Privacy Policy

Last updated: 15 October 2026

This policy explains how Threeprinted handles personal information. It covers the Threeprinted website and the services offered through it. We operate in Canada and the United States, and we handle personal information in line with Canadian privacy law (PIPEDA) and applicable state privacy law.

Information we collect

Information you give us

• Account: name, email address, username, password (stored only as a hash by our authentication provider), and optionally a profile image and phone number.
• Age: your date of birth, and the country and province or state you live in, asked once when you sign up or at your first sign-in. We use them to check the minimum age and whether you are an adult where you live, which decides what your account can do and whether items rated adults only are shown to you. Your date of birth is not shown to sellers or other users, and it is deleted when you close your account.
• Addresses: the shipping and billing addresses you save, including recipient name, street address, city, postal code, country, and a contact phone number and email for delivery.
• Listings and uploads (sellers): 3D model files, images, video, descriptions and pricing.
• Print requests: what you ask makers to make (the description, sizes, quantity, the date you need it by and the region it ships to), any model file and reference photos you attach, and the confirmation that you have the right to have it printed. If you are a maker, the quotes you send.
• Proof photos (makers): photos of a finished item, added to its order before shipping. An order made from a print request needs at least one.
• Support: messages, attachments and ticket history when you contact us or use chat, including chat started before you sign in.
• Posts (makers): the words and pictures you post for your followers or your members. A post for followers can be read by anyone on your store page; a post for members only by members whose tier includes it. The pictures are stored privately and shown through short-lived links to people allowed to read the post, and are deleted when you take the post down or close your account.
• Seller onboarding: identity and banking details you provide to Stripe. These go to Stripe directly; we receive an account reference and status, not your bank details.

Information we generate

• Orders: what you bought, order status, shipping and tracking, and references to the payment held by Stripe.
• Memberships: the memberships you join — the seller, the tier, the price, when you agreed to the monthly renewal, and each payment, refund and dispute — with references to the subscription Stripe holds. A seller sees how many members they have and what they earn from them, never who.
• Verification: whether your email and phone are verified, and when.
• Technical: log data, IP address, device and browser information, and aggregate page analytics.
• Notifications: your web-push subscription, if you enable browser notifications.
• Saved items and follows: the items you save, the lists you group them into, and the makers you follow, so we can show them back to you and tell you when a maker you follow publishes something. A maker sees how many people follow them and how often their items are saved, never who. Both are deleted when you close your account.
• Item views: when you open a listing, bundle or file, we count a view of it for its maker, once a day at most. To count you once without remembering you, we scramble your IP address and browser details together with a random value that changes every day, keep only the scrambled result, and delete both the following day. No cookie is set, signed in or not, and a maker sees how many views an item had, never who looked.

What we never see

Card numbers. Payment details are entered directly with Stripe and never reach our servers or database. We store only Stripe’s references to a customer and a payment.

Why we use it

• To create and secure your account, and to verify your email and phone.
• To take payment, produce and ship orders, run memberships, and handle refunds and disputes.
• To calculate shipping rates and buy shipping labels.
• To send transactional messages: confirmations, shipping updates, security notices.
• To provide support and resolve problems.
• To detect fraud and abuse, and to enforce our Terms.
• To understand aggregate usage and improve the service.
• To meet legal, tax and accounting obligations.

Marketing messages, email and SMS

Transactional messages — order confirmations, shipping updates, password resets — are part of the service and are sent when you have an active account or order. When you join a membership we email you its terms, and once a year we remind you that it renews; both are sent whatever your email settings, because they record what you agreed to.

Marketing messages are separate and require your consent. If you are in Canada, we send commercial electronic messages only in line with CASL. Every marketing email includes an unsubscribe link and our mailing address, and you can withdraw consent at any time without affecting transactional messages you still need to receive. SMS, where used, is opt-in and you can reply STOP to end it.

Who we share it with

We do not sell personal information. We share it with the service providers we need in order to run the Platform, listed in full with what each one receives on our Sub-processors page. In summary: Stripe (payments and payouts), Supabase (database, authentication and file storage), Resend (email), Twilio (SMS), ShipEngine and its carriers (shipping rates and labels), and Vercel (hosting and analytics).

