Privacy Policy

1. Introduction

Graff Technologies LLC, doing business as 3DPrintMe™ ("3DPrintMe" or the "Company"), is a Washington limited liability company that operates an online marketplace connecting buyers and sellers of 3D prints, custom commissions, and digital model files at 3dprintme.com (the "Platform"). This Privacy Policy explains how 3DPrintMe collects, uses, discloses, and protects your personal information when you use the Platform.

Using the Platform involves the collection and use of personal information as described in this Privacy Policy. If you do not agree with this Privacy Policy, do not use the Platform. For account registration and purchases, you will be asked to affirmatively accept the Terms of Use, which incorporate this Privacy Policy by reference.

2. Information We Collect

2.1 Information You Provide Directly

Account information: name, email address, username, and password when you register.
Seller information: shop name, business type (individual or business), and contact details. Identity verification, tax identification numbers (SSN/EIN), bank account details, and government-issued ID are collected and held by Stripe under the Stripe Connected Account Agreement. 3DPrintMe receives only the verification status and payout-eligibility signals from Stripe and does not store raw bank account numbers, full Social Security numbers, or full government-issued ID images on its own systems.
Shipping addresses: full name, street address, city, state, ZIP code, country, and phone number when you make a purchase or save an address.
Payment information: credit/debit card details, bank account information. Payment data is processed and stored by Stripe, Inc. We do not store full card numbers on our servers.
Communications: messages you send through our internal messaging system, dispute claim descriptions, and customer support inquiries.
Listings and reviews: print titles, descriptions, images, STL files, and reviews you create.

2.2 Information Collected Automatically

Usage data: pages visited, search queries, listings viewed, items added to cart, and purchase history.
Device information: IP address, browser type and version, operating system, and device identifiers.
Performance and error telemetry: application performance, diagnostic, and error data collected via Azure Application Insights and OpenTelemetry to keep the Platform reliable and secure.
Cookies and similar technologies: see Section 7 below.

2.3 Information from Third Parties

Stripe: payment confirmation, payout status, and fraud signals.
Shippo / shipping carriers: tracking events and delivery confirmations.
Google reCAPTCHA: bot-detection signals for form submissions.

3. How We Use Your Information

We use the information we collect to:

Create and manage your account and provide Platform services.
Process transactions, payments, and payouts.
Calculate and collect applicable sales taxes and remit them to the appropriate tax authorities (via Stripe Tax).
Generate and fulfill shipping labels; share your shipping address with carriers (USPS, UPS, FedEx, DHL) to deliver your order.
Send transactional emails (order confirmations, shipping notifications, dispute updates).
Display listing views and cart counts to improve buyer confidence.
Detect and prevent fraud, abuse, and policy violations, including through automated content moderation of listings, images, and messages using Azure OpenAI and Azure Content Safety. Automated moderation may flag, hide, or remove content; sellers and buyers may request human review by contacting support@3dprintme.com.
Comply with legal obligations, including tax reporting (IRS Form 1099-K for sellers with annual gross sales exceeding applicable thresholds).
Improve and personalize the Platform experience.
Respond to your requests and provide customer support.

Lawful Basis for Processing (GDPR — EU/EEA/UK Users)

If you are located in the European Union, European Economic Area, or United Kingdom, 3DPrintMe relies on the following lawful bases under GDPR Article 6 when processing your personal information:

Contract (Art. 6(1)(b)): Processing necessary to perform the contract between you and Graff Technologies LLC, including account management, order processing, payment processing, shipping, and dispute resolution.
Legal obligation (Art. 6(1)(c)): Processing required by law, including tax reporting, DMCA compliance, and anti-fraud obligations.
Legitimate interests (Art. 6(1)(f)): Processing for fraud prevention, platform security, abuse detection, and improving platform features, where our interests do not override your rights. You may object to this processing under Art. 21 GDPR.
Consent (Art. 6(1)(a)): Processing for non-essential analytics cookies, where we have obtained your consent. You may withdraw consent at any time.

