Privacy Policy and Data Protection Notice

1. Data Controller

The data controller responsible for processing your personal data is [COMPANY / BUSINESS NAME], [ADDRESS]. Contact: [EMAIL ADDRESS] or our contact page.

2. Personal Data We Process

Depending on how you use the service, we process the following:

• Account data: email address, full name, username, profile photo, short bio, city and region; optionally a phone number. If you sign in with Google, the name, email and profile photo Google shares with us.
• Order data: name, address, city/district and phone for delivery; order contents (model, material, color, scale), amount, payment status and shipping details.
• Payment data: Your card details are entered directly into the payment provider's secure form; they never reach our servers and are not stored by us. We only receive the result of the transaction and a transaction reference from the provider.
• For designers: the 3D model files, images and descriptions you upload; earnings and wallet transactions.
• For print partners: application details (shop name, city), print jobs you take, photos you upload; name and IBAN for withdrawal requests.
• Reviews: ratings and comments you leave on products.
• Technical data: session cookies, IP address, browser/device type and security-related server logs.

3. Purposes and Legal Bases

We process your data to create and manage your account, take your order, complete payment, have the product made and shipped, and calculate and pay designer and print-partner earnings (performance of a contract); to meet invoicing, accounting and other legal obligations (legal obligation); and to keep the platform secure, prevent fraud and improve the service (legitimate interest). Where consent is required it is requested separately and can be withdrawn at any time.

4. Who We Share Data With

• Print partner: the partner who prints and ships your order sees your delivery name, address, phone and the order contents, solely to fulfil the order.
• Designer: sees that their model was sold and sales statistics; does not see the buyer's identity or address.
• Service providers (data processors): hosting, database, authentication and file storage (Supabase, Vercel), payment infrastructure (PayTR), email delivery (Resend) and Google sign-in. They process data only on our behalf and under our instructions.
• Authorized public bodies: where required by law.

5. International Transfers

Our infrastructure providers' servers may be located abroad (database region: [SUPABASE REGION]). Your data may therefore be transferred abroad in accordance with Article 9 of the KVKK.

6. Retention

Account data is kept while your account is open. When you delete your account, your profile, saved addresses, reviews and wallet history are deleted. Records of past orders (product and amount) are kept for accounting and legal obligations; the name, address and phone number in those orders are anonymized 30 days after your account is deleted. Records that the law requires us to keep longer are retained for that period. Model files you uploaded are unpublished when your account is deleted.

7. Print Photos

Print partners upload photos of the products they make. After administrator approval these photos are published publicly on the product page. Photos must not contain addresses, shipping labels or personal information; location (EXIF) data is removed on upload. When a print partner's account is deleted, published photos remain on the product page but are no longer linked to the account.

8. Deleting Your Account

You can delete your account at any time: in the mobile app under Profile > Delete account, or on the website using the link below. If you have an order in progress, a pending withdrawal or a wallet balance, these must be completed first; the system tells you what is needed. When a designer account is deleted, the models are unpublished and orders that have not shipped yet are cancelled and refunded to the buyers.

I want to delete my account

9. Security

Your data is transmitted over encrypted connections (HTTPS), access is limited by role, and card details are not stored in our systems. No system is completely secure, however; in the event of a breach we will make the notifications required by law.

10. Cookies

Our platform uses cookies and local storage only for essential functions such as signing in and remembering your language and theme preferences; we do not use advertising or tracking cookies. See our Cookie Policy for details.

11. Your Rights under the KVKK

Under Article 11 of the KVKK you have the right to learn whether your personal data is processed; to request information if it has been processed; to learn the purpose of processing and whether it is used accordingly; to know the third parties to whom it is transferred in Turkey or abroad; to request correction if it is incomplete or inaccurate; to request deletion or destruction; to request that these actions be notified to third parties to whom the data was transferred; to object to a result against you arising from analysis of the data; and to claim compensation for damages caused by unlawful processing. You can submit requests through our contact page or the email address above; we respond within 30 days at the latest.

12. Changes

We may update this notice from time to time. We announce significant changes on the site and in the app; the current version is always on this page.