This privacy notice covers the Kittl Gelato Extension and supplements Kittl's main Privacy Policy at kittl.com/privacy. Both apply in full; this notice describes only what is specific to the Gelato integration.
The Gelato Extension uses the Gelato API to turn a design from Kittl into a new product in your Gelato store, to show your store's products and mockups and add mockups to your designs, and to look up print sizes in Gelato's product catalog. It connects with an API key you create in your Gelato account, not with your Gelato password. Kittl is not affiliated with, sponsored by, or endorsed by Gelato ASA. Gelato is a trademark of Gelato ASA.
To connect, you paste an API key from your Gelato account. The key is kept only in the memory of the open extension panel and is never saved in your browser. Kittl's servers pass it to Gelato with each request and never store, log or cache it. A Gelato API key gives access to your whole Gelato account, but the extension only reads your stores, store products and templates and Gelato's product catalog, and creates new products; it never calls your orders or your customers' personal data, such as names, shipping addresses or payment information.
Gelato's product catalog, which is the same for every Gelato user, may be cached on Kittl's servers for up to 6 hours so that it loads quickly. We do not cache your stores, products, templates or other Gelato account data on Kittl servers; it is fetched from the Gelato API on demand when needed to provide the integration.
When you add a product preview or mockup to a design, Kittl downloads the image from Gelato through Kittl's servers without keeping a copy, uploads it into your Kittl workspace and places it on the canvas. From then on it is governed by the imported-content terms in our main Privacy Policy. The thumbnails of your products and templates are loaded by your browser directly from Gelato's image storage, so your IP address and standard browser information are sent there for those requests, just as when you visit any website.
When you send a design to Gelato, Kittl exports your selection as a PNG image at the template's print size and saves it to your Kittl uploads, which gives it a public web address. Kittl's servers check that the file is an image and then ask Gelato to create a new product from the template you chose, sending the template and variant identifiers, the product title you enter, the template's description and the address of the design file; Gelato then downloads the file from Kittl. The new product is hidden from your online store until you publish it in Gelato. Kittl receives operational data back from Gelato in connection with this, for example the new product's identifier, its status and any error messages, which we use to operate the integration. Once created, the product is part of your Gelato store; you can edit or delete it in your Gelato account.
So that you do not have to set things up again, the extension keeps some details in your browser's storage, never on Kittl's servers: the IDs and nicknames of the stores you added, the store you last opened, the template IDs you added, and a record of your most recent sends, with each product's identifier, title, store and number of variants, the address of its design file and when it was sent. These are identifiers and details you entered, not credentials. You can remove a store or a template in the extension at any time, and clearing your browser's stored data removes all of it.
Kittl records anonymous usage events for the extension, for example whether connecting or sending a design succeeded, how many product variants a design was sent to, which background option was chosen and how long it took, to operate and improve the feature, as described in the main Privacy Policy. These events do not include your API key, store, product or template identifiers, titles or nicknames, design file addresses or Gelato's error messages. Kittl does not sell or redistribute Gelato content or Gelato-derived data to any third party; the service providers described in the main Privacy Policy process it only to operate the extension.
Because Kittl never stores your Gelato API key, there is nothing for Kittl to delete from its servers when you disconnect. Clicking Disconnect in the extension removes the key from the panel and forgets which store was open; the stores, templates and recent sends saved in your browser stay until you remove them as described above. To stop the key working altogether, deactivate it in your Gelato account under Developer, API Keys; Gelato may keep accepting it for a few minutes afterwards. Products you created through Kittl remain in your Gelato store. Gelato content remains subject to Gelato's Terms of Service.