Plain words, because that is how we run the product.
Your account details (shop name, your name, email, phone if you give it), the business data you put in (customers, products, quotes, jobs, proofs, invoices), login records and security events needed to run the service and keep accounts safe, and files you upload as proofs.
We do not sell your data. We do not email your customers, imports and signups never trigger mail to anyone but you. We do not show your data to other shops: every shop's data is separated and checked on every request.
Export everything at any time (a single ZIP, open formats), whether your account is paid, on trial or read-only after a trial. Expired trial data is kept for 60 days so you can come back; ask us and we will delete it sooner. Customer links you send are unguessable and can be revoked by you at any time.
Passwords are hashed, never stored in plain text. Sessions are revocable, logins are rate-limited, and the admin side of SignShopApp requires two-step verification. Backups run daily.
Privacy questions: use the contact address on this site. We answer like people, because we are.