Privacy Policy
Last updated: 02 May 2026 · Compliant with the Digital Personal Data Protection Act, 2023 (India)
1. Who is the Data Fiduciary
NAP Designs (operating MagicPrints3D), Bengaluru, Karnataka, India. Contact for privacy matters: privacy@magicprints3d.com.
2. What we collect
- Account data: name, email, phone, password (hashed), profile handle, optional bio & avatar.
- Order data: shipping address, GST number (if business), order history, payment status (we do not store card numbers — Razorpay handles payment).
- Customisation data: text, images, photos, and 3D files you upload to our tools or community.
- Usage data: IP address, browser, pages visited, performance metrics — collected via PostHog and Sentry to improve the product.
- Communications: WhatsApp / email exchanges with our support team.
3. Why we collect it
- To fulfil orders, generate invoices, and arrange shipping.
- To operate the customisation tools and Maker Community marketplace.
- To process creator and tool partner payouts.
- To prevent fraud, abuse, and intellectual-property infringement.
- To send transactional notifications (order updates, payout confirmations) — never marketing without explicit consent.
4. Who we share with
- Razorpay — payment processing
- Shiprocket — courier & tracking
- Resend — transactional email delivery
- Supabase— managed database & storage (data hosted in Singapore region; we are evaluating an India-region migration)
- Vercel — application hosting (global edge)
- PostHog & Sentry — anonymised analytics & error tracking
We never sell your data. We never share customer lists with marketers.
5. How long we keep it
- Account data: until you delete your account, plus 90 days for backup retention.
- Order & tax records: 8 years (mandatory under Indian GST law).
- Uploaded photos & STL files: 90 days after order fulfilment, then automatically purged.
- Anonymised analytics: 24 months.
6. Your rights
Under the DPDP Act 2023, you can:
- Access the personal data we hold about you
- Correct inaccurate data
- Erase data we no longer have a lawful basis to keep
- Withdraw consent at any time (we may then be unable to continue the service)
- Nominate someone to exercise your rights in case of incapacity
- Complain to the Data Protection Board of India
Submit any request via privacy@magicprints3d.com. We respond within 30 days.
7. Children
We do not knowingly process data of children under 16. Parents may contact us to remove any such data.
8. Cookies
We use only essential cookies for authentication and session management. Analytics cookies (PostHog) are first-party and subject to your consent banner choice. We do not use third-party advertising cookies.
9. Changes
We will notify you by email of material changes to this policy at least 14 days before they take effect.