Privacy

3D Job Desk stores print files, job records, and account emails for the desk you create. If you install the Shopify app, we also process shop brand and draft-order data needed to send invoices.

If you paste Stripe keys, we store them on the desk host so we can create Checkout links and listen for paid events. Charges settle in your Stripe account. 3D Job Desk does not take a cut of job payments.

Google user data

When a shop owner connects Gmail in Settings → Email, 3D Job Desk requests only the Google OAuth scope https://www.googleapis.com/auth/gmail.send. That lets the desk send email on the owner’s behalf. We do not request scopes to read, list, search, modify or delete Gmail messages, and we do not access message bodies, attachments, labels or contacts. We store the connected Gmail address so we can show which inbox is connected and use it as the From address.

How we use Google user data

We use the connected Gmail account only to send quote and job emails the shop owner chooses to send from the desk (for example when they click Send Quote). We use the Google account email address to show which inbox is connected and as the From address on those messages. We do not use Google user data for advertising, and we do not use Google user data to train AI or machine-learning models.

Sharing of Google user data

We do not sell Google user data. We do not share, transfer, or disclose Google user data to other advertisers or data brokers. Tokens and the connected address are stored on the desk host so that desk can send mail. Hosting and infrastructure providers that process our servers may process that data only to operate the service. Recipients of a quote see the From address and message content the owner sent. We disclose Google user data only if required by law. Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Our staff do not read Google user data except with the owner’s consent, to investigate abuse or a security issue, or to comply with law.

Protection of Google user data

Mailbox access and refresh tokens, along with OAuth client secrets, API keys, SMTP passwords and two-factor secrets, are encrypted at rest with AES-256-GCM, and the data file is readable only by the server account. All traffic uses HTTPS (TLS) in transit. Passwords are stored only as salted scrypt hashes. Sessions use HttpOnly, Secure cookies, and requests that change data are checked against cross-site request forgery. Two-factor authentication is available for accounts. Each desk’s data is isolated from other desks, with role-based access for its team. Access to desk settings requires a signed-in shop account, and we request the minimum Gmail scope needed (gmail.send).

Retention and deletion of Google user data

We keep the connected Gmail address and OAuth tokens only while Gmail remains connected for that desk. The owner can disconnect Gmail at any time in Settings → Email, which deletes the stored mailbox tokens and clears the connected Google inbox from that desk. Closing the desk account or asking us to delete the desk also removes those tokens. We do not retain copies of Gmail mailbox contents, because we never read the mailbox.

You can close an account and ask us to delete the desk. Shopify uninstall and GDPR webhooks redact shop and customer data we stored for that shop.

If you run the open-source Printer Bridge program, it stores a device name and a random device secret on that computer, and forwards only printer status to your desk. See the Printer Bridge page for details.

Questions about privacy or Google data: email help@3djobdesk.com. Last updated October 8, 2026.