Privacy Policy

1. Introduction

PrintPort3D ("we," "us," or "our") is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website printport3d.com, use our mobile applications, or utilize our 3D printing fulfillment services (collectively, the "Services").

This Privacy Policy applies to all users of our Services, including but not limited to visitors, registered users, sellers, buyers, and any other individuals who access or interact with our platform.

By accessing or using our Services, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access or use our Services.

We reserve the right to modify this Privacy Policy at any time. We will notify you of any material changes by posting the updated Privacy Policy on this page and updating the "Last Updated" date. Your continued use of our Services after any such changes constitutes your acceptance of the new Privacy Policy.

2. Information We Collect

2.1 Information You Provide Directly

We collect information that you voluntarily provide to us when you:

• Create an Account: Name, email address, password, and profile information.
• Update Your Settings: If you choose to provide additional information in your account settings, we may collect business name, business address, contact information, and payout details. This information is entirely optional and only collected when you manually enter it.
• Make Purchases: Billing address, shipping address, payment card information (processed by our third-party payment processor, Stripe), and order history.
• Upload Content: 3D model files (STL, OBJ, 3MF, STEP, and other formats), product descriptions, images, pricing information, and other content you submit.
• Communicate With Us: Messages, support tickets, feedback, reviews, and any other communications you send to us.
• Participate in Surveys or Promotions: Responses to surveys, contest entries, and promotional participation data.
• Connect Third-Party Accounts: Information from connected platforms such as Shopify, Etsy, Amazon, eBay, and other marketplace integrations via Shippo or direct API connections.

2.2 Information Collected Automatically

When you access our Services, we automatically collect certain information, including:

• Device Information: Device type, operating system, unique device identifiers, browser type and version, screen resolution, and device settings.
• Log Data: IP address, access times, pages viewed, links clicked, referring URL, and actions taken on our Services.
• Location Information: General location based on IP address, and precise location if you grant permission through your device settings.
• Usage Information: Features used, time spent on pages, search queries, upload/download activity, and interaction patterns.
• Cookies and Similar Technologies: Information collected through cookies, pixel tags, web beacons, and similar tracking technologies (see Section 7 for details).

2.3 Information From Third Parties

We may receive information about you from third parties, including:

• Payment Processors: Transaction information, payment verification data, and fraud prevention information from Stripe.
• Shipping Partners: Shipping rates, tracking information, delivery confirmation, and address verification from Shippo and carriers (USPS, UPS, FedEx, DHL).
• Connected Marketplaces: Order information, customer data, and product listings from connected platforms (Shopify, Etsy, Amazon, eBay, WooCommerce, TikTok Shop, etc.).
• Identity Verification Services: Verification results and fraud scores from identity verification providers.
• Analytics Providers: Aggregated usage data and analytics from services like Google Analytics.
• Social Media Platforms: If you choose to link or sign in using social media accounts, we may receive profile information from those platforms.

2.4 Sensitive Information

We do not intentionally collect sensitive personal information such as racial or ethnic origin, political opinions, religious beliefs, genetic data, biometric data, health information, or sexual orientation. If you believe we have inadvertently collected such information, please contact us immediately at privacy@printport3d.com.

2.5 Children's Information

Our Services are not directed to children under the age of 16 (or 13 in the United States where COPPA applies). We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at privacy@printport3d.com, and we will take steps to delete such information.

3. How We Use Your Information

We use the information we collect for the following purposes:

3.1 Providing and Improving Our Services

• Process and fulfill orders, including 3D printing, quality control, packaging, and shipping.
• Create and manage your account.
• Process payments and issue refunds.
• Provide customer support and respond to inquiries.
• Calculate and display pricing, costs, and profit margins.
• Analyze 3D model files to determine print parameters and costs.
• Sync orders and products with connected marketplace integrations.
• Improve, personalize, and optimize our Services.
• Develop new features, products, and services.

3.2 Communications

• Send transactional emails (order confirmations, shipping updates, account notifications).
• Send marketing communications (with your consent where required).
• Respond to your comments, questions, and requests.
• Send administrative messages about changes to our Services or policies.

3.3 Safety and Security

• Detect, prevent, and address fraud, unauthorized access, and other illegal activities.
• Verify user identity and prevent account abuse.
• Enforce our Terms of Service and other policies.
• Protect the rights, property, and safety of PrintPort3D, our users, and the public.
• Monitor and analyze trends, usage, and activities.

3.4 Legal Compliance

• Comply with applicable laws, regulations, and legal processes.
• Respond to lawful requests from public authorities, including law enforcement.
• Fulfill tax reporting obligations (e.g., issuing 1099 forms to sellers).
• Establish, exercise, or defend legal claims.

3.5 Business Operations

• Conduct internal research and analytics.
• Facilitate business transfers, mergers, or acquisitions.
• Maintain records for auditing and compliance purposes.

