Privacy by design
This is a summary of proposed product privacy principles, not a finalized privacy policy for a live cloud service. A formal policy must be approved before data collection, analytics, accounts or cloud launch.
Local-first operations
Community local printing should not require a cloud account. Hardware pairing and access are locally authorized and device-scoped.
Optional cloud features
Cloud enrollment, telemetry and AI diagnostics should be opt-in, with clear disclosure, access controls, limited retention and data deletion paths. Store and transmit only data needed for the selected function.
Security
No secrets or print contents should be included in default diagnostics. All remote requests require authentication, tenant isolation and least-privilege authorization. Never automatically replay a print job when its physical outcome is uncertain.