Privacy Policy

1.Who we are & scope

GangNest (“we”, “us”, “our”) is operated by KZD LLC, an Illinois limited liability company. This Policy applies to personal data we process through the Site and the App. It does not cover the independent privacy practices of Merchants, Shopify, or other third parties, which are governed by their own policies.

2.Our roles: controller and processor

As a controller, we determine how and why we process data about visitors to the Site and about Merchants who install the App — for example account, billing, support, and usage data.

As a processor / service provider, when an End Customer uses the builder on a Merchant’s storefront, the Merchant is the controller of that End Customer’s personal data and uploaded content, and we process it on the Merchant’s behalf to provide the Service (for example, to nest artwork and produce a print file). Merchants are responsible for having a lawful basis and for providing any privacy notices and obtaining any consents required from their End Customers. Where we process Shopify “protected customer data,” we do so in accordance with Shopify’s requirements and only as needed to provide the App.

3.Data we collect

3.1 Information you provide

• account and store details when a Merchant installs the App (such as store name, domain, contact name, and email made available through Shopify);
• communications you send us (support requests, emails, feedback);
• User Content you upload or create in the builder — artwork, images, logos, photos, text, names, and numbers — which may itself contain personal data you choose to include.

3.2 Information collected automatically

• device and connection data (IP address, browser type, operating system, device identifiers);
• usage data (pages viewed, features used, actions in the builder, timestamps, referring URLs);
• cookies, local storage, and similar technologies (see our Cookie Policy); and
• diagnostic and error logs used to keep the Service secure and working.

3.3 Information from third parties

We receive data from Shopify (for installation, authentication, order and billing information needed to operate and charge for the App) and from our infrastructure and analytics providers. We do not buy personal data to build marketing profiles.

4.How we use data

• provide, operate, secure, and maintain the Service, including nesting, pricing estimates, and file generation;
• process installation and bill the 5% per-order commission through Shopify;
• provide support and respond to your requests;
• monitor, debug, prevent fraud and abuse, and protect the Service and its users;
• improve and develop features (using aggregated or de-identified data where practical);
• send service and transactional communications; and
• comply with law and enforce our Terms and policies.

5.Legal bases (GDPR / UK GDPR)

Where the GDPR or UK GDPR applies, we process personal data on these bases:

Where we rely on consent, you may withdraw it at any time without affecting prior processing.

6.Cookies & tracking

We and our providers use cookies, local storage, and similar technologies to run the Site and builder, remember preferences, and understand usage. See our Cookie Policy for details and choices.

7.How we share data

We do not sell your personal data. We share it only as follows:

• Service providers / sub-processors who help us provide the Site and App, including hosting, storage, commerce-platform, billing, and user-authorized design-import services. See our current Service Providers & Sub-processors list for provider names and purposes.
• Merchants, where you are an End Customer, receive the content and order data needed to fulfill your order.
• Legal & safety — to comply with law, respond to lawful requests, enforce our Terms, or protect rights, property, or safety.
• Business transfers — in connection with a merger, acquisition, financing, or sale of assets, subject to this Policy.

8.Retention

We keep personal data only as long as needed for the purposes described here, to provide the Service, to comply with legal, tax, and accounting obligations, to resolve disputes, and to enforce our agreements. User Content and order files are retained as needed to provide the Service to the relevant Merchant and are deleted or de-identified when no longer needed or on valid request, subject to legal retention requirements and routine backups.

9.Security

We use reasonable technical and organizational measures designed to protect personal data, including encryption in transit, access controls, and limited retention. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for keeping your account credentials confidential and for the security of your own systems.

10.International transfers

KZD LLC is established in the United States. We and our providers may process data in the United States and other countries, which may have different data-protection laws than your country. Where applicable law requires a transfer safeguard, we use a lawful mechanism made available for the relevant transfer, which may include contractual safeguards or an adequacy mechanism. Contact privacy@gangnest.com to ask about the mechanism relevant to your data.

11.Your rights

Depending on where you live, you may have rights to access, correct, delete, restrict, or object to processing of your personal data, to data portability, and to withdraw consent. To exercise rights, contact privacy@gangnest.com. We will respond as required by law and may need to verify your identity. If you are an End Customer, you may also need to contact the relevant Merchant, who is the controller of your data. You may lodge a complaint with your local data-protection authority.

12.US state privacy rights (CCPA/CPRA and similar)

If you are a California resident (or a resident of a US state with comparable law), you may have rights to know, access, correct, delete, and to opt out of “sale” or “sharing” of personal information and certain targeted advertising. We do not sell your personal information and do not share it for cross-context behavioral advertising. You may exercise rights by contacting privacy@gangnest.com, and we will not discriminate against you for doing so. You may use an authorized agent where the law allows.

13.Children

The Service is not directed to, and we do not knowingly collect personal data from, children under 16 (or the age set by local law). If you believe a child has provided us personal data, contact privacy@gangnest.com and we will take appropriate steps to delete it.

14.Do Not Track & Global Privacy Control

The Site does not respond to “Do Not Track” signals because there is no common standard. Where required by law, we honor recognized opt-out preference signals such as the Global Privacy Control (GPC).

15.Third-party links & services

The Service may link to or rely on third-party sites and services (including Shopify) that we do not control. Their privacy practices are governed by their own policies, and we are not responsible for them.

16.Changes to this Policy

We may update this Policy from time to time. We will revise the “Last updated” date and, where required, provide additional notice. Your continued use of the Service after changes take effect constitutes acceptance of the updated Policy.

17.Contact

For privacy questions or to exercise your rights:

KZD LLC has not appointed an EU or UK representative or a data protection officer.