Privacy Policy

PrintA4 processes data strictly required to deliver cloud printing services, manage hardware kiosk networks, and facilitate enterprise account administration.

• Account Identifiers: Name, professional email address, organization ID, and phone number.
• Print Metadata: Document page counts, paper format (A4/Letter), color mode, timestamp, and target Kiosk ID.
• Kiosk Diagnostics: Hardware status, IP address, firmware logs, and paper/ink level telemetry.

To prevent unauthorized access at physical kiosks and online management consoles, PrintA4 and SupportA4 enforce robust access authentication standards:

• Dynamic QR & Tap Sign-in: Authenticate at physical kiosks using temporary encrypted mobile QR codes or NFC tap cards.
• Biometric Kiosk Security: Fingerprint and facial authentication at supported kiosks are processed inside hardware Trusted Execution Environments (TEE). Raw biometric images are never transmitted.
• Ephemeral Sessions: Kiosk interactive sessions automatically terminate after 60 seconds of inactivity to protect user privacy.

We utilize push notifications solely to provide operational convenience and security alerts:

• Print Readiness Alerts: Real-time status updates when your print job is rendered or ready at a kiosk.
• Hardware Maintenance Alerts: Diagnostic notifications sent to SupportA4 technicians regarding kiosk status.
• Security Notifications: Instant alerts triggered upon new login locations or account security events.

PrintA4 enforces multi-layered defense mechanisms to safeguard your data at rest, in transit, and during kiosk hardware rendering:

• Transit Encryption: All mobile app, cloud, and kiosk communications are secured using TLS 1.3 tunnels.
• At-Rest Encryption: Stored metadata and queue payloads are encrypted with AES-256-GCM.
• Volatile Memory Processing: Documents render directly in volatile RAM and are shredded upon print completion using DoD 5220.22-M memory wiping algorithms.

We strictly minimize data retention periods according to operational needs:

• Printed Document Payload: Permanently purged from memory buffers immediately (0 seconds) after printing completes.
• Job Metadata & Receipts: Retained for 30 days for billing dispute verification, after which records are anonymized.
• Account Records: Maintained for the duration of active registration and completely deleted within 90 days of an account termination request.

PrintA4 integrates with enterprise third-party sub-processors bound by formal Data Processing Agreements (DPAs):

• Amazon Web Services (AWS): Enterprise cloud server hosting and hardware secrets management (SOC 2, ISO 27001).
• Stripe, Inc.: PCI-DSS Level 1 compliant payment processing and invoice billing.
• Datadog Telemetry: Anonymized real-time error logging and performance diagnostics.

For questions concerning this Privacy Policy or to submit GDPR/CCPA data privacy requests, contact our Data Protection Officer: