Privacy Policy

1. Who is responsible

3D Fosil is the data controller for the data described here. Contact for all privacy questions and requests: info@3dfosil.com.

2. Your 3D models

Slicing runs inside your web browser by default: the slicing engine is downloaded to your computer and processes your model there, using your device's processor and memory. In that case the model file never leaves your computer.

If your device cannot slice in the browser (for example on phones, tablets or devices with little memory), or if browser slicing fails, the model is sent to our slicing server in the European Union instead. It is processed in temporary storage and deleted as soon as slicing ends; the resulting G-code is kept for up to one hour so you can download it, then deleted.

STL analysis measures your model in the browser. Your analysis history stores the file name, the measurements and the results, but never the model file itself.

AI print setup sends your model's measurements (size, volume, surface and overhang area, mesh checks), the chosen printer, material and goal, and any note you write to OpenAI to generate suggestions. The model file is not sent.

3. Data we keep for your account

To run your account we store:

• Account details: name, email address and a securely hashed password (we never see your password).
• Verification codes sent when you sign up or reset your password, kept until they are used or expire.
• Your saved printers, print profiles and slicer preferences.
• Analysis history, token balances and token transactions, packages and purchases.
• For paid packages: your Dodo Payments customer and subscription IDs, subscription status, billing dates and payment references. Card and bank details go directly to Dodo Payments and never reach us.
• Notifications and a log of system emails sent to you (for example codes, package and token notices).
• Technical records needed for security: sign-in sessions and server request logs with IP addresses, kept by our hosting providers for a short period.

4. Why we use it (legal bases)

• To provide the service you signed up for, including tokens and packages: performance of a contract (GDPR Art. 6(1)(b)).
• To keep the service secure and prevent abuse: legitimate interest (GDPR Art. 6(1)(f)).
• To keep sales and accounting records: legal obligation (GDPR Art. 6(1)(c)).
• We do not sell personal data, show advertising or send marketing emails.

5. Service providers

These providers process data for us under data processing agreements:

• Supabase: database, sign-in and system email processing (servers in London, United Kingdom).
• Heroku (Salesforce): website and slicing server hosting (servers in Ireland, European Union).
• Dodo Payments: payments, subscriptions, tax and invoicing as merchant of record. It receives the details you enter at checkout (name, email, billing address, payment method) and processes them under its own privacy policy.
• Cloudflare: domain name (DNS) resolution.
• Hostinger: sending system emails from our mailbox.
• OpenAI: AI print setup suggestions, only when you use that feature (United States).

6. International transfers

Some providers process data outside the European Economic Area, such as OpenAI in the United States. These transfers rely on the European Commission's Standard Contractual Clauses or an adequacy decision.

7. How long we keep data

Account data is kept while your account exists. Analysis history follows your package's history limit and older entries are removed automatically. When you ask us to delete your account, we delete its data within 30 days, except records we must keep by law (such as sales records), which are kept for the legal period.

Models sliced on our server are deleted right after slicing and their G-code within one hour.

8. Cookies and browser storage

3D Fosil uses no advertising or analytics cookies. The site stores only what it needs in your browser: your sign-in session and small preferences such as hidden panels or slicer view settings. Your browser also caches the slicing engine file so it does not need to be downloaded again.

9. Your rights

You can ask to access, correct, delete or receive a copy of your data, object to or restrict its processing, and learn how it is used (GDPR Articles 15–21). Write to info@3dfosil.com; we answer within 30 days.

You may also complain to the data protection authority where you live or work.

10. Security and children

Data is sent over encrypted connections and access to it is limited. 3D Fosil is not intended for children under 16 and we do not knowingly collect their data.

11. Changes

We will post changes to this policy on this page with a new date and announce material changes by email or in the app.