We also share:

• Between buyer and seller: a seller receives what they need to fulfil an order — the shipping address, recipient name and contact details, and the order contents. Buyers see a seller’s public store profile.
• Publicly, where you have published it. Some uploads are served from public web addresses so that the marketplace can be browsed without an account: your profile photo, listing images and videos, the picture shown for a 3D file, printer photos, store banners, category artwork the photos you add to a review, and makers’ photos of prints of their files. Anyone holding the address can open these without signing in, and search engines may index them. A review’s photos are shown once our team approves the review, and we may take a photo down on its own. Your 3D model files and support-ticket attachments are not public — they are stored privately and released only through short-lived links to people entitled to them.
• Print requests, with makers. A print request is meant to be seen: once our staff release it, every approved maker can read it and download its model file and photos to prepare a quote. Makers see your username and the region it ships to, never your name or address, and the files under generic names. After it closes, only you, the maker whose quote you accepted and our staff can see it. A file you bought here and chose in a request is never shown to makers who quote; only the maker you choose receives it, through your order. Proof photos are seen by the buyer, the maker and our staff.
• Lists you share. A list of saved items you share by link can be seen by anyone, with its name and your username, and search engines may index it, until you stop sharing it. Lists you do not share are private.
• Where the law requires it, or to establish, exercise or defend legal claims, or to protect the rights and safety of users.
• In a business transfer, such as a merger or sale of assets, subject to this policy continuing to apply.

Where your information is held

Our providers operate primarily in the United States, so personal information is stored and processed there and may be accessible to authorities under the laws of that country. Where information moves across borders, we rely on our agreements with those providers to keep it protected to a comparable standard.

How long we keep it

• Account information: while your account is open, and for a reasonable period afterwards to handle disputes and meet legal obligations.
• Order, membership, payment and tax records: for as long as tax and accounting law requires, typically several years, even after an account closes.
• Support messages: while needed to resolve the matter and for a reasonable period afterwards.
• Uploads: until you delete them, subject to backup cycles. When you close your account we also delete your profile photo, printer photos, store banner, the photos on your reviews, the pictures on your posts, your photos of prints of your files and the files and photos attached to your print requests, and any of your requests still open is withdrawn. Listing images and 3D model files are kept, because buyers who have already purchased an item remain entitled to it and those files form part of the order record. Proof photos are kept with their order for the same reason.
• Security and administrative records: we keep a record of actions taken on the platform — sign-in security events, changes to your account details, and actions our staff take on orders, listings and accounts. Security records are kept for two years and administrative records for around thirteen months. Records of money movements — payments, refunds and payouts — are kept with the transaction and tax records above.

Your choices and rights

You can:

• Access and correct most of your information directly in your account settings, including your name, email, phone, addresses and listings.
• Request a copy of the personal information we hold about you, and ask us to correct it if it is wrong.
• Ask us to delete your account. We will do so except where we must keep records — completed transactions and tax records in particular. Where a security or administrative record must be kept for the period above, we remove the details that identify you from it and keep only the action and its date.
• Withdraw consent to marketing at any time.
• Turn off notifications in your browser settings at any time.

To make a request, email support@threeprinted.com. We may need to verify your identity first. If you are unhappy with our response, you may complain to the Office of the Privacy Commissioner of Canada, or to your state Attorney General in the United States.

Security

Access to the database is restricted and authenticated, traffic is encrypted in transit, passwords are hashed by our authentication provider, and card data never reaches us. No system is perfectly secure, but if a breach affects you and creates a real risk of significant harm, we will notify you and the relevant regulator as the law requires.

Children and teens

Accounts are for people 13 and over, or 14 and over in Quebec. We ask for a date of birth before an account can be used, and we do not knowingly collect personal information from anyone younger: if the answer is under that age, no account is created, or an existing one is deleted — or closed, where it has orders or other records that other people rely on — and the date of birth is not kept.

An account under the age of majority where its holder lives can browse, save items and keep private lists, follow makers, read their posts and contact support. It cannot buy, sell, join memberships, request prints or share lists, and items rated adults only are not shown to it. Under our Terms, a teen uses their account with a parent or guardian’s permission.

If you believe someone under 13 (14 in Quebec) has an account, contact us and we will delete it.

Cookies

We use a small number of cookies and similar technologies, described on our Cookie Notice page.

Changes

We may update this policy. Material changes will be notified through the Platform or by email before taking effect, and the “last updated” date above always reflects the current version.

Contact

Privacy questions and requests: support@threeprinted.com, or write to220 Brew St, Suite 301, Port Moody, BC V3H 0H6, Canada.