Privacy Policy

1. Data Controller

The data controller is Ivan Maksim Andreyevich, a self-employed individual under the special tax regime "Professional Income Tax" (samozanyaty), Taxpayer ID (INN) 524308881820 — hereinafter the "Controller" or "we". The 3D Print Pricing service (the "Service") is available at 3dprintpricing.pro.

For all personal data inquiries, contact: print.calculator.3d@gmail.com

2. Personal Data We Process

Account data: email address, name, phone number (optional), avatar photo (optional).

Authentication data: password hash (email login).

Google Calendar / Google Drive integration data: upon voluntary connection of Google Calendar, the Service reads and creates events in your calendar (orders, appointments, to-dos) for two-way sync — event title, start/end time, and description are processed. Upon connection of Google Drive, the Service only uses a hidden application-specific folder (App Data) to store backups of the Service's data — the Service has no access to any other files in your Google Drive.

Your clients' data: The Service allows you to store contact and requisite information about your clients (name, phone, email, INN, bank details, etc.), which you enter yourself. You are responsible for obtaining your clients' consent to store their data in the Service.

Print shop directory inquiry data: the public print shop directory pages (3dprintpricing.pro/masters) let anyone, without an account, send a request to a specific print shop or to all print shops in a city, and leave a review of a completed order. We process: your contact (phone, Telegram, email, or another method you provide), an optional email for a confirmation message, the request text, an optional budget and deadline, an attached 3D file (STL/3MF) and reference photos, and, for reviews, your name (optional), rating, and review text. Here we act as the Controller, and the recipient is the print shop(s) the request is addressed to (see Section 4).

Technical data: IP address and User-Agent are recorded in server logs for security purposes (brute-force and DDoS protection). Logs are stored for no more than 90 days.

3. Purposes and Legal Bases

4. Data Recipients and Cross-Border Transfers

We do not sell your data. Your data may be shared with the following recipients, strictly to the extent necessary for the Service to function:

• Selectel (JSC "Selectel", Russia) — hosting provider: the database and file storage are hosted on servers physically located in the Russian Federation, in compliance with the localization requirements of Federal Law No. 242-FZ.
• Google LLC (USA) — when signing in with a Google account, and upon voluntary connection of Google Drive for file backup or Google Calendar for two-way event sync.
• Apple Inc. (USA) — when signing in with Apple ID (Sign in with Apple), including via Apple's anonymous email relay.
• VK (VK LLC, Russia) — when signing in with VK ID.
• Mail.ru (Mail.ru LLC, Russia) — when signing in with a Mail.ru account.
• Yandex (Yandex LLC, Russia) — when signing in with Yandex ID, and upon voluntary connection of Yandex Disk for file backup.
• Yandex.Metrica (Yandex LLC, Russia) — website analytics (IP address, User-Agent, on-page actions, including Webvisor session recordings) — only after cookie consent is given via the site's banner.
• YooKassa (NKO "YuMoney", Russia) — processing web payments (Basic, Pro, Web Plus) made with Russian-issued cards; bank card details are not shared with or stored by us.
• Robokassa (LLC "ROBOKASSA", Russia) — processing web payments (Basic, Pro, Web Plus) made with foreign-issued Visa/Mastercard cards; bank card details are not shared with or stored by us.
• Telegram (Telegram FZ-LLC) — technical relay of support requests and related notifications; the request text and, where necessary, the user's email are transmitted.
• Bambu Lab Cloud (servers us.mqtt.bambulab.com or cn.mqtt.bambulab.com) — only upon the user's voluntary connection of a Bambu Lab cloud account: that account's email and the serial numbers of linked printers are transmitted to obtain live print status.
• Selectel Mail (JSC "Selectel", Russia) — transactional email delivery service (registration confirmation, password reset, account deletion). Infrastructure is located in the Russian Federation.
• Print shop(s) in the directory — if you send a request to a specific print shop, your contact, the request text, and attached files are shared with that shop's owner (a Service user) so they can reach you. If the request is sent "to the city" (without picking a specific shop), the same data is shared with all matching print shops in the city until one of them takes the request into work, after which it stops being visible to the rest.

