Privacy policy · Snazzy3D

This page explains what personal data the Snazzy3D (SnazzyPro 3D) shop at snazzy3d.com collects, why, how long it is kept, and your rights. Snazzy3D is part of Snazzy and is run by the same owner as Snazzy Productions (snazzypro.com), located in Jakarta, Indonesia. On this page “we” means Snazzy3D.

1. Data we collect

• Member accounts: name, email, password (stored as a hash nobody can read), WhatsApp number and address if you add them, and your store credit and its history.
• Sign in with Google: if you choose it, Google sends your name, email address and Google account ID (a fixed number used to recognise the account). We never receive your Google password, contacts or any other Google account data.
• Orders: name, email, WhatsApp number, delivery address, shipping zone, what you ordered, promo code and your notes. Your cart is kept in your browser session until you order.
• Designs and uploads: the design parameters you create in the designer (text, size, colours, shape), photos or logos you upload, and routes from GPX files. Photos and logos are redrawn into a new WebP image, which removes location data (EXIF/GPS) and anything else hidden in the file. GPX files are read in your browser; we only receive the normalised shape of the route, without the original coordinates, dates or times.
• Product chat: messages and pictures you send to our team. Pictures are resized and their location data is removed.
• Quote requests: your name, contact details, printing needs and the link to your model files.
• Refunds and withdrawals: bank name, account number and account holder.
• Security: IP address and browser type when you sign in, sign up, send a form or order, to prevent abuse.

2. Why

To create your account and sign you in, to process, print and deliver orders, to contact you about orders or questions, to return money, to keep accounts safe, and to prevent spam and fraud. Your designs and uploaded files are used only to make your order; we do not show them in our gallery or on social media without your permission. We do not sell your data or use it for advertising.

3. Third parties

• Midtrans processes payments (QRIS, e-wallets, bank transfer/VA, cards). Card or bank details are entered on Midtrans' own page and never pass through or stay on our server. We only receive the payment status and the method used.
• Google, if you use “Sign in with Google” (see point 1).
• Cloudflare Turnstile checks that a person filled in a form (sign-up, forgotten password, guest checkout, quote request). Cloudflare may process your IP address and technical browser data for this check.
• Couriers receive the name, phone number and address on the shipping label.
• Emails for account confirmation, orders, refunds and chat replies are sent through our own mail server.

4. Cookies

We only use necessary cookies: a session cookie (keeps you signed in and holds your cart, with a CSRF security token for forms) and a lang cookie that remembers your language for one year. There are no advertising or third-party tracking cookies. Cloudflare Turnstile may use its own technical data when a form it protects is opened.

5. How long we keep it

• Orders, ordered designs and transaction data: as long as needed for bookkeeping, warranty and legal duties.
• Photos, logos and designs uploaded but never ordered (guests included): deleted automatically after 30 days.
• Login records and IP addresses: deleted automatically after 180 days (IP addresses on orders: 90 days).
• Bank account numbers for refunds or withdrawals: masked (last 4 digits only) 30 days after the money was sent.
• Member accounts, chats and store credit: until you ask us to delete them.

6. Security

The site uses HTTPS. Passwords are stored as hashes. Design photos and chat pictures are stored outside the public folders and can only be seen by you and our team through short-lived links. Digital files (STL/3MF) are not stored on the server: they are generated in your browser from the saved design. Admin access is restricted and logged.

7. Your rights and data deletion

You can see and change your profile on the Account page. To ask for a copy of your data or the deletion of your account and data (including data from Sign in with Google), email admin@snazzy3d.com from your account's email address, or give your order number if you shopped as a guest. We handle requests within 14 working days and tell you the result. Remaining store credit can be withdrawn before the account is deleted. Data we must keep for bookkeeping (such as transaction records) is kept for the required period, then deleted. You can also remove Snazzy3D's access at any time in your Google account's security settings.

8. Changes

When this policy changes, the current version and its date are always on this page.

9. Contact

Privacy questions: admin@snazzy3d.com. See also the Snazzy3D terms of service.