Privacy Policy

• Account. Your name, email address and password. If you sign in with Google, we receive your name, email address and profile image from Google instead of a password.
• Business and settings. Optional details you choose to enter — business name, business address, contact details, fulfilment preferences, logo.
• Orders. Billing and delivery addresses, the contents of your order, and its history. Card details go directly to Stripe; we store only the last four digits and card type that Stripe returns to us.
• Uploads. 3D model files (STL, OBJ, 3MF, STEP), product images, thumbnails and the descriptions and prices you write.
• Studio. The prompts you write, the parameters you set, reference images you upload, and the designs, code and images generated in response.
• Support. Tickets, replies, attachments, and your conversations with our AI support assistant.
• Instant quotes without an account. If you use the public quote tool, we take the model file and the resulting quote. These are anonymous and are deleted automatically — see Section 8.
• Push notification tokens, if you use our mobile app and allow notifications. We keep them while the app is installed and you remain signed in.

What you have to give us. Your name, email and password are required to hold an account; a delivery address and payment method are required to place an order. Without those we cannot perform the contract. Everything else above is optional, and nothing follows from declining it beyond the feature not working.

• Device and log data. IP address, browser and device type, operating system, referring page, pages viewed, actions taken, and timestamps.
• Approximate location, derived from your IP address. We do not collect precise GPS location.
• Usage. Which features you use, uploads and downloads, and search terms inside the product.
• Cookies and similar technologies — see Section 11.

Where you came from, when you create an account. When you sign up we save, with your account, the page you first arrived on during that visit, the website that linked you to it (its address without any search terms or other query text), any campaign tags on the link, which kind of advertising link it was if it was one (not the ad’s click identifier), and your country as our hosting provider reports it. We read this from the visit itself and keep it only in the open page until you sign up — no cookie or other browser storage is used — so it is recorded whether or not you accept analytics cookies. We use it to understand which channels bring us sellers. If you never create an account, nothing is saved.

In our security and audit records we store a one-way hash of the IP address rather than the address itself, so we can detect abuse patterns without keeping the address. Our hosting providers’ own request logs do hold the address, for their own retention periods.

• Stripe — payment confirmations, the card brand and last four digits, and fraud signals.
• Shippo and carriers — shipping rates, validated addresses, tracking events and delivery confirmations.
• Connected storefronts — where a seller connects a store, we receive order and customer information needed to fulfil, including the end customer’s name and delivery address. That data does not come from the person it is about, so the seller is the one who tells them how it is used; that is part of their agreement with us. If you are that customer and you have found this page, Section 1 explains our role and Section 9 explains what you can ask us for.
• Google — your basic profile if you sign in with Google, and address suggestions when you type an address.

• We do not collect government identity documents, biometric data, precise geolocation, or special-category data such as health, religion, ethnicity, political opinion or sexual orientation.
• We do not buy personal information from data brokers.
• We do not use identity-verification or credit-scoring vendors.
• We do not run advertising pixels, and we do not build advertising profiles.

Nothing stops you typing sensitive information into a free-text box — a support message, a Studio prompt, a product description. Do not put anything there you would mind us holding. If you tell us you have, we will delete it.

The Services are for adults. You must be 18 or older to hold an account, and we do not knowingly collect personal information from anyone under that age. If you believe a child has given us information, write to privacy@printport3d.com and we will delete it and close the account.

We use other companies to run parts of the Services. They may only use your information to do the job we have engaged them for, under their standard data processing terms, which require them to keep it secure and to act on our instructions. Every one of them is named — with what it receives and where it is — on our sub-processor page, which we keep current. There are currently 16 of them.

If you connect a store (Shopify, Etsy, Amazon, eBay, Walmart, TikTok Shop, WooCommerce, BigCommerce, Squarespace, Wix, Magento), information flows both ways so we can fulfil orders. Connections are held in your own Shippo account rather than through a direct integration. Each platform decides independently what to do with the data it holds, under its own privacy policy — for that, it is a controller and not our processor.

If you ordered directly from us, no other seller is involved — we are the seller, and your details go only to the providers in Section 4.1 who help us make and ship your item.

If you ordered from a seller’s own storefront, that seller sends us your name and delivery address so we can make and ship the item, and we send them back the tracking information and order status. That is the whole of the exchange. We do not put buyers and sellers in touch with each other, we do not host a marketplace, and we do not give other users your email address.

