Privacy Policy

Effective date: October 7, 2026

This policy explains how TCG Paper Inc. (“we,” “us,” or “our”), handles information through the TCG Paper Ticket System, including customer service, order processing, and its Google Drive design synchronization. It applies to this system; other services may have their own privacy policies.

Information handled by the system

• Order and support information: customer names, contact and shipping details, order identifiers, purchased items, quantities, order status, and information supplied in support requests, as available through our order and customer-service workflows.
• Custom artwork: customer-submitted design files, production images, design codes, filenames, and their associations with orders.
• Google Drive information: file metadata returned by Google, such as file identifiers, names, sizes, modification times, and checksums, used to identify production files in the configured business folder.
• Authorization and technical information: Google OAuth credentials and tokens used by the server to access the authorized business account, staff login/session information, and operational or server logs that may include request details, IP addresses, timestamps, and errors.

How we use information

We use this information to fulfill and track orders, prepare artwork for printing, arrange shipping, respond to support requests, maintain business records, prevent unauthorized access, and diagnose technical problems.

Google Drive access

A business account owner or authorized operator grants the system access to Google Drive. The system uses that authorization to look for matching design filenames in the configured business folder and upload missing production images from our design storage. Google permissions may authorize access beyond that folder; the current design synchronization workflow directs its file searches and uploads to the configured folder.

Customers are not asked to authorize access to their personal Google accounts. Google authorization tokens are used by the server and are not intended to be displayed on public pages.

We do not sell Google user data, use it for advertising, or use it to train artificial intelligence or machine-learning models. Human access is limited to authorized business operations and support, security investigations, legal requirements, or access authorized by the account owner.

The TCG Paper Ticket System’s use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements.

Storage, service providers, and disclosure

Information may be stored in our application databases, design storage, the connected business Google Drive account, and operational logs or backups. We use providers such as Google Drive, Wasabi, Ecwid, Etsy, ShipStation, and hosting services as relevant to the particular order or workflow. These providers process information under their own terms and privacy policies.

We disclose information to authorized staff and service providers as needed for fulfillment, customer support, shipping, and system operation. We may also disclose information where required by law or necessary to protect rights, investigate fraud, or address security incidents. We do not sell customer artwork or Google user data.

Retention and deletion

Order records and artwork may be retained for fulfillment, customer support, repeat orders, and business or legal recordkeeping. Retention depends on the information and its purpose. Copies may exist in more than one system, including Drive, design storage, and backups.

To request access to, correction of, or deletion of information handled by this system, email tcgpaper@gmail.com. Include enough information to identify the order or design, but do not send passwords or authorization tokens. We may need to verify the request and may retain information required for ongoing orders or legal obligations. Backup copies may remain until the applicable backup is replaced or expires.

Revoking Google access

The connected account owner can revoke the integration through Google Account third-party connections. Revocation stops further authorized access but does not itself delete previously uploaded artwork or existing business records. Contact us to request removal of stored integration credentials or associated information.

Security and cookies

We use access controls and server-side credentials to restrict business tools to authorized users. No storage or transmission method can be guaranteed completely secure. Staff-facing pages may use session cookies for authentication. These public information pages do not add analytics scripts or set application cookies themselves; hosting services may record ordinary access logs.

Changes and contact

We may update this policy as the system or our practices change. Updates will appear on this page with a revised effective date. Questions and privacy requests may be sent to tcgpaper@gmail.com.