We are the operator of stlmolds.com and app.stlmolds.com, stlMolds ("stlMolds", the "Company", "we", "us", or "our"). We operate our websites at stlmolds.com and app.stlmolds.com (together with any of our associated websites, applications, and communities, collectively, the "Sites"), and provide services on these Sites, such as converting uploaded images into 3D-printable STL mold files (the "Services"). This Privacy Policy describes how we collect, store, use, and share data through our Services. We care about the protection and confidentiality of your personal data (as defined below) that you may provide when you use the Services. We process your personal data only as described in this Privacy Policy.
If you have any questions regarding this Privacy Policy, please contact us using the information listed below under Section 13, Contact Us.
1. Personal Data Collection
We collect data for various purposes to provide and improve the Services. For the purpose of this Privacy Policy, "Personal Data" means any data relating to an identified or identifiable natural person — including names, email addresses, passwords, and social account information — but excluding anonymized information. When you interact with us through the Services, we may collect data directly from you or from other sources. Our processing of your personal information will conform to applicable data privacy protection laws. The Personal Data we collect consists of, but is not limited to:
1.1 Personal Data you directly provide to us
- Account Data. Name, email address, and user credentials such as passwords and similar security information used to create an account and authenticate users of the Services. If you refuse to provide such data, you may not be able to register an account or use certain features of the Services.
- Waitlist Data. If you join our waitlist, we collect your name, email address, and — optionally — a company name or social media handle you choose to share, so we can notify you when the Services open and provision your promotional credits.
- Uploaded Content. The images (such as PNG files) you upload to generate molds, the configuration settings you apply, and the STL files the Services generate for you.
- Payment Data. When you purchase credits or a subscription, our payment processor (Stripe) collects the data necessary to process your payment, such as your payment card details and billing address. We do not store your full card number on our servers.
- Communications. Feedback, support requests, survey responses, and any other information you send us.
1.2 Personal Data we automatically collect
- Device and Network Data. IP address, browser type and version, operating system, device identifiers, and similar diagnostic data.
- Usage Data. Pages visited, features used, time and date of visits, time spent on pages, job counts and processing outcomes, and other usage statistics.
- Cookie Data. Data collected through cookies and similar technologies, as described in Section 5.
1.3 Sensitive Personal Information
We do not intentionally collect sensitive Personal Data (such as government identifiers, health data, or biometric data), and we ask that you do not upload content containing sensitive Personal Data to the Services.
2. Use of Data
We process your Personal Data on the legal bases of performing our contract with you, our legitimate business interests, your consent where required, and compliance with legal obligations. We use the data we collect to:
- Provide, operate, and maintain the Services, including converting your uploaded images into STL mold files and delivering them to your dashboard;
- Register and manage your account, and verify your identity when you sign in;
- Process payments, manage credits and subscriptions, and issue refunds of credits for failed jobs;
- Notify you about changes to the Services, your account, or your jobs;
- Respond to your questions and provide customer support;
- Send you product updates and marketing communications you have opted into, which you may unsubscribe from at any time;
- Monitor usage of the Services to detect, prevent, and address technical issues, fraud, and abuse; and
- Improve the Services, including the quality and reliability of our image tracing and mold generation pipeline.
3. Disclosure of Data
We do not sell your Personal Data. We may disclose Personal Data in the following circumstances:
- Service Providers. We share data with third-party vendors who perform services on our behalf — such as cloud hosting and compute (Amazon Web Services), payment processing (Stripe), and email delivery — only to the extent necessary for them to perform those services.
- Legal Requirements. We may disclose data if required to do so by law or in response to valid requests by public authorities, or where disclosure is necessary to protect our rights, your safety, or the safety of others.
- Business Transfers. If we are involved in a merger, acquisition, financing, reorganization, or sale of assets, your data may be transferred as part of that transaction. We will provide notice before your Personal Data becomes subject to a different privacy policy.
4. Retaining of Personal Data
We retain Personal Data only for as long as necessary for the purposes set out in this Privacy Policy. Retention periods vary by data type:
- Account Data is retained for as long as your account is active, and for a reasonable period afterward to comply with our legal obligations, resolve disputes, and enforce our agreements.
- Uploaded Content and generated files are retained so you can re-download your molds from your dashboard. You may delete individual files at any time from within the Services, and deleted files are removed from our active storage.
