3DN Product Customizer Privacy Policy

3DN Product Customizer ("the App") is provided by Blurd Technologies Pvt Ltd ("we", "us"), TODO: registered postal address. It lets merchants on Shopify offer product customization using the 3DN designer. This policy explains what personal information the App collects when a merchant installs it, and what happens to information about the merchant's customers.

This policy covers the Shopify app only. For the 3DN website and platform, see the 3DN privacy policy.

1. Information we collect

From merchants (through Shopify, when you install the App)

• Your store's Shopify domain and the access token Shopify issues to the App.
• Products and variants you choose to connect to 3DN (IDs and titles), and the 3DN product they map to.
• Your store's name and the store owner's name and email address, read from Shopify when you create your 3DN license in the App. They are sent to 3DN to create the license and the 3DN account that owns it (or to find your existing 3DN account with that email); the App itself does not store them.
• Your 3DN license key. 3DN issues it to the App directly; it is stored encrypted and is never shown to you or sent to your storefront.

About your customers (only when they use the Customize button or order a customized item)

• Guests can design without the App creating any identity for them. A customer who saves a design must be logged in to your store; the App then uses a pseudonymous identifier derived from their Shopify customer ID with a one-way keyed hash. Their actual customer ID is not shared with 3DN.
• The designs they save (up to 10 per product), stored by 3DN, and the preview images of each saved design, whose 3DN image addresses the App keeps so the customer sees their design on the product page on any device.
• For orders containing a customized item: the order ID and number, the customized line items, the related 3DN design references and preview images, and, once you download them, the addresses of the design's print files generated by 3DN.
• On the customer's own device, the 3DN designer keeps unsaved drafts (browser IndexedDB tdn-drafts, listed in localStorage tdn-draft-index) so work survives a reload or the login step. It stays on that device until the design is saved or discarded.

The App does not collect or store customers' names, email addresses, phone numbers, postal addresses or payment details. Order notifications Shopify sends to the App may contain such fields; the App ignores them and does not store them.

2. How we use information

• To open the 3DN designer for the right product, save each customer's design, and add it to the cart.
• To lock the ordered design so it can't be changed after purchase, attach the design reference to the Shopify order, and place a fulfillment hold if a design can't be locked.
• To show you setup status inside the App, and each ordered design (preview, 3D view, print file and lock status) on the Shopify order page.
• To check your store's recent orders for any the App missed (for example, orders placed while it was uninstalled), so their designs are kept.

We don't sell personal information, use it for advertising, or use it for automated decision-making.

3. Sharing

• 3DN (3dn.app): designs, the pseudonymous shopper identifier, your license key (used to authenticate), and, when you create your license, your store domain and the store owner's name and email are processed by the 3DN service (the 3DN admin API) to provide the designer. Print files and design images are generated by 3DN and hosted on cdn.3dn.app; anyone with a file's address can open it. TODO: state the relationship between Blurd Technologies Pvt Ltd and the operator of 3DN
• Cloudflare: hosts the App (Cloudflare Workers) and its database (Cloudflare D1). Infrastructure provider.
• Shopify: the App reads and writes data in your store through Shopify's APIs.

4. Retention

When you uninstall, the App immediately deletes its Shopify access tokens, your stored 3DN license key and every 3DN access token it holds for your store.

Data held by 3DN itself (your 3DN license and account, locked designs that are part of your orders, and print files) follows 3DN's own retention; contact [email protected] to have it deleted. TODO: confirm with 3DN what is deleted and when

5. Shopify privacy requests

The App handles Shopify's mandatory compliance webhooks:

• Customer data request (customers/data_request): the App compiles what it holds about the customer (their saved designs, the copies locked from them, and the order lines that reference those copies) and makes it available to you in the App's Data requests page as a download to send on to the customer.
• Customer deletion (customers/redact): we delete the records linked to that customer and their editable design copies in 3DN. Locked designs that are part of your orders stay with those orders.
• Shop deletion (shop/redact): sent by Shopify 48 hours after you uninstall; the App deletes everything it holds about your store.

6. Security

All traffic uses HTTPS. Data is stored in Cloudflare D1, which is encrypted at rest. License keys and 3DN access tokens are additionally encrypted by the App (AES-256-GCM). Requests from Shopify are verified with Shopify's signatures.

7. Your rights

Merchants can contact us at [email protected] to access, correct or delete data the App holds about their store. Customers should contact the store they purchased from; the store can forward requests to us through Shopify, and we will act on them.

8. Contact

Blurd Technologies Pvt Ltd · TODO: registered postal address · [email protected]

For help with the App, see our support page.

9. Changes

We'll update this page when the App's data handling changes and change the "last updated" date above.