Privacy Policy
Effective date: __ EFFECTIVE_DATE __
Template notice: Have a privacy attorney or auto-generated service (Termly, iubenda) verify this matches your actual data handling before going live.
1. Who we are
Cloud Forge is operated by __ COMPANY LEGAL NAME __ ("we"), __ ADDRESS __. For privacy questions email privacy@cloudforge3d.com.
2. What we collect
You give us directly
- Account info: email address, display name (if you sign up for an account)
- Order info: shipping address, billing address, name, email, phone (optional)
- Designs: the 3D models you create or upload
- Support correspondence: messages you send us
Collected automatically
- Device & usage: browser type, operating system, IP address, pages visited
- Cookies: see Section 6
From our partners
- Stripe — payment confirmation status (we do not receive your full card number)
- Craftcloud / manufacturing partner — order fulfillment status, tracking number
3. How we use it
- To process and ship your orders
- To send order confirmations, shipping notifications, and receipts
- To respond to support requests
- To improve the editor and prevent fraud
- To comply with our legal obligations
4. Who we share it with
We share the minimum data necessary with:
- Stripe — for payment processing
- Craftcloud or other manufacturing partner — for printing and shipping (they receive your shipping address + the design file)
- Netlify — hosting and content delivery
- Google Firebase — authentication and design storage (if you create an account)
- Government or law enforcement — only if compelled by valid legal process
We do not sell your personal information. We do not share it for third-party marketing.
5. Where we store it
Data is stored on servers operated by our hosting partners (currently Netlify and Google, primarily in the United States). If you are in the EU/UK, your data may be transferred to and stored in the United States under Standard Contractual Clauses or other lawful transfer mechanisms.
6. Cookies & similar technologies
We use a small number of cookies:
- Essential: session, security, payment-flow continuity. Cannot be disabled.
- Functional: remembering your theme preference and other settings.
- Analytics (if enabled): anonymized usage to improve the product. EU/UK visitors are asked to opt in.
7. Your rights
Depending on your jurisdiction, you have the right to:
- Access the personal data we hold about you
- Correct or update it
- Delete it (subject to our retention obligations)
- Restrict or object to certain processing
- Portability — receive your data in a portable format
- Withdraw consent (where consent is the legal basis)
- Lodge a complaint with your local data protection authority
To exercise any right, email privacy@cloudforge3d.com. We respond within 30 days.
8. Retention
We keep order records for 7 years to comply with tax and accounting laws. Account data is kept while your account is active and for 90 days after deletion. Designs you delete are removed within 30 days.
9. Children's privacy
Cloud Forge is not directed to children under 13. We do not knowingly collect personal data from children under 13. If you believe we have collected data from a child under 13, contact us and we will delete it.
10. California (CCPA/CPRA)
California residents have additional rights including the right to know what we collect, the right to delete, and the right to opt out of "sale" or "sharing" (we don't sell or share for cross-context advertising). Submit requests to privacy@cloudforge3d.com.
11. EU/UK residents (GDPR)
The legal bases we rely on are (a) contract (to process your orders), (b) legitimate interests (to improve the Service, prevent fraud), (c) consent (analytics cookies, marketing emails), and (d) legal obligation (tax records). Our EU representative for GDPR purposes is __ REP NAME & ADDRESS __.
12. Security
We use TLS in transit and at rest where supported by our processors. Payment card data never touches our servers (Stripe handles it directly). No internet service is 100% secure; we make commercially reasonable efforts.
13. Changes
If we materially change this Policy we will notify you via email or in-product banner at least 7 days before the change takes effect.