4. Information Sharing

3DPrintMe does not sell your personal information. 3DPrintMe shares your information only as described below:

With other users: your public profile (username, shop name, reviews) is visible to other users. Your shipping address is shared with the seller solely for the purpose of fulfilling your order.
With service providers: 3DPrintMe shares limited personal information with the following service providers to operate the Platform: Stripe (payment processing, Stripe Connect Express onboarding and KYC, and Stripe Tax for sales-tax calculation and remittance), Shippo (shipping-label generation and tracking), Google (Analytics 4, reCAPTCHA v3, and Places API), Microsoft Azure Communication Services (transactional email), and Microsoft Azure (cloud hosting and infrastructure, including Azure Application Insights and OpenTelemetry for performance and error telemetry, and Azure OpenAI and Azure Content Safety for automated content moderation). Each service provider is contractually required to protect your personal information and to use it only as needed to provide services to 3DPrintMe.
With shipping carriers: your name, address, and phone number are shared with shipping carriers (USPS, UPS, FedEx, DHL) to facilitate delivery of your order.
For legal compliance: we may disclose information when required by law, court order, or governmental authority, or to protect our rights and safety.
Business transfers: In connection with a merger, acquisition, financing, reorganization, bankruptcy, or sale of all or part of 3DPrintMe's assets, your personal information may be transferred to the successor entity as part of that transaction. The successor entity will be bound by the commitments in this Privacy Policy, or 3DPrintMe will give you notice and an opportunity to delete your account before any material change in how your personal information is handled.

5. Tax Compliance

3DPrintMe uses Stripe Tax to automatically calculate, collect, and remit sales tax on applicable transactions. As a marketplace facilitator operating in U.S. states and jurisdictions with Marketplace Facilitator laws, 3DPrintMe is responsible for collecting and remitting sales tax on behalf of sellers for transactions facilitated on the Platform in those jurisdictions. The set of covered jurisdictions is determined by Stripe Tax and applicable state law and may change from time to time. Sellers are not responsible for collecting sales tax on orders processed through 3DPrintMe for states covered by Marketplace Facilitator laws.

Sellers with gross sales exceeding IRS reporting thresholds ($5,000 in 2024 and $2,500 in 2025, transitioning to $600 thereafter) will receive an IRS Form 1099-K. We may collect your taxpayer identification number (SSN/EIN) for this purpose.

6. Data Retention

3DPrintMe retains personal information for the period needed to provide Platform services and to meet legal, tax, accounting, fraud-prevention, and dispute-resolution obligations. Account profile data is retained while your account is active and for up to 90 days after closure to allow for account recovery and to address residual disputes. Transaction records (order history, payment metadata, tax records, and IRS Form 1099-K records) are retained for at least the period required by applicable tax and financial-recordkeeping laws, generally a minimum of 4 years and up to 7 years for federal tax records. Dispute and fraud records are retained for the period needed to resolve the dispute and to detect related abuse. After the retention period ends, 3DPrintMe deletes or anonymizes the personal information. You may request deletion of your account data, subject to these retention obligations.

7. Cookies

We use the following types of cookies:

Essential cookies: required for authentication and session management (e.g., JWT token storage).
Analytics cookies: help us understand how users interact with the Platform.
reCAPTCHA cookies: Google reCAPTCHA v3 uses cookies to assess whether form submissions are made by a human or a bot.

Analytics cookies are set only after you accept them in the 3DPrintMe cookie consent banner. You may withdraw consent or change your preferences at any time by clicking "Cookie settings" in the page footer. You may also block or delete cookies through your browser settings. Disabling essential cookies may prevent core Platform features from working. For the full list of cookies, durations, and purposes, see the Cookie Policy.

8. Security

3DPrintMe implements security measures including TLS/HTTPS encryption for data in transit, bcrypt hashing for passwords, tokenized payment processing via Stripe, and role-based access controls. No method of internet transmission is fully secure, and 3DPrintMe cannot guarantee absolute security. If 3DPrintMe becomes aware of a security incident affecting your personal information, 3DPrintMe will notify you and the relevant authorities as required by applicable state, federal, and international breach-notification laws.

