1.Current sub-processors
These companies process personal information on our instructions, under their standard data processing terms. They may use it only to provide the service we have engaged them for.
Payments
| Provider | What it does for us | What it receives | Where |
|---|---|---|---|
| Stripe, Inc. | Payment processing, stored payment methods, fraud prevention | Name, email, billing address, transaction data, payment method details | United States |
Shipping
| Provider | What it does for us | What it receives | Where |
|---|---|---|---|
| Shippo, Inc. | Rate shopping, label purchase, tracking, address validation, and the broker for every connected storefront | Recipient name, shipping address, parcel and order data, connected store metadata | United States |
| USPS, UPS, FedEx, DHL | Carriage and delivery | Recipient name, shipping address, parcel data | Global |
Manufacturing
| Provider | What it does for us | What it receives | Where |
|---|---|---|---|
| Printago | Print farm scheduling, production orchestration and printer telemetry | Order line items, model files, production parameters | United States |
Hosting
| Provider | What it does for us | What it receives | Where |
|---|---|---|---|
| Cloudflare, Inc. | Application hosting (Workers and Containers), edge delivery, DNS, TLS and WAF — every request to the Services passes through it | All service data in transit; request logs; IP address | United States |
| Google LLC (Firebase and Google Cloud Platform) | Authentication, database, file storage, push notifications, scheduled jobs, and the slicing/CAD worker | Account data, uploaded model files, generated images, application data | United States |
| Amazon Web Services, Inc. | Container image registry and the background fulfilment worker, plus the build pipeline that produces the deployed image | All service data in transit through the worker; order and model data it processes | United States |
AI
| Provider | What it does for us | What it receives | Where |
|---|---|---|---|
| Microsoft Corporation (Azure AI Foundry) | AI design generation, prompt improvement, web-search grounding, image generation, and the support assistant | Prompt text (redacted), design parameters, generated code, reference images, support message text (redacted) | United States (East US 2) |
| Amazon Web Services, Inc. (Bedrock) | Prompt improvement and failover generation models | Prompt text (redacted), design parameters | United States |
| OpenRouter, Inc. | Web-search grounding for Studio design research only (model ids carrying “:online”) — no other AI traffic is routed here | The research query text sent for grounding (redacted) | United States |
| OpenAI, L.L.C. | Product image generation and editing (alternate provider) | Image prompt text, reference images | United States |
| fal.ai (Features & Labels, Inc.) | Image-to-3D mesh generation (Hunyuan3D) | Reference images | United States |
| Provider | What it does for us | What it receives | Where |
|---|---|---|---|
| Resend, Inc. | Transactional email delivery | Email address, message content | United States |
Analytics
| Provider | What it does for us | What it receives | Where |
|---|---|---|---|
| Google Analytics 4 (Google LLC) | Aggregate usage measurement and funnel analysisconsent only | Pseudonymous identifiers, your account ID, page views, device and approximate location | United States |
| Cloudflare Web Analytics (Cloudflare, Inc.) | Cookieless page-view and performance measurement — no cookies, no cross-site tracking, no profile | Page URL, referrer, browser and device type, country, connection timings | United States |
Address lookup
| Provider | What it does for us | What it receives | Where |
|---|---|---|---|
| Google Places API (Google LLC) | Address autocomplete and validation at checkout | Partial address text you type | United States |
Providers marked consent only receive nothing unless you have accepted the relevant cookie category. See Cookies.
2.AI providers
The AI providers above are covered in detail by Section 5 of the Privacy Policy, which sets out exactly what is sent to each one, what we redact before sending, and what they may do with it. In short: we strip personal identifiers before your text leaves our systems — a pattern-based safeguard that does not detect names, so it is not a guarantee (see Privacy Policy §5.2) — and our agreements with Microsoft Azure AI Foundry and Amazon Bedrock provide that your inputs are not used to train their models.
We cannot give that assurance for OpenRouter, OpenAI, fal.ai, and we say so rather than imply otherwise.
3.Connected storefronts are not sub-processors
If you connect a store — Shopify, Etsy, Amazon, eBay, Walmart, TikTok Shop, WooCommerce, BigCommerce, Squarespace, Wix, Magento — data flows both ways so we can fulfil orders. Those platforms decide independently what to do with the data they hold, so for that purpose they are separate controllers rather than our processors, and their own privacy policies apply. We hold no direct integration with any of them; connections live in your own Shippo account.
4.Changes and notice
We will update this page before a new sub-processor begins processing personal information. If you are a business customer who needs advance notice of changes, or a copy of our Standard Contractual Clauses, write to privacy@printport3d.com and we will add you to the notification list.
Version 2026-09-06 · Last reviewed September 24, 2026.