Privacy Policy
How Open3D processes personal data under the GDPR.
1. Controller
OpenCloud, Open3D brand — hello@open3d.pt. This policy covers open3d.pt, customer accounts, orders and related APIs.
2. Data we process
• Identity & contact: name, email, shipping address, phone (if provided). • Account: hashed password, email verification status, favorites. • Orders: items, uploaded 3D files, quotes, payment references (full card PAN is handled by the payment provider, not stored by us). • Technical: logs, IP, user-agent, essential cookies, minimal error telemetry. • Agents/API: key identifiers and requests tied to your account.
3. Purposes and legal bases (GDPR)
• Contract performance: account, quote, production, shipping, support (Art. 6(1)(b)). • Legal obligations: invoicing, accounting, authority requests (Art. 6(1)(c)). • Legitimate interests: security, fraud prevention, service improvement, establishing/defending legal claims — balanced against your rights (Art. 6(1)(f)). • Consent: where required (e.g. optional marketing) (Art. 6(1)(a)) — withdrawable anytime.
4. 3D files you upload
Uploaded files are processed to quote, produce and archive the order. We do not sell them or use them to train public AI models. We retain copies as needed for production, warranty, disputes and legal duties, then delete or anonymise when no longer required.
5. Recipients
We may share data with payment processors, carriers, email/hosting/cloud processors under data-processing terms, and authorities when required. Partner designs may involve minimal order reporting for royalties — we do not hand your custom files to third parties without need.
6. International transfers
We prefer EEA processing. If we use processors outside the EEA, we apply appropriate safeguards (e.g. EU Standard Contractual Clauses).
7. Retention
Account data: while active and up to 24 months after inactivity, unless a longer legal duty applies. Orders/invoicing: statutory accounting/tax periods (often up to 10 years in Portugal). Technical logs: typically 90 days unless needed for security investigations.
8. Your rights
Under GDPR you may request access, rectification, erasure, restriction, portability, objection, and withdraw consent. Contact: hello@open3d.pt. You may also complain to the Portuguese CNPD (www.cnpd.pt) or your local supervisory authority.
9. Cookies
We use essential cookies (session, language, security). Analytics/marketing cookies, if any, only with consent where required. You can control cookies in your browser.
10. Security and children
We apply reasonable technical and organisational measures (HTTPS, password hashing, access control). The service is not directed at children under 16 without parental consent where required.
11. Changes
Version 1.0, updated 2026-08-08. Changes will be posted on this page. Privacy contact: hello@open3d.pt.