9. Your Rights

Depending on your location, you may have the following rights regarding your personal information. To exercise any of these rights, contact privacy@3dprintme.com. 3DPrintMe will respond to verified requests within 30 days, or within any shorter period required by applicable law. 3DPrintMe may need to verify your identity before processing your request and may request additional information for that purpose. You may use an authorized agent to submit a request on your behalf. 3DPrintMe will require written proof of the agent's authority (for example, a signed power of attorney) and may also require you to verify your identity directly.

Access (Art. 15 GDPR / CCPA): Request a copy of the personal information we hold about you.
Correction (Art. 16 GDPR): Request correction of inaccurate or incomplete information. You may also update most account information directly in your account settings.
Deletion: Request deletion of your account and associated personal data. 3DPrintMe retains transaction records, tax records, and dispute records for the periods described in Section 6 and cannot delete those records on request. Records retained for legal compliance are not used for marketing or profiling.
Portability (Art. 20 GDPR): Receive your personal data in a structured, machine-readable format (JSON or CSV) for data you provided to us where processing is based on consent or contract.
Restriction (Art. 18 GDPR): Request that we restrict processing of your personal information in certain circumstances (e.g., while a correction request is pending).
Objection (Art. 21 GDPR): Object to processing of your personal data based on legitimate interests (including profiling). We will cease such processing unless we demonstrate compelling legitimate grounds.
Opt-out of non-essential communications: Unsubscribe from marketing emails at any time via the unsubscribe link in any email. Transactional emails (order confirmations, shipping updates, dispute notices) cannot be opted out of while your account is active.
Global Privacy Control (GPC): We honor the GPC browser signal as an opt-out of sale and sharing of personal information, consistent with applicable state privacy laws. We do not sell personal information.

California residents: 3DPrintMe does not sell personal information and honors the Global Privacy Control browser signal as an opt-out of sale or sharing. California residents may request access to or deletion of their personal information using the contact details in Section 12. To the extent 3DPrintMe collects sensitive personal information (for example, a Social Security number or government identifier provided for tax or identity-verification purposes), 3DPrintMe uses that information only for the purposes for which it was collected and does not use or disclose it for purposes that would trigger the right to limit under California law.

EU/EEA/UK residents: To the extent 3DPrintMe makes Platform services available to users in the European Union, European Economic Area, or United Kingdom, those users have the right to lodge a complaint with their local data protection supervisory authority if they believe 3DPrintMe has not adequately addressed their concern. For EU users, this is generally the supervisory authority in the user's country of residence or the lead supervisory authority for cross-border processing.

10. Children's Privacy

The Platform is a general-audience site intended for users 18 years of age or older. It is not directed to children under 13, and 3DPrintMe does not knowingly collect personal information from anyone under 13. 3DPrintMe does not condition a child's participation in any Platform activity on the child disclosing more personal information than is reasonably necessary.

If 3DPrintMe learns that a user under 13 has provided personal information, 3DPrintMe will promptly delete that information and close the account. A parent or legal guardian who believes a child under 13 has provided personal information to 3DPrintMe may contact privacy@3dprintme.com to request review and deletion, and 3DPrintMe will respond within 30 days.

Users between 13 and 17 are not eligible to register an account, list items, or make purchases on the Platform. If 3DPrintMe learns that a user under 18 has registered, 3DPrintMe may suspend or close the account and delete the related personal information.

11. Changes to This Policy

3DPrintMe may update this Privacy Policy from time to time. For non-material updates, 3DPrintMe will post the revised policy on this page and update the "Last updated" date. For material changes that affect your rights or the categories of personal information collected, 3DPrintMe will provide advance notice by email to your registered account address or through an in-product notice before the change takes effect.

12. Contact Us

Questions about this Privacy Policy may be directed to:

Graff Technologies LLC
d/b/a 3DPrintMe™
Attn: Privacy Team

Email: privacy@3dprintme.com

Legal: legal@3dprintme.com

Website: https://3dprintme.com