We disclose information where we are legally required to — a court order, a subpoena, a lawful request from a public authority — and where we reasonably believe it is necessary to investigate fraud or a security incident, to enforce our Terms, or to protect the rights, property or safety of anyone. We assess every request, we do not hand over more than is asked for, and where the law allows it we tell you first. Where a request reaches data we hold for a seller, we notify the seller before responding unless the law forbids it, and we point the requester to them where we can.

In a merger, acquisition, financing, reorganisation or sale of assets, your information may transfer with the business. We will give you notice by email or a prominent notice in the product, and the buyer remains bound by this policy until they give you notice of a new one. Where we hold data as a seller’s processor, we treat such a transfer as a change of sub-processor: we notify the seller in advance and they may object under the data processing section of our Terms.

We may create and share statistics that cannot reasonably be used to identify you, from data we hold as controller only. We do not aggregate or combine a seller’s customer data with anyone else’s. We do not attempt to re-identify these statistics and we require the same of anyone we share them with.

On the last two: a person reads, edits and sends every reply. The model never contacts you and never changes anything on your account. We strip the identifiers listed in Section 5.2 from what we send it — but that stripping is pattern-based, it does not detect names, and it will not catch every address format. Assume anything you write in a ticket may reach the model.

Before your text leaves our infrastructure it passes through an automatic redaction step that removes email addresses, telephone numbers, payment identifiers and US-format street addresses. It does not detect names, and it does not recognise every address format.

Our agreements with Microsoft Azure AI Foundry and Amazon Bedrock provide that your inputs and the generated output are not used to train their models, and are not kept by them beyond returning a result and running abuse monitoring.

For every other provider we may route to — OpenRouter, which passes your request on to a model run by a further company, OpenAI and fal.ai — we cannot give you that assurance for every model.

• Studio projects — your prompts, the conversation, the generated code and parameters — stay in your account until you delete the project, and in any event no longer than 24 months after you last opened it — whichever comes first (see Section 8 for how that is enforced today).
• Generated images are stored in your account with the style prompt that produced them.
• Support conversations are stored in full — including the original, unredacted text of what you typed — so you and our team can refer back to them and so we can investigate abuse. The redaction in Section 5.2 applies to the copy we send to the AI provider, not to the copy we keep. If you have typed something into the chat you would rather we did not hold, tell us and we will remove that message.
• Look-up results. When Studio needs a real-world measurement, we cache the answer so the same question does not cost another search. The cache is keyed by a fingerprint of the request and is shared across all users: if someone else asks a materially identical question, they get the cached answer. It stores up to the first 300 characters of the request text after personal identifiers have been stripped — it holds no account, name or identifier of yours, but free text can still describe you, so do not put anything identifying or confidential in a Studio prompt. Cached entries expire after 30 days; Section 8 explains how that is enforced today.

A small number of prompts and outputs are reviewed by our staff where we are investigating a safety, abuse or quality problem, or where you ask us to look at a specific result. Access is limited to the people who need it and is logged.

The AI features generate content. They do not decide anything about you — not your pricing, not your account standing, not whether an order is accepted. Where the model declines a request, you can ask a person to review it at support@printport3d.com.

We honour these wherever you live, for the data we hold as controller. If your data reached us because you ordered from a seller’s own store, ask the seller first (Section 1): we act on their instruction and assist them, and we will tell you if we cannot act ourselves.

Access and portability

Get a copy of the personal information we hold about you, in a structured, machine-readable format.

Correction

Have inaccurate or incomplete information corrected. Most of it you can edit yourself in settings.

Deletion

Have your personal information deleted, subject to the exceptions in Section 9.4.

Objection and restriction

Object to processing we base on legitimate interests, or ask us to restrict it while a dispute is resolved.

Withdraw consent

Withdraw consent at any time where we rely on it — today that means non-essential cookies. Withdrawing does not undo processing already carried out.

Email you receive from us

We send three kinds of email. Service email — order status, security notices and policy changes — cannot be switched off while you hold an account, because it is how we perform the contract and how we tell you what is happening to your money and your prints. Setup email is about finishing the account you created: at most three messages, and none at all once you have started or if you tell us to stop. Every one carries a one-click unsubscribe that needs no login, and you can also switch it off in Settings. The weekly email is our newsletter: one message a week, and each one is a piece we have actually published — a guide to pricing, materials, selling, or the economics of a print business. Never the same piece twice; when we run out, the sequence stops. If you hold an account you are on it by default and can leave in one click; if you are on it and never held an account, it is because you or someone acting for you gave us the address, and we record where every address came from. Every message carries a one-click unsubscribe that needs no login and works from the message itself. Unsubscribing is permanent: we keep the record so that later imports cannot put you back on.

