privacy policy

  1. Scope and who we are
  • This policy explains how we collect, use, disclose, and protect personal information when you use our digital marketplace (the “Platform”).
  • Roles:
    • We act as an independent data controller for Platform operations (accounts, payments, fraud prevention, marketing).
    • Authors may receive Buyer data to fulfill orders/support. Authors act as independent controllers for their own processing and must provide their own privacy policies.
  1. Information we collect
    2.1 Information you provide
  • Account details: name, display name, email, password, avatar, country, preferences.
  • Profile and storefront (Authors): bio, social links, portfolio, location (optional), support contact.
  • Transactions: items purchased or sold, prices, currency, license type, download/access logs.
  • Payments and payouts:
    • Buyers: billing address, VAT/GST IDs (if applicable; payment card details handled by our processors).
    • Authors: payout details (PayPal, bank, Payoneer), tax forms (W‑8/W‑9), identity/KYC documents (ID, selfie/short video where required).
  • Communications: support tickets, chat messages, reviews, forum posts, surveys.
  • Content you upload: product files, previews, documentation, screenshots, course/videos (Authors).
  • Marketing preferences: newsletter opt-ins, cookie consent choices, referral program participation.

2.2 Information collected automatically

  • Usage data: page views, clicks, referrers/UTM, search queries, session duration.
  • Device and log data: IP address (approximate location), user agent, OS, browser, device IDs, language, time zone, error logs.
  • Cookies and similar tech: pixels, SDKs, local storage. See “Cookies & Tracking.”

2.3 Information from third parties

  • Payment processors: payment status, limited card details (last 4 digits, brand, expiry month/year), chargeback data.
  • Identity and anti‑fraud services: verification results, risk scores.
  • Tax/VAT services: tax jurisdiction, evidence of location (e.g., IP country).
  • Analytics/ads partners: aggregated audience and campaign performance.
  • Social sign‑in: when you connect Google/Apple/GitHub/etc., we receive your name, email, and profile photo (as permitted by you).

We do not intentionally collect sensitive personal information except where necessary for identity verification and compliance (Authors), in which case we use it only for that purpose.

  1. How we use your information (purposes and legal bases)
    We use personal information to:
  • Provide and operate the Platform (account creation, listings, delivery of digital items, license management). Legal bases: contract; legitimate interests.
  • Process payments and payouts; handle taxes and invoices. Legal bases: contract; legal obligation.
  • Verify identity, prevent fraud/abuse, ensure platform integrity, secure accounts. Legal bases: legitimate interests; legal obligation.
  • Provide support and communications about purchases, updates, incidents. Legal bases: contract; legitimate interests.
  • Improve and personalize the Platform (analytics, A/B tests, recommendations). Legal bases: legitimate interests; consent where required for cookies.
  • Send marketing communications with your consent (where required) and allow you to opt out at any time. Legal bases: consent; legitimate interests where permitted.
  • Show public profile/storefront information and enable community features (reviews, comments, forums). Legal bases: contract; legitimate interests.
  • Comply with law, enforce terms, and defend legal claims. Legal bases: legal obligation; legitimate interests.

We do not make decisions producing legal or similarly significant effects solely by automated means. We may use automated systems to flag risky activity for human review.

  1. Cookies and tracking
  • Types:
    • Strictly necessary (authentication, security, shopping cart, downloads).
    • Performance/analytics (e.g., page performance, usage stats).
    • Functional (preferences, localization).
    • Advertising/retargeting (where used).
  • Controls:
    • Manage preferences via our Cookie Settings link: [yourdomain.com/cookies-preferences].
    • Browser controls: block/clear cookies and use Do Not Track features.
    • Global Privacy Control (GPC): where required by law (e.g., California/Colorado), we treat a valid GPC signal as an opt‑out of sale/sharing for targeted advertising.
  • In the EU/UK/EEA, non‑essential cookies are used only with your consent.
  1. How we share information
    We share personal information with:
  • Service providers (processors) under contract: hosting/CDN ([e.g., AWS, Cloudflare]), analytics ([e.g., Google Analytics, Mixpanel]), error monitoring ([e.g., Sentry]), email/SMS ([e.g., SendGrid, Mailchimp]), customer support ([e.g., Intercom, Zendesk]), file scanning/preview, and similar.
  • Payment and payout partners: [Stripe, PayPal, Payoneer, Bank partners].
  • Identity/KYC and fraud-prevention partners: [e.g., Persona, Onfido, Sift].
  • Tax and compliance partners: [e.g., Avalara, Taxamo].
  • Authors: we share Buyer information necessary to fulfill purchases and provide support (e.g., name, email, item purchased, license, country, download status). Authors must use this data only for order-related purposes and must not add Buyers to marketing lists without consent.
  • Marketing/advertising partners (where used and permitted): ad networks, social platforms, affiliates. You can opt out of sale/sharing where applicable.
  • Corporate affiliates and professional advisors (accounting, legal).
  • Authorities or third parties when required by law, to protect rights/safety, or in the context of a business transfer (merger, acquisition, asset sale).

We do not sell personal information for money. Some jurisdictions define “sale” or “sharing” to include certain analytics/ads disclosures via cookies; see “Regional notices.”

