1. Overview
Partsflow ("we," "us," "our") is a contract 3D printing service based in Los Angeles, CA. This Privacy Policy explains how we collect, use, and protect information when you use our website and services.
We collect only what we need to fulfill your orders and communicate with you. We do not sell your personal data. Ever.
2. Data We Collect
Information you provide directly
- Account information: name, email address, phone number (optional)
- Order information: shipping address, company name, order specifications
- 3D model files: STL, STEP, OBJ, or 3MF files you upload for printing
- Payment information: processed by Stripe — we never see or store your card number
- Communications: messages you send us via the contact form or email
Information collected automatically
- Usage data: pages visited, features used, time on site
- Device data: browser type, operating system, screen resolution
- IP address: used for fraud prevention and approximate geolocation
- Cookies: see Section 5
Information from third parties
- Stripe: payment confirmation status and billing zip code (for tax calculation)
- Shipping carrier: delivery confirmation and tracking events
3. How We Use Your Data
| Purpose | Legal Basis |
|---|---|
| Process and fulfill your orders | Contract performance |
| Send order confirmations and status updates | Contract performance |
| Calculate and collect applicable sales tax | Legal obligation |
| Respond to inquiries and support requests | Legitimate interest |
| Detect and prevent fraud | Legitimate interest |
| Improve our website and calculator | Legitimate interest |
| Send marketing emails (if opted in) | Consent (opt-in only) |
We do not use your data for automated decision-making that produces legal or significant effects.
4. Sharing & Third Parties
We share data only with service providers that help us operate our business, and only as necessary:
| Provider | Purpose | Data Shared |
|---|---|---|
| Stripe, Inc. | Payment processing | Name, email, order amount, billing address |
| Shipping carrier | Shipping & delivery | Name, shipping address, package details |
| Resend | Transactional email | Name, email, order details |
| Vercel | Website hosting | Standard web request logs |
| Supabase | Database | All order and customer data (encrypted at rest) |
| Cloudflare R2 | File storage | Uploaded 3D model files |
We do not sell, rent, or trade your personal information to any third party for their own marketing purposes. We may disclose information if required by law, court order, or to protect our legal rights.
5. Cookies & Analytics
Essential cookies
We use session cookies to keep you logged in and remember your calculator configuration. These are strictly necessary for the website to function and cannot be disabled.
Analytics
We use privacy-focused analytics to understand how visitors use our site (which pages are viewed, where users drop off in the calculator). This data is aggregated and anonymized — we do not track individual users across sites.
No advertising cookies
We do not use advertising cookies, retargeting pixels, or ad tracking. We do not serve ads on this site.
You can control cookies through your browser settings. Disabling cookies may affect certain functionality such as the quote calculator.
6. Data Retention
| Data Type | Retention Period |
|---|---|
| 3D model files | 90 days after order completion, then deleted |
| Order records | 7 years (required for tax records) |
| Customer account data | Until account deletion is requested |
| Payment records | 7 years (financial record keeping) |
| Contact form messages | 2 years |
| Analytics data | 13 months (rolling) |
7. Security
We implement appropriate technical and organizational measures to protect your data:
- All data transmitted via TLS/HTTPS encryption
- Database encrypted at rest (AES-256)
- File storage with private access controls — files are not publicly accessible
- Payment data handled entirely by PCI-DSS compliant Stripe — we never touch card numbers
- Admin access requires multi-factor authentication
- Regular security reviews
No system is 100% secure. If you discover a security vulnerability, please report it responsibly to orders@partsflow.tech.
8. Your Rights
You have the right to:
- Access: request a copy of the personal data we hold about you
- Correction: request correction of inaccurate data
- Deletion: request deletion of your data (subject to legal retention requirements)
- Portability: receive your order data in a machine-readable format
- Opt-out: unsubscribe from marketing emails at any time via the link in any email
- Withdraw consent: withdraw consent for data processing where consent is the legal basis
To exercise any of these rights, email orders@partsflow.tech with the subject line "Privacy Request." We will respond within 30 days.
9. California Residents (CCPA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):
- Right to Know: request disclosure of categories and specific pieces of personal information we have collected about you in the past 12 months
- Right to Delete: request deletion of personal information we have collected from you
- Right to Opt-Out of Sale: we do not sell personal information, so this right is not applicable
- Right to Non-Discrimination: we will not discriminate against you for exercising your CCPA rights
To submit a CCPA request, email orders@partsflow.tech with subject "CCPA Request." We will verify your identity before processing the request.
10. Children's Privacy
Our services are not directed to children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us immediately and we will delete it.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the "Last updated" date. For significant changes, we will send an email notification to customers with active accounts.
12. Contact
For privacy questions, data requests, or to report a concern: