Privacy Policy — Print Studio 3D

1. Controller

Print Studio 3D — Lou Ferber,
7, Op der Lou,
L-4946 Bascharage, Luxembourg
— is the data controller for personal data processed through this website and Service. Contact: privacy@3dtoprint.shop.

2. What we collect

Account data: name, email, hashed password (or OAuth identifier).
Order data: uploaded 3D models, configuration, shipping address, order history.
Payment data: handled by our payment processor (Stripe); we do not store card numbers.
Technical data: IP address, browser/device metadata, and short-lived cookies required for authentication.

3. Legal bases

We process account and order data to perform our contract with you (Art. 6(1)(b) GDPR). We process technical data for our legitimate interest in operating a secure Service (Art. 6(1)(f) GDPR). Optional analytics or marketing cookies, if any, run only after your consent.

4. Uploaded 3D files

Your models are stored privately in an access-controlled bucket. Only you and the production staff assigned to your order can access them. Files are kept for as long as needed to fulfil the order and for a reasonable period afterwards for warranty, dispute, and tax record purposes (typically 10 years for accounting records in Luxembourg), then deleted.

5. Sharing

We share personal data only with processors necessary to run the Service: hosting (Cloudflare / Lovable Cloud), database (Supabase), payments (Stripe), email (transactional provider), and shipping carriers. Each processor is bound by a Data Processing Agreement.

6. AI model generation (Meshy)

If you use the image-to-model generator, the image or text prompt you submit is sent to Meshy Inc. (meshy.ai), a third-party AI provider, in order to produce a 3D mesh. Only the prompt or image and the generated mesh are transmitted — no account, payment, or shipping data. Do not upload images containing other people's personal data or third-party intellectual property. Generated meshes are stored with your order under section 4. This feature is optional; ordinary STL uploads never reach Meshy.

7. International transfers

Some processors are located outside the EEA. Where that is the case, transfers rely on the European Commission's Standard Contractual Clauses.

8. Your rights (GDPR)

You have the right to access, rectify, erase, restrict, or object to the processing of your personal data, and to data portability. You can also lodge a complaint with the Luxembourg data protection authority (CNPD). Contact privacy@3dtoprint.shop to exercise a right.

9. Cookies and analytics

We use strictly-necessary cookies and browser storage for authentication, your cart, and fraud prevention. We do not run advertising trackers or third-party analytics profiles. Aggregated, non-identifying request statistics from our hosting platform are used to keep the site fast and available. If we ever introduce non-essential cookies, they will only run after your prior consent.

10. Security

We use TLS in transit, private storage buckets, row-level security in the database, and standard operational safeguards. No system is perfectly secure; we notify affected users of any breach as required by law.

11. Changes

We may update this policy from time to time. Material changes will be communicated to registered users by email.