Gang Sheet Guru privacy policy
Last updated 15 October 2026
Gang Sheet Guru ("the app", "we", "us") is a Shopify app made by Kausrh LLC, 75 E 3rd St, Sheridan, WY 82801, United States (support@kausrh.com). It lets print shops ("merchants") offer a gang sheet builder on their Shopify store, and gives them a print-ready file for each order. This policy explains what the app collects, why, how long it keeps it, and who it shares it with.
We act as a processor for the merchant: the merchant decides why their customers' data is used, and we process it on their behalf to provide the app. Merchants can ask us at support@kausrh.com for a data processing agreement.
What we collect
From merchants, when they install and use the app
- The shop's Shopify domain, its settings in the app (print rules, builder appearance, sheet lengths and prices) and the sheet product the app creates.
- Shopify access tokens, so the app can work with the shop's products and orders. They are encrypted before they are stored.
- Which staff account changed a sheet's status (an identifier from Shopify, shown in the sheet's history).
- The store's account email, read from Shopify each time we send a print-failure alert. We do not store it.
From the merchant's customers, through the merchant's store
- The files they upload to the builder (artwork, which can show people), the sheets they arrange from them and, if the merchant asks for it, whether they confirmed they have the rights to print their artwork, with the wording they saw.
- For orders that include a gang sheet: the customer's name and email address, from the Shopify order. These are the only personal details we store about a customer. We never store phone numbers or postal addresses, and customers never create an account with us.
- Technical data needed to run the service safely: the customer's IP address is used to limit abuse: counters keyed by it expire within 10 minutes, and it is never stored with a sheet or an order. Our logs record which page or API path was used, never names, emails or the contents of links.
The builder stores a reference to the customer's sheet in their own browser (local storage) so they can come back to it. It sets no tracking cookies and sends nothing to analytics or advertising services.
How we use it
- To show the builder, save customers' sheets, check their print quality and add them to the shop's cart.
- To give the merchant each order's print file, show who ordered it so staff can contact the customer about a print problem, and keep the order in step with Shopify (payments, cancellations, refunds, edits).
- To email the merchant when a print file cannot be made.
- To keep the service secure and working (error reports, abuse limits, backups).
We do not sell personal data, use it for advertising, or combine it with data from other shops.
Who we share it with
We use these service providers to run the app, under agreements that require them to protect the data:
| Provider | What for | Data |
|---|---|---|
| Shopify | The platform the app runs on | Everything above comes from or goes back to the merchant's Shopify store |
| Cloudflare (R2 storage, network) | Storing uploaded files, print files and backups; delivering the app | Files, encrypted database backups |
| OVHcloud (France) | Hosting the app's servers and database | All stored data, encrypted where described below |
| Resend | Sending print-failure alerts to merchants | The store's account email and the failed sheets' order numbers |
| Sentry | Error reports | Technical details of errors; query strings, headers, cookies, request bodies and user details are removed before sending |
We disclose data to authorities only when the law requires it.
Where it is stored
The app's servers and database are in France (OVHcloud). Files and backups are stored with Cloudflare, and Cloudflare, Resend and Sentry may process data in the United States and other countries; Kausrh LLC is based in the United States. Where data moves between countries, we rely on the European Commission's standard contractual clauses in our providers' data processing agreements, or on the EU-US Data Privacy Framework where a provider is certified under it.
How long we keep it
| Data | Kept |
|---|---|
| A sheet not yet ordered (draft) | 30 days after it was last saved or added to the cart, and no more than 90 days after it was started (up to a week longer if it is added to the cart near the end, so the order can arrive) |
| Designs of an order that was paid | 2 years after the shop's most recent paid order using them (so a yearly reorder still works); then the full-size files are deleted, and the small previews and sheet thumbnails stay as the shop's record of the order while it has the app |
| Designs of an order never paid | 90 days after the order |
| Designs of an order cancelled or fully refunded | 60 days after the cancellation or refund; 30 days after an order is deleted in Shopify |
| The customer's name and email on an order | Deleted together with that order's designs (2 years after the shop's most recent paid order at most, sooner as above) |
| Print files | 30 days after the sheet is printed, or 60 days after the order if never printed (they can be rebuilt from the saved sheet) |
| Bulk download archives | 24 hours |
| Uploads that failed to process | 1 day |
| Database backups | 7 days |
| Everything about a shop | Deleted when Shopify sends the shop's deletion request, 48 hours after the app is uninstalled |
Customers' rights
Customers can ask the merchant for a copy of their data or for it to be deleted. Shopify passes these requests to us, and we act on them within 30 days: we give the merchant the customer's orders, name, email and links to their designs (valid for 7 days), or delete the name, email and artwork of the orders named. Customers can also contact us at support@kausrh.com; we will pass the request to the merchant concerned.
Security
Customers' names and emails, and Shopify access tokens, are encrypted (AES-256-GCM) before they are stored. Files are kept in private storage, encrypted at rest and in transit, and are only reachable through links that expire within an hour (7 days for the links in a customer's data export). Access to production systems is limited to the owner of Kausrh LLC and protected by multi-factor authentication. We keep a written incident response plan for handling a breach.
Our website
Visiting gangsheet.guru sets no cookies, and the site uses no analytics or advertising services; its fonts and images come from the site itself. Cloudflare and our host process your IP address to deliver the pages and protect them from attacks. If you email us, we use your message and address only to answer you.
Children
The app is a tool for businesses. It is not directed at children, and we do not knowingly collect children's data.
Changes
We will post any change to this policy here and update the date above. For material changes, we will tell merchants in the app or by email.
Contact
Kausrh LLC, 75 E 3rd St, Sheridan, WY 82801, United States, support@kausrh.com.