- Payment records are retained as required for tax, accounting, and legal compliance.
- Usage and diagnostic data is generally retained for a shorter period, except when it is needed for security investigations or legal compliance.
We may retain data longer where required by law, or where the data is reasonably necessary to protect the safety and integrity of the Services.
5. Cookies and Similar Technologies
We use cookies, local storage, and similar tracking technologies to operate and improve the Services. These technologies are used for:
- Essential purposes — signing you in, keeping your session active, remembering your mold configuration defaults, and securing the Services. These are required for the Sites to function and are always active.
- Analytics purposes — understanding how visitors use the Sites so we can improve the experience.
- Marketing purposes — measuring the effectiveness of our marketing and showing you relevant messaging.
When you first visit the Sites, you can choose which optional cookies to allow via the cookie preferences banner. You can also instruct your browser to refuse all cookies or to indicate when a cookie is being sent; however, if you do not accept essential cookies, you may not be able to use some portions of our Services, such as signing in.
6. Security of Data
The security of your data is important to us. We implement technical and organizational safeguards designed to protect your Personal Data against unauthorized access, alteration, disclosure, or destruction — including encryption in transit, scoped access controls, and isolation of our processing infrastructure. Remember, however, that no method of transmission over the Internet or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your Personal Data, we cannot guarantee its absolute security. If a breach affecting your Personal Data occurs, we will notify you and the relevant authorities as required by applicable law.
7. Privacy Rights & Removal of Data
Depending on where you live, you may have some or all of the following rights with respect to your Personal Data:
- The right to access the Personal Data we hold about you;
- The right to rectify inaccurate or incomplete data;
- The right to delete your Personal Data;
- The right to data portability — receiving your data in a structured, commonly used, machine-readable format;
- The right to restrict or object to certain processing of your data;
- The right to withdraw consent at any time where processing is based on consent; and
- The right to lodge a complaint with a data protection authority.
To exercise any of these rights, contact us at the address in Section 13. You may also delete your uploaded files directly from your dashboard, or request that we close your account and delete the Personal Data associated with it. We may retain certain data where required for legal compliance, dispute resolution, or enforcement of our agreements.
8. Additional U.S. State Disclosures
Certain U.S. state privacy laws require additional disclosures. In the preceding twelve months, we have collected the categories of Personal Data described in Section 1: identifiers (such as name and email address), commercial information (such as purchase records), internet or other network activity (such as usage data), and approximate geolocation inferred from IP address.
We collect this information for the business purposes described in Section 2, and disclose it only to the service providers described in Section 3. We do not "sell" or "share" Personal Data as those terms are defined under applicable state laws, and we do not use or disclose sensitive personal information for purposes requiring an opt-out right. We do not knowingly collect or sell the Personal Data of minors. You have the right not to receive discriminatory treatment for exercising your privacy rights.
9. Service Providers
We may employ third-party companies and individuals to facilitate our Services, to provide the Services on our behalf, to perform Service-related tasks, or to assist us in analyzing how our Services are used. These third parties have access to your Personal Data only to perform these tasks on our behalf and are obligated not to disclose or use it for any other purpose.
10. Links to Other Sites
Our Services may contain links to other sites that are not operated by us. If you click a third-party link, you will be directed to that third party's site. We strongly advise you to review the privacy policy of every site you visit. We have no control over, and assume no responsibility for, the content, privacy policies, or practices of any third-party sites or services.
11. Children's Privacy
Our Services are not directed to anyone under the age of 13, and we do not knowingly collect Personal Data from children under 13. If you are a parent or guardian and you become aware that your child has provided us with Personal Data, please contact us immediately. If we become aware that we have collected Personal Data from a child without verification of parental consent, we will take steps to remove that information from our servers.
12. Privacy Policy Changes
We may update this Privacy Policy from time to time. We will notify you of changes by posting the new Privacy Policy on this page and updating the "Last updated" date at the top. For material changes, we may also notify you by email or through a prominent notice on the Services. Changes are effective when they are posted on this page, and your continued use of the Services after changes are posted constitutes your acceptance of the revised policy.
13. Contact Us
If you have any questions about this Privacy Policy, or wish to exercise any of your privacy rights, contact us at support@stlmolds.com.