Privacy
Privacy policy
Last updated 2 October 2026
On this page
Who we are
ProdBord is made by Dust Shack Ltd, trading as appFabrication. Dust Shack Ltd is registered in England and Wales (company number 12425976), and its registered office is Unit 13-15 Tir Llwyd Industrial Estate, St Asaph Avenue, Rhyl, LL18 5JA. In this policy, “we” and “us” mean Dust Shack Ltd. Contact us at support@appfabrication.com.
This policy covers the prodbord.com website and the ProdBord app, whether you use it directly or through Shopify.
This website
prodbord.com sets no cookies and uses no analytics or advertising tools. It is hosted by Hostinger, whose servers record standard request logs, such as IP address, page requested and browser, to run and protect the site. The pages load fonts from Google Fonts, so your browser sends your IP address to Google when it fetches them.
What the ProdBord app collects
If you use ProdBord directly
- Account details: your email address and the name you give us.
- Sign-in and security details: your password, stored only as a one-way hash; passkey public keys; your two-step verification setup and recovery codes; and the devices you sign in from, sign-in times and IP addresses, which we use to limit repeated sign-in attempts and to send security notices.
- Billing details: your subscription status, trial use and Stripe customer reference. Stripe handles your card; we never see the full card number.
If you use ProdBord through Shopify
- Your store’s Shopify domain and installation status. Shopify handles billing.
Orders from Shopify
For each order we read: the order number and ID, when it was placed, payment and fulfilment status, order tags, the customer’s display name, and up to 25 items with their title, variant, quantity, SKU, vendor, product and variant IDs, product tags, image link and custom attributes such as engraving text. We filter out custom attributes that look like contact, address or payment details. We do not request customer email addresses, phone numbers, addresses or payment information.
Orders from Etsy
For each order we read: the receipt number and status, the recipient’s display name, and each item’s title, quantity, SKU, options, personalisation and image link. We do not keep Etsy email addresses, postal addresses, profile details, messages or payment records. Your Etsy connection’s access tokens are stored encrypted.
What you add yourself
Jobs you create, references, notes, due dates, priorities, boards, stages and settings.
Your customers’ details
Orders contain some details about your customers, such as their names and any personalisation. For those details, you decide what is collected and why, and we process them on your behalf only to run ProdBord for you. Under UK data protection law, you are the controller and we are your processor for that data.
When Shopify tells us a customer has asked for their data to be deleted, we delete it from the Shopify orders and jobs it appears in.
Why we use it
| What we do | Lawful basis |
|---|---|
| Run your account, show your orders and jobs, and provide the features you use | Performing our contract with you |
| Take payment and keep billing records | Contract, and our legal obligations for tax and accounting |
| Send emails about your account, security, billing and changes to your workspace | Contract, and our legitimate interest in keeping accounts secure |
| Limit repeated sign-in attempts and investigate problems | Our legitimate interest in keeping ProdBord secure and working |
We don’t sell your data, use it for advertising, or use it to train AI models.
Who we share it with
We use these services to run ProdBord. Each one receives only what it needs.
| Service | What for |
|---|---|
| DigitalOcean | Hosts the ProdBord app and its database. The database is in the UK. |
| Stripe | Takes payment for direct subscriptions |
| Resend | Sends account, security and billing emails |
| Shopify | Sign-in, billing and order data, if you use ProdBord through Shopify |
| Etsy | Order data, if you connect an Etsy shop |
| Hostinger | Hosts this website |
| Google Fonts | Serves the fonts on this website |
Some of these services are based outside the UK. Where data leaves the UK, we rely on the safeguards UK law requires, such as the UK International Data Transfer Addendum.
We may also disclose data if the law requires it.
How long we keep it
- Completed and removed jobs: deleted 30 days after they were completed or removed, or straight away if you choose Delete now.
- Closed workspaces (direct): kept for 30 days so the owner can reopen them, then permanently deleted. A workspace with no active subscription for 30 days closes by itself, and the same 30 days then apply.
- Your account (direct): deleted when you delete it in Settings. “Delete everything now” deletes your account and the workspace you own straight away.
- Billing records: after a workspace is erased we ask Stripe to delete your customer record. Stripe keeps invoice records as the law requires it to.
- Shopify stores: when you uninstall, we keep your data for now so you can reinstall without losing it. When Shopify asks us to erase your store’s data, about 48 hours after you uninstall, we delete it.
- Etsy: disconnecting Etsy removes our access to your shop and deletes its access tokens. Orders already imported stay in your workspace until the workspace or the jobs are deleted.
- Backups: our database host keeps automatic daily backups for 7 days. Anything deleted from ProdBord can remain in those backups until they expire, at most 7 days later. We only use backups to recover from a fault.
Keeping it secure
Data is encrypted in transit. Passwords are stored as one-way hashes, Etsy access tokens are encrypted, and sign-in can be protected with passkeys and two-step verification. Each workspace’s data is kept separate from every other workspace’s.
Your rights
You can ask to see, correct, delete or move your personal data, and object to or ask us to limit how we use it. Many of these you can do yourself in ProdBord, for example deleting jobs, workspaces or your account. For anything else, contact us at support@appfabrication.com.
If you’re a customer of a business that uses ProdBord, contact that business first, since they control your data.
You can complain to the Information Commissioner’s Office at ico.org.uk.
ProdBord is for businesses and isn’t meant for anyone under 18.
Changes and contact
If we change this policy, we’ll update the date at the top, and tell account holders by email about any significant change. Questions: support@appfabrication.com.