Privacy
Privacy policy
Last updated 2 September 2026. Operator: Media Yard LLC, PO Box 73, Pennsauken, NJ 08110.
Media Yard LLC is the controller of account data (your email, plan, keys, and billing identifiers). For personal data inside the JSON you post to render a PDF, you are the controller (or a processor for your own customer) and we are the processor (or sub-processor). That split is spelled out in the DPA.
We have not appointed a DPO. We have not appointed an Article 27 representative in the Union. If we do, this section will name them. Contact: privacy@slipmill.com.
What we hold
Account: sign-in email, Slipmill keys, plan, Stripe customer and subscription ids when you pay. Session: an httpOnly cookie named sm_session. Magic-link tokens until they expire or are used. Render metadata: render id, template name, PDF byte size, and time, so we can enforce quota and show recent jobs.
The JSON body is used to build the PDF for that request. The PDF bytes go back in the HTTP response. We do not store the JSON body or the PDF file after the response is sent.
Why
We use that information to operate Slipmill, send magic-link mail, bill paid plans, enforce quota, and answer support. We do not sell personal information. We do not use order JSON, logos, or PDFs to train a model. See AI.
Cookies
The only cookie we set is the session cookie. There is no analytics script on this site. We honor a Do Not Track signal by not adding one.
Who else processes data
Document processing (DPA Annex 3)
| Legal name | Address | Location | What they do |
|---|---|---|---|
| Vercel, Inc. | 440 N Barranca Ave #4133, Covina, CA 91723, United States | United States | Hosts the app and the render path |
Account processors (we are controller)
| Legal name | Address | Location | What they do |
|---|---|---|---|
| Neon, Inc. | United States | United States | Postgres for accounts, keys, sessions, and render metadata |
| Resend, Inc. | United States | United States | Transactional sign-in mail when configured |
| Stripe, Inc. | 354 Oyster Point Boulevard, South San Francisco, CA 94080, United States | United States | Paid-plan checkout and billing |
Logo URLs you send are fetched at render time over HTTPS so we can print the image. That host is yours (or your CDN), not a Slipmill subprocessor.
Before a new party begins processing document personal data we will update this page and email the account address at least 30 days in advance.
Transfers and hosting
The product is hosted in the United States. For EEA, UK, or Swiss personal data, the EU SCCs and the UK Addendum apply as set out in the DPA. We have documented the transfer impact assessment of US law and will make it available on request. We are not certified under the EU-US Data Privacy Framework.
What we are not
We are not SOC 2 certified. We are not a HIPAA business associate. We do not have a Data Protection Officer. We do not sell or share personal information as those words are used in the CCPA.
Children
Slipmill is for people 18 or older acting for a business. We do not knowingly create accounts for children. Packing slips and invoices may still name people, including in rare cases minors. You are the controller of that data; we process it because you sent it.
Close and requests
You may close the account from Settings. Closing revokes keys and stops new renders. Render metadata may remain for a limited period. Email privacy@slipmill.com for access or deletion questions. At the end of the service you may choose return or deletion as the DPA describes.
New Jersey law and New Jersey courts apply to the contract, as in the terms, without limiting the Ireland forum in the Clauses.