4. Legal Basis for Processing (EEA/UK Users)

If you are located in the European Economic Area (EEA) or United Kingdom (UK), we process your personal data based on the following legal grounds:

• Contract Performance: Processing necessary to fulfill our contract with you (e.g., processing orders, managing your account).
• Legitimate Interests: Processing for our legitimate business interests, such as fraud prevention, security, analytics, and marketing (where it does not override your rights).
• Consent: Processing based on your explicit consent (e.g., marketing emails, cookies). You may withdraw consent at any time.
• Legal Obligation: Processing necessary to comply with legal requirements.
• Vital Interests: Processing necessary to protect someone's life.

5. How We Share Your Information

We may share your information in the following circumstances:

5.1 Service Providers

We share information with third-party service providers who perform services on our behalf, including:

• Payment Processing: Stripe, Inc. processes all payment transactions. Their privacy policy is available at stripe.com/privacy.
• Shipping and Logistics: Shippo, Inc. and shipping carriers (USPS, UPS, FedEx, DHL) receive shipping information to fulfill orders.
• Cloud Infrastructure: We use cloud hosting providers (e.g., Vercel, Google Cloud, Amazon Web Services) to host and operate our Services.
• Analytics: We use analytics providers (e.g., Google Analytics) to understand how users interact with our Services.
• Customer Support: We may use third-party tools to manage customer support communications.
• Email Services: We use email service providers to send transactional and marketing emails.

5.2 Marketplace Integrations

When you connect your account to third-party marketplaces (Shopify, Etsy, Amazon, etc.), we share and receive information necessary to sync orders, products, and fulfillment status. Each marketplace has its own privacy policy governing their use of data.

5.3 Business Transactions

If PrintPort3D is involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, your information may be transferred as part of that transaction. We will notify you via email and/or prominent notice on our Services of any change in ownership or uses of your personal information.

5.4 Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., court orders, subpoenas, government agencies). We may also disclose information when we believe disclosure is necessary to:

• Comply with applicable laws, regulations, or legal processes.
• Protect and defend the rights, property, or safety of PrintPort3D, our users, or the public.
• Detect, prevent, or address fraud, security, or technical issues.
• Enforce our agreements and policies.

5.5 With Your Consent

We may share your information with third parties when you have given us explicit consent to do so.

5.6 Aggregated or De-identified Data

We may share aggregated or de-identified information that cannot reasonably be used to identify you for any purpose, including research, analytics, and marketing.

6. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes for which it was collected, including:

• Account Information: Retained while your account is active and for 7 years after account closure for legal and business purposes.
• Transaction Records: Retained for 7 years to comply with tax, legal, and regulatory requirements.
• 3D Model Files: Retained while associated products are active. Deleted within 90 days of product removal unless required for dispute resolution.
• Communication Records: Support tickets and correspondence retained for 3 years after resolution.
• Log Data: Typically retained for 12 months, unless required for security or legal purposes.
• Marketing Preferences: Retained until you opt out or request deletion.

When retention periods expire, we securely delete or anonymize your information. Some information may be retained in backup systems for a limited period.

7. Cookies and Tracking Technologies

7.1 What Are Cookies?

Cookies are small text files placed on your device when you visit a website. They help websites recognize your device and remember information about your visit.

7.2 Types of Cookies We Use

• Essential Cookies: Required for the website to function properly (authentication, security, shopping cart). Cannot be disabled.
• Performance/Analytics Cookies: Help us understand how visitors interact with our website (page views, traffic sources, user behavior).
• Functionality Cookies: Remember your preferences and settings (language, region, display options).
• Marketing/Advertising Cookies: Used to deliver relevant advertisements and track ad campaign performance.

7.3 Third-Party Cookies

We use cookies from the following third parties:

• Google Analytics: For website analytics and performance monitoring.
• Stripe: For secure payment processing and fraud prevention.
• Firebase: For authentication and real-time database functionality.

7.4 Managing Cookies

You can control cookies through your browser settings. Most browsers allow you to:

• View what cookies are stored on your device.
• Delete all or specific cookies.
• Block all cookies or third-party cookies.
• Set preferences for certain websites.

Note that disabling certain cookies may affect the functionality of our Services.

7.5 Do Not Track

Some browsers offer a "Do Not Track" (DNT) setting. There is currently no industry standard for how websites should respond to DNT signals. We do not currently respond to DNT signals, but you can manage your cookie preferences as described above.

8. Your Privacy Rights

Depending on your location, you may have certain rights regarding your personal information:

8.1 Rights for All Users

• Access: Request a copy of the personal information we hold about you.
• Correction: Request correction of inaccurate or incomplete information.
• Deletion: Request deletion of your personal information, subject to certain exceptions.
• Opt-Out: Opt out of marketing communications at any time.
• Account Closure: Close your account by contacting us at privacy@printport3d.com.

