Customer data (and ordering information including payment details) were being sent to Radix/Onprintshop.
The testing ending December, 2011, so I'd like to think that if they were honest and were receiving customer order history a year later, they would have stopped it a long time ago.
I frankly think that's their business practice: they hook us small shops with low cost-to-entry fees and then steal our data.
The kind of data being sent to Radix is never the kind of data you'd expect to see being sent to a 3rd party developer: why on earth would they need the customer's email address or their physical address or the amount they paid or how they paid? We have our own merchant account and with this Web2Print app by Radix started using eSelectPlus where payment information was being sent to them directly rather than us.
What's frightening is that if we were collecting credit card information directly through our site, Radix would also get a copy of it.
Last night I went through the proposal Radix sent me last November (2011) and checked all the sites they used for references and only 2 of them are still active (in all fairness, a few of the Eastern European sites I didn't check) -- I was always suspicious about a few of the sites because they looked like they were somehow related to Radix and now I think I was right all along.