5. Retention Periods

• Account data is retained until account deletion + 30 days (backups).
• Technical logs (IP, User-Agent) — no more than 90 days.
• Print shop directory requests and reviews are kept no longer than necessary for their purpose (connecting you with the print shop and, for reviews, displaying them on the public profile); deleted earlier upon your request to print.calculator.3d@gmail.com (see Section 8).
• After account deletion, all personal data is removed from active systems; from backups — within 30 days after backup rotation.

6. Cookies

The Service uses three categories of cookies. Necessary cookies are always set; analytics and marketing cookies are set only after explicit consent via the site's banner (accept all / decline / customize individually).

Necessary (always):

• access_token — JWT access token (httpOnly, Secure, SameSite=Lax). Lifetime: ~30 min.
• refresh_token — session refresh token (httpOnly, Secure, SameSite=Lax). Lifetime: ~30 days.
• cookie_consent_v2 — remembers your cookie-banner choice (localStorage, never sent to the server).

Analytics (after consent):

• Yandex.Metrica cookies — see Section 5 above.

Marketing (after consent):

• sp_attr — first-party cookie with UTM tags and referral source, 90-day lifetime; used to attribute where a visitor who later registers came from.

You can change your choice at any time: reopen cookie settings.

7. Data Security

The Service uses HTTPS for all connections. Passwords are stored as bcrypt hashes. JWT cookies have httpOnly and Secure attributes. File storage (MinIO) is on the same secured server. Server access is restricted. Organizational measures are taken to protect data from unauthorized access, modification, or destruction.

8. Your Rights

You have the right to:

• Access your personal data and receive a copy;
• Correct inaccurate data — via Profile page;
• Delete your account and all associated data — via Profile → "Delete account";
• Withdraw consent (withdrawal results in account deletion);
• Lodge a complaint with the supervisory authority.

To exercise your rights, send a request to print.calculator.3d@gmail.com. Response time for information requests: 30 days.

If you confirm that your personal data is incomplete, outdated, or inaccurate, the Controller will make the required corrections within 7 (seven) business days of receiving that confirmation and lift any blocking, per Article 21(2) of Federal Law No. 152-FZ (current wording). If unlawful processing is identified, the Controller will stop it within 3 business days, and where lawful processing cannot otherwise be ensured, destroy the data within 10 business days (Article 21(3)).

9. Children

The Service is intended for persons 18 years of age or older. We do not knowingly collect personal data from children. If you believe a child has registered, contact us to delete the data.

10. Data Localization

Personal data of users is processed and stored on servers physically located in the Russian Federation, in compliance with Federal Law No. 242-FZ data localization requirements.

11. RKN Notification

In accordance with amendments to 152-FZ introduced by Federal Law No. 420-FZ of 30.11.2024, in the event of an incident resulting in unlawful transfer (provision, distribution, access) of personal data, the Controller notifies Roskomnadzor of the breach within 24 hours, and of the internal investigation results within 72 hours of discovering the incident.

12. Categories of Data Subjects

• Registered users of the Service;
• Users' clients — individuals whose contact and requisite data a user enters into the Service (Section 2);
• Requesters and review authors on the public print shop directory pages (Section 2);
• Representatives of legal entities and sole proprietors listed in the requisites of users and their clients.

13. Processing Operations and Methods

The Controller performs the following operations on personal data: collection, recording, systematization, accumulation, storage, clarification (updating, modification), extraction, use, transfer (provision, access), blocking, deletion, and destruction. Processing is carried out by mixed means — using automation tools (the Service's server systems) and, in certain cases (e.g., handling written requests), without such tools.

14. De-identification of Personal Data

The Controller does not de-identify (anonymize) personal data.

15. Conditions for Termination of Processing

Processing of personal data is terminated upon any of the following: the processing purposes stated in Section 3 are achieved; the data subject withdraws consent (where processing is based on consent); the user deletes their account; a lawful request to stop processing is received from the subject or an authorized body; or the Controller ceases operations. Retention and destruction timelines after termination are set out in Section 5.

16. Changes to This Policy

We may update this Policy. For material changes, a notification will be sent to your registered email address. The date of the last update is shown at the top of this document.