of connected-provider credentials. No online service can guarantee absolute security, so please protect your email account, device, and active sessions and tell us promptly if you suspect unauthorized access.
9. Your choices and privacy rights
Depending on applicable law, you may ask us to confirm whether we process your personal information; provide access or a portable copy; correct, anonymize, restrict, or delete information; explain sharing; or review certain automated decisions. You may also object to some processing or withdraw consent.
You may unsubscribe from optional emails through the method included in the message or by contacting us. We may need to verify your identity before completing a request. Some information may be retained where permitted or required by law.
10. Children
NeedlePOD is a business product and is not directed to children. You must be at least 18 years old, or the age of legal majority where you live, to create an account. If you believe a child provided us personal information, contact us so we can investigate and take appropriate action.
11. Changes to this policy
We may update this policy as NeedlePOD changes. We will post the revised version here and update the effective date. If a change materially affects how we use personal information, we will provide additional notice when appropriate.
12. Contact us
For a privacy question, consent withdrawal, or rights request, email privacy@needlepod.com. Please do not send passwords, provider tokens, or sensitive artwork by email.