What we do not do

We do not sell or rent your address, we do not run advertising pixels in email, and we do not buy lists. An address with no recorded reason for us to hold it is never mailed.

Where to write to us

Every marketing email carries our postal address, as the law requires. It is [postal address pending].

Close your account

Ask us to close your account and delete what we are not required to keep. Either address works — the Terms use support@, this policy uses privacy@, and both reach us.

Email privacy@printport3d.com from the address on your account, telling us what you want. You do not need to use a particular form of words, and you do not need an account to make a request. Much of your information you can also correct yourself in settings.

• We will acknowledge within 10 days and respond within 45 days. If a request is complex we may take a further 45 days, and we will tell you why before we do. For people in the EEA and UK the response time is one month, extendable by two.
• A request to opt out of sale or sharing, or to limit the use of sensitive personal information, we act on within 15 business days — faster than the 45 days above, because California requires it (11 CCR §7026(f)(2)).
• We will verify your identity in proportion to the sensitivity of the request — usually by confirming control of the account email, and for a full export by also asking you one or two questions about recent account activity.
• You may use an authorised agent. We will ask for written authority signed by you, and we may still ask you to confirm directly.
• These rights are free. We will only charge, or refuse, where a request is manifestly unfounded or repetitive — and we will explain why.
• We will not discriminate against you for exercising any of them. No price change, no service reduction, no account closure.

Deletion is not always absolute. We may keep specific records where we must:

• Transaction and tax records, for the periods in Section 8. We cannot delete an invoice on request.
• Records needed for an active order until it is complete.
• Information under a legal hold, or needed to establish, exercise or defend a legal claim.
• Security and abuse records, including records of accounts we have restricted.
• Content another person has rights in, such as an order a seller must be able to evidence.

Where we keep something, we keep only what is necessary and we restrict it to that purpose. We will tell you what we have kept and why.

Because we do neither, there is nothing to opt out of. We publish Your privacy choices anyway, so that the control exists if our practices ever change, and so you can record a preference in advance.

We honour the Global Privacy Control (GPC) browser signal as a valid opt-out request. If your browser or extension sends it, we treat it as an instruction to opt out of any sale or sharing and to disable non-essential cookies, without you needing to do anything else.

We honour it wherever you live, not only in California — Colorado, Connecticut, Texas, Montana, Oregon, Delaware and New Jersey all require recognition of a universal opt-out signal, and applying it to everyone is simpler than checking who is entitled to it.

We do not respond to the older “Do Not Track” header: it has no agreed meaning and was never finished as a standard.

Sensitive personal information. One category applies to us: your account log-in credentials (§1798.140(ae)(1)(D)), which we collect so you can sign in and so we can keep your account secure. We hold them for the life of your account — the password itself is held by Firebase Authentication as a salted hash, see Section 6. We do not use or disclose them beyond authenticating you, securing the Services and preventing fraud, which are purposes §1798.121(a) and 11 CCR §7027(m) permit without a limitation right, so the right to limit does not arise. If you would like us to confirm what we hold and restrict it anyway, write to privacy@printport3d.com.

We collect no other category of sensitive personal information: no government identifiers, no financial account numbers, no precise geolocation, no biometrics, no racial or ethnic origin, religion, health, sex life or sexual orientation, and no contents of your private communications with anyone other than us.

Shine the Light. Under Cal. Civ. Code §1798.83 you may ask about disclosures to third parties for their own direct marketing. We make none.

If you live in Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Delaware, Iowa, Nebraska, New Hampshire, New Jersey, Tennessee, Minnesota, Maryland or another state with a comprehensive privacy law, you have rights to access, correct, delete and port your information, to opt out of targeted advertising, sale and profiling, and — in most of those states — to appeal a refusal. Section 9 tells you how to exercise all of them, and we apply it to everyone rather than checking which state you are in.

Two states go further and we follow them: if you live in Oregon or Minnesota you may also ask for a list of the specific third parties we have disclosed your data to, and Minnesota residents may ask us to explain the result of any profiling and to review the data behind it.

Nevada residents may direct us not to sell covered information. We do not sell it, and we will record your direction on request.