Who holds this data
The controller is Tatu's Fabrication. Privacy questions and requests: tatusfabrication@gmail.com.
What we collect
You sign in with your Shopify customer account. We never see or store a password. From that sign-in we keep your email address, your name if Shopify provides one, and your Shopify customer id.
From your use of the designer we keep your projects: the design document (the settings you chose) and, in own-model mode, the 3D model file you upload. When you buy, we keep the frozen design of that order, the product code, and the time it was paid.
We do not store addresses, payment details or IP addresses. Payment and invoicing data is held by Shopify, not by this portal.
Why, and on what basis
Your projects and files are processed to provide the service you asked for (contract). Order records are kept because Finnish accounting law requires it (legal obligation).
How long we keep it
| Uploaded 3D models | 90 days from the last time you used the project |
| Design documents | As long as the account exists |
| Packages that were never paid for | 30 days |
| Delivered packages | 12 months |
| Order and accounting records | 6 years (Finnish Accounting Act) |
Your rights
You can ask what we hold about you, correct it, or have it erased. Erasing your account removes your projects, your uploaded models and your design documents.
One exception: if you have paid orders, the order rows themselves are kept for six years because accounting law requires it. They are stripped of everything that identifies you, and your models and designs are erased as normal.
You can delete your account from the projects page. You also have the right to complain to the Data Protection Ombudsman.
Who else sees it
Your files and data are processed by the services that run this portal: Shopify (sign-in and payment), Railway (hosting) and Cloudflare R2 (file storage). Nothing is sold or handed to anyone else.