Your Privacy Matters
Privacy Policy
We're committed to protecting your data and being transparent about how we use it.
Last updated: October 13, 2026
On this page
1. Introduction
Custom3D ("we", "our", or "us") is a Shopify application developed by Netsfera Solutions S.L. This Privacy Policy explains how we collect, use, and protect your information when you use our 3D product customization application.
2. Information We Collect
2.1 Store Information
When you install Custom3D, we collect:
- Store name and domain
- Store owner email address
- Store timezone and currency
- Shopify plan information
2.2 Product Information
To provide our customization service, we access:
- Product titles, descriptions, and images
- Product variants and pricing
- 3D models you upload for customization
2.3 Order Information
For orders containing customized products, we store:
- Order number, line items and customer email received from Shopify
- Customer design files and preferences
- Customization data (text, colors, images uploaded)
2.4 Customer Data
Personal data: Shopify order data can include a customer email address. Uploaded artwork, images and custom text may also contain personal information. We store these with the associated design and order to support customization and fulfillment.
3. How We Use Your Information
We use the collected information to:
4. Data Storage and Security
Application records are stored in Supabase PostgreSQL.
Uploaded models, images, design previews and print files use Supabase Storage.
The authorization flow encrypts Shopify access tokens with AES-256-GCM before storing them.
Use HTTPS to access the application and Shopify to authorize store access.
5. Data Retention
Store, product and order records support the application and customized-order fulfillment. Their retention is separate from abandoned-design expiry.
New unpurchased cart designs receive an expiry based on the store’s selected retention setting when first saved. Existing designs keep their recorded expiry. Designs linked to purchased orders currently have no automatic expiry. Browser drafts are stored separately on the customer’s device.
Uninstallation and data deletion are separate processes. Shopify sends a shop-data deletion request after uninstall. Contact us about the status of a deletion request; uninstalling alone does not confirm erasure of all records and files.
6. Data Sharing
We do not sell your data. Service data is processed using:
Through their required APIs for app functionality
Vercel (application hosting), Supabase (PostgreSQL database and file storage).
These are the providers used by the current application. For questions about processing arrangements or data location, contact us.
7. Your Rights (GDPR)
You have the right to:
Request a copy of your data
Correct inaccurate data
Request deletion of your data
Receive your data in a portable format
Object to certain processing activities
To exercise these rights, contact us at contact@netsfera.es
8. Customer Data Requests
Customers can contact the store merchant to request access to or deletion of their data. Merchants can submit requests through Shopify and contact contact@netsfera.es about data held by Custom3D. Shopify webhook acknowledgement is not confirmation that the requested action is complete. Requests may require review of applicable legal-retention obligations.
10. Changes to This Policy
Updates to this policy are published on this page. Check the date above for the current version.
11. Contact Us
For privacy-related questions or requests: