partdrop.

Privacy Policy

Last updated: June 2026 · Governed by the New Zealand Privacy Act 2020

PartDrop turns a 3D file or a photo you provide into a 3D-printed object we ship to you. This policy explains what personal information we collect, how we use and share it, how long we keep it, and the rights you have over it. We don't sell your personal information.

1. What we collect

  • Account - your email address (we use passwordless sign-in; we don't store passwords).
  • Uploads - the photos and 3D files you upload. Photos may contain images of people, and we strip embedded location/EXIF metadata on upload.
  • Designs & orders - what you ask us to make, the generated/prepared models, your order history, prices, and payment status.
  • Messages - anything you send via the contact form (name, email, message).
  • Technical - a one-way hashed form of your IP address (for abuse prevention only - we don't store raw IPs), and basic request metadata.

2. How we use it

To create and ship your order, run your account, prevent abuse/fraud, take payment, respond to you, and improve the service. We only collect what we need for these purposes.

3. Who we share it with (and where)

We use a small number of trusted providers to run PartDrop. Some are located outside New Zealand, so some information is disclosed overseas:

  • Our 3D-generation provider (Replicate, overseas) - if you upload a photo to be turned into a model, that photo is sent to this provider to generate the 3D model. Don't upload photos of people without their consent.
  • Anthropic (overseas) - AI assistance for interpreting/preparing designs.
  • Stripe - payment processing. Your card details go directly to Stripe; we never see or store your card number.
  • Supabase - our database, authentication and file storage.
  • Shipping - a courier (e.g. NZ Post) receives your name and delivery address to deliver your order.

We require these providers to protect your information and use it only to provide their service to us.

4. How long we keep it

We keep your account and order information while your account is open and as long as needed for the order, support, and legal/tax obligations. Uploaded photos are kept only as long as needed to produce your model. Abuse-prevention logs are kept on a rolling short-term basis. You can ask us to delete your data sooner (see below).

5. Your rights (NZ Privacy Act 2020)

You can ask us to:

  • Access the personal information we hold about you;
  • Correct it if it's wrong;
  • Delete your account and associated data. You can delete your account yourself from your Account page, or email us.

If you're unhappy with how we've handled your information, you can complain to the Office of the Privacy Commissioner (privacy.org.nz).

6. Security

Data is encrypted in transit (HTTPS) and at rest by our providers. Uploads are private and access-controlled. No system is perfectly secure, but we take reasonable steps to protect your information.

7. Contact

Questions or requests (access, correction, deletion): jackpike@partdrop.co.nz.