Privacy Policy

Last updated: September 10, 2026

1. Data Controller

The data controller for 3DForge is:

2. Information We Collect

2.1 Information You Provide Directly

  • Account information: Email address, name, display name (encrypted password storage)
  • Payment information: Transaction amount, payment status. Full card data is handled by Waffo Pancake — we never store your card number or CVV
  • Uploaded photographs: Product images you submit for 3D model generation
  • Communication records: Emails, support tickets, feedback you send to our team

2.2 Information We Collect Automatically

  • Device & network: IP address, device model, operating system, browser type, timezone
  • Usage behavior: Page visits, feature usage, session duration, operation logs
  • API logs: Request timestamps, error logs, performance data

3. How We Use Your Information

Purpose Legal Basis
Providing and maintaining serviceContract performance
Billing and payment processingContract performance
Customer supportContract performance / Legitimate interest
Service notifications (billing, security, policy updates)Legitimate interest
Security and fraud preventionLegitimate interest
Product optimization and analyticsLegitimate interest
Legal complianceLegal obligation
Marketing communications (with consent)User consent

4. Cookies and Tracking

Type Purpose Can be disabled
Strictly necessaryLogin maintenance, core functionalityNo
FunctionalLanguage preferences, personalizationYes
AnalyticsAnonymous usage statistics, product optimizationYes
Marketing (optional)Targeted advertising and performance measurementYes

You can adjust your cookie preferences through your browser settings or our cookie management center.

5. Data Sharing and Disclosure

We do not sell your personal information, including as defined under applicable laws such as CCPA. We only share your information in the following circumstances:

  • Service providers: Cloud computing, payment processing (Waffo Pancake), customer support, and analytics vendors — all bound by confidentiality agreements. Payment card data is exclusively handled by Waffo Pancake (PCI-DSS compliant) and is never stored on our servers.
  • Legal requirements: When required by law, court order, or legitimate government request
  • Business transfers: In the event of a merger, acquisition, or sale of assets, with advance notice and continued protection obligations
  • With your consent: For any other purpose, only with your explicit prior consent

6. Data Security

  • Transmission encryption: TLS/HTTPS
  • Storage encryption: Passwords and sensitive data are encrypted or hashed
  • Access controls: Least-privilege principle; employees sign confidentiality agreements
  • Regular security audits: Periodic vulnerability scanning and security reviews

In the event of a security incident affecting your rights, we will notify you and relevant authorities within 72 hours of discovery, as required by applicable law.

7. Data Retention

Data Type Retention Period Action on Expiry
Account informationActive period + 90 days after deletionSecure deletion or anonymization
Transaction recordsAs required by law (typically 7 years)Secure deletion or archival
Customer support records3 yearsSecure deletion
Security audit logs12 monthsSecure deletion
Generated 3D models90 days after account deletionAutomatic deletion

8. Your Data Rights

To exercise any of these rights, contact us at privacy@3dforge.com. We will respond within 30 calendar days.

Right Description
Right to accessObtain a copy of your personal data
Right to rectificationCorrect inaccurate or incomplete data
Right to erasureRequest deletion of your data under certain conditions
Right to restrict processingRequest suspension of data processing under certain conditions
Right to data portabilityReceive your data in a machine-readable format
Right to objectObject to processing based on legitimate interests or marketing
Right to withdraw consentWithdraw consent for processing that requires it

If you believe we have not adequately handled your data, you have the right to lodge a complaint with your local data protection authority.

9. Marketing Communications

With your consent, we may send you marketing communications about our products and services. You can unsubscribe at any time by clicking the "unsubscribe" link in any email, adjusting your account settings, or contacting us. Opting out does not affect service-related notifications such as billing, security alerts, or policy updates.

10. International Data Transfers

Our servers and partners may be located in various regions including Singapore and the United States. When data is transferred internationally, we ensure adequate protection through:

  • Data processing agreements incorporating Standard Contractual Clauses (SCCs) where applicable
  • Transfers only to recipients providing equivalent protection levels
  • Other mechanisms as required by applicable data protection law

11. Children's Privacy

3DForge is intended for users who are at least 18 years old. We do not knowingly collect personal information from individuals below this age. If you believe a child has provided us with personal data, please contact us immediately at privacy@3dforge.com and we will promptly delete such data.

12. Third-Party Links

Our service may contain links to third-party websites or integrate with third-party services. This Privacy Policy applies only to data we collect directly. We are not responsible for the data practices of third parties — we recommend reviewing their privacy policies before engaging with them.

13. Policy Changes

If we make material changes to this Privacy Policy, we will notify you at least 15 days in advance via email or platform notice, and update the "Last updated" date at the top of this page. Your continued use of the service after the effective date constitutes acceptance of the updated policy.

14. Contact Us