8.2 Additional Rights for EEA/UK Residents (GDPR)

• Portability: Receive your data in a structured, commonly used, machine-readable format.
• Restriction: Request restriction of processing in certain circumstances.
• Objection: Object to processing based on legitimate interests.
• Withdraw Consent: Withdraw consent at any time where processing is based on consent.
• Lodge Complaint: Lodge a complaint with your local data protection authority.

8.3 Additional Rights for California Residents (CCPA/CPRA)

California residents have the following additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

• Right to Know: Request disclosure of the categories and specific pieces of personal information we have collected, the sources, purposes, and third parties with whom we share it.
• Right to Delete: Request deletion of your personal information, subject to certain exceptions.
• Right to Correct: Request correction of inaccurate personal information.
• Right to Opt-Out of Sale/Sharing: We do not sell personal information in the traditional sense. However, some data sharing for advertising purposes may constitute a "sale" under CCPA. You may opt out by contacting us.
• Right to Limit Use of Sensitive Personal Information: Limit the use of sensitive personal information to purposes necessary to provide our Services.
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.

California "Shine the Light" Law: California Civil Code Section 1798.83 permits California residents to request information about our disclosure of personal information to third parties for their direct marketing purposes. We do not share personal information with third parties for their own marketing purposes.

8.4 Additional Rights for Other U.S. State Residents

Residents of Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Utah (UCPA), and other states with comprehensive privacy laws may have similar rights to access, correct, delete, and opt out of certain processing. Please contact us at privacy@printport3d.com to exercise your rights.

8.5 How to Exercise Your Rights

To exercise any of your privacy rights, please contact us at:

• Email: privacy@printport3d.com
• General Support: support@printport3d.com

We will verify your identity before processing your request and respond within the timeframes required by applicable law (typically 30-45 days). You may also designate an authorized agent to make requests on your behalf.

9. International Data Transfers

PrintPort3D is based in the United States. If you access our Services from outside the United States, your information will be transferred to, stored, and processed in the United States and potentially other countries where our service providers operate.

For transfers from the EEA, UK, or Switzerland, we rely on:

• Standard Contractual Clauses (SCCs): EU-approved contractual terms that provide appropriate safeguards for data transfers.
• Data Privacy Framework: Where applicable, transfers to certified organizations under the EU-U.S. Data Privacy Framework.
• Consent: Your explicit consent to the transfer where appropriate.

By using our Services, you acknowledge and consent to the transfer of your information to the United States and other jurisdictions as described in this Privacy Policy.

10. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption: Data in transit is encrypted using TLS/SSL. Sensitive data at rest is encrypted using AES-256 encryption.
• Access Controls: Access to personal information is restricted to authorized personnel who need it to perform their job functions.
• Authentication: We use secure authentication mechanisms, including password hashing and optional two-factor authentication.
• Monitoring: We monitor our systems for potential vulnerabilities and attacks.
• Vendor Security: We require our service providers to maintain appropriate security measures.
• Incident Response: We have procedures in place to detect, respond to, and recover from security incidents.

While we strive to protect your personal information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

Data Breach Notification: In the event of a data breach that affects your personal information, we will notify you and relevant authorities as required by applicable law.

11. Third-Party Links and Services

Our Services may contain links to third-party websites, applications, or services that are not operated by us. This Privacy Policy does not apply to those third-party services. We encourage you to review the privacy policies of any third-party services you access through our platform.

We are not responsible for the privacy practices of third-party websites or services, even if linked from our Services or integrated with our platform.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:

• Update the "Last Updated" date at the top of this Privacy Policy.
• Provide notice through our Services or by email for significant changes.
• Where required by law, obtain your consent to the changes.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:

For EEA/UK residents, you also have the right to lodge a complaint with your local data protection authority if you believe we have not addressed your concerns adequately.

14. Additional Disclosures

14.1 Categories of Personal Information Collected (Last 12 Months)

For California residents, we disclose the following categories of personal information collected:

• Identifiers (name, email, address, IP address, account ID)
• Customer records (billing information, purchase history)
• Commercial information (products purchased, transaction history)
• Internet or network activity (browsing history, search history, interactions)
• Geolocation data (general location based on IP address)
• Professional or employment information (for seller accounts)
• Inferences drawn from the above (preferences, characteristics, behavior)

14.2 Sources of Personal Information

• Directly from you
• Automatically through your use of our Services
• From third-party services you connect
• From service providers and business partners

14.3 Business Purposes for Collection

We collect personal information for the business and commercial purposes described in Section 3 of this Privacy Policy.

14.4 Disclosure of Personal Information

We may disclose personal information to service providers for business purposes as described in Section 5. We do not sell personal information for monetary consideration. Some sharing of information for targeted advertising purposes may constitute a "sale" or "sharing" under certain state laws; you may opt out by contacting us.

14.5 Retention Periods

We retain personal information as described in Section 6 of this Privacy Policy.