Privacy Policy

Effective date: October 17, 2026

Podgene ("we", "us") is an order-management platform for print-on-demand merchants, available at https://podgene.net and through the Podgene Order Manager browser extension for Google Chrome and Mozilla Firefox. This policy explains what information we collect, why we collect it, and how it is handled.

1. Information we collect

Account information — username, email address and password (stored as a salted hash) when you register, plus your role and organization membership inside the platform.
Order data — order IDs, product details, totals, and buyer contact details (name, shipping address, email, phone) needed to fulfill orders. This data is entered by merchants manually or captured through the browser extension from the merchant's own seller dashboards.
Design and media files that merchants upload for production.
Payment information — balance top-ups are processed by payOS. We never see or store full card numbers or your bank login credentials. We receive from payOS the transaction information needed to credit your balance and keep accounting records (for example the amount, a reference code, the payment status and time). If you withdraw earnings to a Vietnamese bank account (for example as a freelance designer), we store the bank details you provide (bank, account number and account holder name) and share them with payOS to send the payout.
Technical data — authentication tokens and standard server logs (IP address, timestamps) used for security and troubleshooting.

2. The browser extension

The Podgene Order Manager extension is the same for Google Chrome (Chrome Web Store) and Mozilla Firefox (addons.mozilla.org). The extension:

runs only on the seller pages of eBay (ebay.com, ebay.co.uk, ebay.ca, ebay.com.au), Etsy and Walmart Seller Center, on your Shopify store admin pages (admin.shopify.com) that you open, and on podgene.net;
extracts order information already visible in your own seller dashboard and sends it to your Podgene workspace over HTTPS when you trigger a push;
without any click, also sends only the order IDs (together with the marketplace name) shown on the page to your Podgene workspace, so it can mark which orders are already in Podgene and, on Shopify, look up tracking numbers. No buyer details are sent in these requests;
stores your Podgene login token, basic account details returned at sign-in (such as your username), your organization identifier, and the device token and name of the linked seller account locally in your browser's extension storage — nowhere else;
does not read your browsing history, does not run on any other websites, does not inject ads, and does not sell or share data with third parties for advertising. The address of a browser tab is compared only against the list of supported seller sites above; addresses of any other pages are ignored and are never stored or sent anywhere.

The extension requests only the browser permissions it needs: access to the supported seller sites and podgene.net listed above (to read the orders you see there and send them to your workspace), local storage (to keep you signed in and remember the linked seller account), and the ability to load its order-extraction script on those pages and to detect when you open one of them, so that it activates on supported order pages only.

In Firefox, the install prompt lists the data the extension transmits to your Podgene workspace, as described above: authentication information (your Podgene sign-in), personally identifying information (buyer name, shipping address, email and phone in pushed orders), financial and payment information (order totals and item prices) and website content (the order details shown on your seller pages).

Limited Use. The use of information received by this extension will adhere to the Chrome Web Store User Data Policy, including the Limited Use requirements. The same commitments apply to the Firefox version of the extension. In particular:

data obtained through the extension is used only to provide and improve the order-management features described in this policy (the extension's single purpose), and for related operational purposes such as maintaining, securing and measuring the reliability of the service;
it is not transferred to third parties except as necessary to provide or improve those features (see Section 5), to comply with applicable law, to protect against fraud or abuse, or as part of a merger, acquisition or sale of assets after we obtain your explicit prior consent;
it is not sold, and it is not used or transferred for personalized advertising, or to determine creditworthiness or for lending purposes;
it is not read by humans, except with your explicit consent for specific data (for example, when you ask our support team to investigate an order), when aggregated and anonymized for internal operations, for security purposes such as investigating abuse, or to comply with law.

3. How we use information

To provide order management, design workflow and fulfillment features.
To forward orders to the print providers the merchant chooses (for example Printify or similar production partners) so the products can be produced and shipped.
To send account emails such as registration verification.
To process balance top-ups and usage-based fees, and prevent abuse.

We do not sell, rent, or trade personal information to anyone.

4. Our role regarding buyer data

Merchants decide which orders they bring into Podgene. For the buyer information contained in those orders (name, shipping address, email, phone), the merchant is responsible for having a lawful basis to use it, and we process it on the merchant's behalf and on their instructions, solely to provide the service. A buyer who wants to access, correct or delete their information can contact the merchant they purchased from or write to us at the address in Section 13.

5. Sharing

Data is shared only with processors required to run the service:

Print & fulfillment partners — receive the buyer's name, shipping address, email address and phone number (where the partner needs them for delivery and carrier notifications) and the order items, strictly to produce and ship the order.
payOS — payment processing for balance top-ups and payouts.
Infrastructure providers — our servers and Cloudflare R2 object storage, which host the application data and uploaded files.
Email delivery provider — used only to deliver account emails such as registration verification.
Legal requirements — if we are required to disclose data by law, we will do so only to the extent required.

6. International transfers

Podgene is operated from Vietnam. Merchants and their buyers may be located in other countries, and our infrastructure and fulfillment partners may process data outside the country where you live. Where we transfer data across borders, we do so only to the providers described in Section 5 and in line with applicable data-protection requirements.

7. Data retention

Data is retained while your account is active. Database backups are kept for a maximum of 60 days and then permanently deleted. When an account or organization is deleted, its data is removed from the live system and expires from backups within the same 60-day window. Uninstalling the extension removes the data it stores locally in your browser; data already sent to your Podgene workspace stays there until you delete it or ask us to.

8. Security

All traffic is encrypted with TLS (HTTPS). Access to data is authenticated with per-user tokens and scoped to your organization. Extension pushes additionally require a per-device access token issued through a one-time, expiring setup code. No method of transmission or storage is completely secure, but we work to protect your information and will notify affected users where required by law if a breach occurs.

9. Cookies and local storage

We use browser storage only to keep you signed in (authentication token and UI preferences). We do not use advertising or cross-site tracking cookies.

10. Your rights

You can access and correct your data inside the application. To request an export or permanent deletion of your data, or to withdraw a consent you have given, contact us at the address in Section 13 and we will respond within 30 days.

Depending on where you live, you may have additional rights under applicable law, such as Vietnam's personal-data-protection regulations, the EU/UK GDPR or the California Consumer Privacy Act — for example the right to be informed, to restrict or object to processing, and to lodge a complaint with a data-protection authority. We do not discriminate against anyone for exercising these rights.

11. Children's privacy

Podgene is a business tool and is not directed to children. We do not knowingly collect personal information from anyone under 16. If you believe a child has provided us with personal information, contact us and we will delete it.

12. Changes to this policy

We may update this policy as the service evolves. Material changes will be announced in the application, and the effective date above will be updated.

13. Contact

Questions about privacy or data requests: support@podgene.net