Privacy policy

Who we are

Layers3D is quoting and production software for 3D print shops, run by 12658097 Canada Inc., which also does business as TechnoPrints, from Cambridge, Ontario, Canada. When we say “you”, we mean the shop that signs up and its staff. When we say “your customers”, we mean the people whose quotes and orders you manage in the software.

What we collect, and why

From you, the shop

• Account details: shop name, your name, email address, password (stored hashed), two-factor secrets (stored encrypted), and billing details. Your card is entered on Stripe Checkout; we never see or store full card numbers.
• Shop configuration: your rates, materials, printers, branding, business hours and integration credentials. Integration secrets are encrypted at rest and never displayed back after saving.
• Usage: who signed in, from where, and what changed, in an audit log you can read. Server logs keep request metadata for a limited time for reliability and security.

About your customers, on your behalf

• Order and quote data: names, email addresses, phone numbers, shipping addresses, company names, the files they upload, the parts, prices and the messages exchanged. You are the controller of this data; we process it to run your shop's quoting and production.
• Files: CAD files are stored so we can measure, quote, print and show them back on the customer's tracking page. They are scoped to your shop and are not used to train anything.

Website visitors

The marketing site sets no analytics cookies and loads fonts from Google Fonts. It counts visits itself: your browser keeps a random number in its local storage so a second visit counts as returning, and each page sends the page, the site that linked to it, the device type and the browser's time zone. No cookie, IP address or name is stored with it, and it is not shared with anyone. The quoting widget you embed on your own site stores a draft quote in the visitor's browser and, if the visitor arrived from an ad, the click identifier, so a won job can be attributed to the campaign that brought it.

Where it lives

The service runs on Railway with a PostgreSQL database, and files and backups are stored on Cloudflare R2, all in North American regions. Emails are sent through Resend. Your subscription is billed by Stripe, and card payments from your customers go through your own Stripe account with Stripe Connect. The full list of companies that handle shop data for us is in our data processing agreement. Apps you connect (Shopify, Microsoft 365, Google, Wave, QuickBooks, ShipStation, ClickShip, Twilio, Quo and others) receive only the data needed for that app, under your own account and their terms.

Google Calendar and Gmail

Connecting Google is optional. A shop signs in with its own Google account and can disconnect at any time from Apps in Layers3D, or from its Google account’s security settings; disconnecting revokes our access at Google and deletes the stored sign-in tokens.

• Google Calendar (calendar.freebusy, calendar.events): we read only when the connected calendar is busy, never event titles, guests, locations or descriptions, so customers are only offered pickup times when the shop is free. When a customer books a pickup we add that one event to the calendar, and remove it if the pickup is cancelled. We never change or delete events we did not create.
• Gmail (gmail.readonly): we read new messages in the one mailbox the shop connects to find customer emails that carry CAD files (STL, STEP, 3MF, OBJ, IGES), turn them into draft quote requests, and file replies on the right customer’s timeline. We never send, delete or change mail.
• What we keep: the sign-in tokens, encrypted at rest; the connected account’s email address; and the pickup events and quote requests created from this data, inside the shop’s own account. Calendar busy times are used at the moment of booking and not stored.
• What we never do: sell Google user data, use it for advertising, use it to train AI or machine-learning models, or let people read it except with the shop’s permission for support, for security, or where the law requires.

Layers3D’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Who can see it

• Your staff, according to the roles and permissions you set.
• Your customers, only their own order, through an unguessable link.
• Other shops: never. Every record is scoped to your shop and cross-shop access returns nothing, by design and by automated test.
• Us: only when you grant a time-limited support login, which expires in thirty minutes and appears in your audit log, or when a legal obligation requires it.

AI features

Some features (material advice, design-for-manufacturing notes, draft follow-up text) send the relevant part of a quote or message to a large-language-model provider to generate a suggestion. They run on an AI key your shop adds itself, so that provider handles the request under your account and its terms; a shop that adds no key gets no AI features and nothing is sent. What is sent is the minimum needed for that suggestion, and every suggestion is a draft you approve.

Claude, ChatGPT and other assistants you connect

You can connect Layers3D to an AI assistant you use, such as Claude or ChatGPT (how it works). A connection is made by one person in your shop and acts as that person, with their role's permissions.

• What the assistant receives: the answer to each thing you ask it, and nothing more. That can include order details, customer names, email addresses, phone numbers, cities, prices, costs and sales figures. It never receives passwords, integration secrets or payment card data.
• Who handles it: the assistant's provider (for example Anthropic or OpenAI), under your own account with them and their terms. Layers3D does not see, receive or keep your conversations.
• What we keep: the connection (who made it, which app, when it was created and last used), each change the assistant makes in your audit log, and its sign-in tokens, stored only as one-way hashes. Access tokens expire after an hour and a connection unused for 90 days expires.
• Your controls: connect read-only or allow changes; the assistant asks before each change and before emailing a customer. Disconnect it any time under Apps › Claude & ChatGPT, which ends it at once; deactivating the person or signing them out everywhere does the same.

Retention and deletion

Your data is kept while your account is active. If you cancel, your plan runs to the end of the time you paid for, then the account drops to Starter. Your data is kept for 90 days after that so you can export it or come back; we email you at 60 and 83 days, then delete it. You can export orders, customers, quotes and files from inside the software at any time, and you can ask us to delete your account sooner.

We back up the database every night and keep the last 30 copies, and back up files every 3 hours, keeping copies for 90 days. Deleted data leaves those backups as they roll off.

Your customers' rights

Requests from your customers to access, correct or delete their data should come to you, as the shop; the software gives you the tools to do it. If a request comes to us directly, we will pass it to you and help.

Cookies

The admin uses a session token in your browser's local storage to keep you signed in, and remembers interface preferences such as which board you last viewed. The customer pages use no tracking cookies.

Changes

When this policy changes, the date at the top changes, and material changes are announced inside the software before they take effect.

Contact

If you're a shop's customer, ask the shop first. Shops and anyone else can reach us at contact@layers3d.ca.