  1. Data retention
  • We keep personal information only as long as necessary for the purposes above, including:
    • Accounts: for the life of your account and for [2] years after closure (to facilitate reactivation and dispute handling).
    • Transactions and tax records: [6–7] years or as required by law.
    • Support tickets: [2–3] years after resolution.
    • Marketing consents and opt‑out lists: as required to honor your choices.
    • KYC and payout records (Authors): as required by AML/tax laws ([5–7] years).
  • We may retain de‑identified or aggregated data that does not identify you.
  1. Security
  • We use administrative, technical, and physical safeguards including TLS encryption in transit, encryption at rest, role‑based access controls, MFA for staff, least‑privilege access, regular backups, vendor reviews, and vulnerability management.
  • No system is 100% secure. If we discover a breach, we’ll notify affected users and regulators as required by law.
  1. Your rights and choices
  • Access, correction, deletion, and portability of your data.
  • Opt out of marketing communications at any time (unsubscribe link or account settings).
  • Manage cookies and targeted advertising preferences (see “Cookies and tracking”).
  • Object to or restrict processing in certain cases; withdraw consent where we rely on consent.
  • Close your account in settings or by contacting us.

How to exercise your rights

  • Submit a request via: [yourdomain.com/privacy-request] or email desing3dds@gmail.com.
  • We may need to verify your identity (and your authority if you use an authorized agent).
  • We will respond within the timelines required by applicable law. If we deny a request, you may appeal at desing3dds@gmail.com (for US state laws that require an appeal process).
  1. Children’s privacy
  • The Platform is not directed to children under 13 (or the age of digital consent in your country). We do not knowingly collect personal data from children. If you believe a child provided data, contact us to delete it.
  1. International data transfers
  • We operate globally and may transfer data to countries outside your own, including the United States.
  • Where required, we use appropriate safeguards such as the EU Standard Contractual Clauses (and the UK Addendum/IDTA), and supplementary measures.
  • If applicable: We participate in the EU‑US/UK‑US Data Privacy Framework programs. See: [link].
  1. Public content and user communications
  • Content you post publicly (e.g., reviews, Q&A, forums, author storefronts) may be indexed by search engines. Avoid sharing personal or sensitive information publicly.
  • We may moderate submissions for compliance with our policies.
  1. Third‑party links and integrations
  • The Platform may link to third‑party sites, plug‑ins, or apps. Their privacy practices are governed by their own policies. Review them before sharing data.
  1. De‑identified and aggregated data
  • We may create de‑identified or aggregated data for analytics, research, and platform improvement. We commit not to re‑identify such data.
  1. Financial incentives (if applicable)
  • If we offer referral bonuses, loyalty credits, or similar programs that involve personal information:
    • We describe the material terms, categories of data involved, how to opt in/out, and the value of the incentive here: [link to program terms].
    • Participation is voluntary, and you may withdraw at any time.
  1. Regional notices
    15.1 EEA/UK/Switzerland (GDPR)
  • Controller: [Company Legal Name], [Address], desing3dds@gmail.com.
  • Legal bases: contract, legitimate interests, consent, legal obligation, and (rarely) vital interests.
  • Your GDPR rights: access, rectification, erasure, restriction, portability, objection, and the right to withdraw consent. You may lodge a complaint with your local supervisory authority (e.g., ICO in the UK, CNIL in France).
  • For non‑essential cookies/ads, we rely on your consent.

15.2 United States (California and other state laws)

  • Notice at Collection: See the table at the end of this policy for categories collected, purposes, and retention.
  • Sale/Sharing/Targeted advertising:
    • We do not sell your personal information for money.
    • We may “share” identifiers and internet activity with advertising/analytics partners for cross‑context behavioral advertising when you consent to such cookies. You can opt out via the “Do Not Sell or Share My Personal Information” link: [yourdomain.com/do-not-sell] and by using GPC signals.
  • Your state privacy rights (CA/CO/CT/VA/UT and others): access, deletion, correction, portability, and opt‑out of sale/sharing/targeted ads and certain profiling. Use our request form: [yourdomain.com/privacy-request].
  • Sensitive personal information (CPRA): We use sensitive data (e.g., identity verification for Authors) only for permitted purposes; we do not use or disclose it to infer characteristics.
  • Non‑discrimination: We will not discriminate against you for exercising your rights.
  • California “Shine the Light”: You may request details about direct marketing disclosures by emailing  desing3dds@gmail.com with “Shine the Light” in the subject.
  • Nevada: Residents may opt out of the sale of personal information by emailing desing3dds@gmail.com.

15.3 Canada (PIPEDA)

  • You have rights of access and correction and may withdraw consent subject to legal or contractual restrictions. Contact: desing3dds@gmail.com

15.4 Brazil (LGPD)

  • Legal bases include consent, contract, legal obligation, and legitimate interests. You have rights to confirm processing, access, correction, anonymization, portability, deletion, and information about sharing. Contact: desing3dds@gmail.com

15.5 Australia

  • We comply with the Australian Privacy Act and APPs. For complaints, contact us first; you may also contact the OAIC.
  1. Changes to this policy
  • We may update this policy from time to time. Material changes will be notified via email or in‑product notice, with the “Effective date” updated above. Continued use means you accept the updated policy.

Up to Top