Draft prepared for legal review. Replace placeholders before publishing.
Legal
Privacy Policy
This Privacy Policy explains how CipherFab collects, uses, discloses, and protects personal information when you use our website, customer portal, quoting tools, and related services.
Introduction & Scope
CipherFab, Inc. and its affiliates ("CipherFab," "we," or "us") provide digital manufacturing services through our website, customer portal, instant quoting tools, and partner network. This Privacy Policy describes our practices regarding personal information collected when you interact with our platforms and services (collectively, the "Services").
This Policy applies where CipherFab acts as the data controller for its own business purposes. It does not describe processing performed solely on behalf of customers where CipherFab acts as a processor under a separate agreement.
By using the Services, you acknowledge this Privacy Policy. If you do not agree, please do not use the Services.
Information We Collect
We collect information you provide directly, information generated through your use of the Services, and information from third-party sources where permitted by law.
- Account and identity information: name, email address, phone number, company name, job title, billing and shipping addresses, and account credentials.
- Project and order information: specifications, uploaded CAD files, drawings, BOM data, tolerances, quantities, communications, quote history, and order records.
- Payment information: payment card details, billing information, tax identifiers, and transaction records processed through payment providers.
- Support and communications: messages, emails, chat transcripts, survey responses, and feedback you send to us.
- Automatic technical data: IP address, device identifiers, browser type, operating system, log files, pages viewed, referral URLs, session data, and error reports.
- Marketing preferences and cookie data as described in our Cookie Policy.
Sensitive & Special Categories of Data
We do not intentionally collect special categories of personal data such as health information, biometric data for identification, political opinions, or religious beliefs.
If you upload government-issued identification for fraud prevention or verification, we use it only for identity verification, compliance, and security purposes and retain it only as long as necessary.
How We Use Information
We use personal information to operate, provide, and improve the Services, including:
- Create and maintain accounts, authenticate users, and provide portal access.
- Generate quotations, process orders, coordinate manufacturing, and fulfill deliveries.
- Provide customer support, technical assistance, and order status communications.
- Process payments, invoicing, credit review, fraud prevention, and collections.
- Improve platform performance, quoting accuracy, usability, and security.
- Send service announcements, administrative notices, and—with consent or as permitted—marketing communications.
- Comply with legal obligations, enforce terms, and protect rights, safety, and security.
Legal Bases for Processing
Where applicable data protection laws require a legal basis, we rely on one or more of the following:
- Contractual necessity — to provide the Services you request or enter into with us.
- Legitimate interests — to secure our platform, prevent fraud, improve services, and communicate about your account, balanced against your rights.
- Legal obligation — to comply with tax, trade, safety, and regulatory requirements.
- Consent — where required for certain marketing, cookies, or optional processing. You may withdraw consent without affecting prior lawful processing.
How We Share Information
CipherFab does not sell personal information. We share information only as described below or with your direction.
- Manufacturing partners — specifications and order information necessary to quote, manufacture, inspect, and ship parts.
- Service providers — hosting, cloud infrastructure, analytics, payment processing, email delivery, customer support tools, and professional advisers bound by confidentiality obligations.
- Logistics and compliance providers — carriers, customs brokers, and trade-compliance vendors supporting lawful shipment.
- Corporate transactions — in connection with financing, merger, acquisition, reorganization, or sale of assets, subject to appropriate safeguards.
- Legal and safety disclosures — where required by law, court order, or governmental request, or to protect rights, safety, and security.
Sharing with Manufacturing Partners
To manufacture custom parts, CipherFab must share relevant design files, specifications, quantities, materials, quality requirements, and delivery information with the partner assigned to your project.
Partners are permitted to use this information only to perform services for CipherFab and your order. CipherFab contractually requires partners to protect confidential and personal information.
Marketing Communications
We may send promotional emails or messages about CipherFab services, events, or content where permitted by law. You may opt out of marketing communications at any time using the unsubscribe link in emails or by contacting us.
Even if you opt out of marketing, we may still send transactional or service-related messages about your account, orders, security, or policy changes.
Data Retention
We retain personal information only as long as necessary for the purposes described in this Policy, including to provide the Services, maintain business records, resolve disputes, enforce agreements, and comply with legal obligations.
Account information and order history are generally retained for the life of your account and for a reasonable period thereafter. Design files and specifications may be retained in accordance with order requirements, quality records, and legal retention schedules.
Retention periods may vary by data type and jurisdiction. Contact us for more information about retention practices applicable to your data.
Security Measures
CipherFab implements technical and organizational measures designed to protect personal information, including access controls, encryption in transit and at rest where appropriate, logging, secure development practices, vendor assessments, and employee training.
No method of transmission or storage is completely secure. While we work to protect your information, we cannot guarantee absolute security.
For more detail on security practices for design and business data, see our Data Protection page.
Your Privacy Rights
Depending on your location, you may have rights to:
- Access personal information we hold about you.
- Correct inaccurate or incomplete information.
- Delete personal information, subject to legal and contractual exceptions.
- Restrict or object to certain processing, including direct marketing.
- Receive a portable copy of information you provided in a structured format.
- Withdraw consent where processing is based on consent.
- Lodge a complaint with a supervisory authority.
Exercising Your Rights
You may update certain account information through your customer portal. For other requests, contact us using the details in the Contact section. We may need to verify your identity before responding.
We aim to respond to valid requests within the timeframe required by applicable law. Some requests may be denied where an exception applies, such as retention required for legal claims, trade compliance, or active order fulfillment.
International Data Transfers
CipherFab operates globally and may process personal information in countries other than your own, including where our service providers and manufacturing partners are located.
Where required, we implement appropriate safeguards for cross-border transfers, such as standard contractual clauses, data processing agreements, and supplementary security measures.
California Privacy Rights
If you are a California resident, you may have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), including rights to know, delete, correct, and opt out of certain sharing.
CipherFab does not sell personal information and does not share personal information for cross-context behavioral advertising in exchange for money. We do not discriminate against consumers for exercising privacy rights.
Authorized agents may submit requests on your behalf subject to verification requirements.
European Economic Area & UK Residents
If you are located in the EEA, UK, or Switzerland, CipherFab processes personal data in accordance with applicable GDPR and UK GDPR requirements, including transparency, purpose limitation, data minimization, and accountability obligations.
Our legal bases and rights descriptions above apply to your processing. You may contact us or your local supervisory authority regarding concerns that are not resolved to your satisfaction.
Children's Privacy
The Services are not directed to children under sixteen (16), and we do not knowingly collect personal information from children. If you believe a child has provided personal information to us, contact us so we can take appropriate action.
Third-Party Links & Services
Our website may contain links to third-party websites, payment processors, or integrated services. This Policy does not apply to third-party sites or services, which are governed by their own privacy policies.
Do Not Track
Some browsers transmit "Do Not Track" signals. There is currently no uniform industry standard for responding to such signals. CipherFab does not currently respond to Do Not Track signals but will review practices if a standard emerges.
Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be posted on the website and, where appropriate, communicated by email or account notice. The effective date will be updated when changes are posted.
Continued use of the Services after the effective date constitutes acceptance of the revised Policy, except where further consent is required by law.
Contact & Complaints
For privacy questions, rights requests, or complaints, contact CipherFab using the contact details on our website or the email address designated for privacy inquiries.
If you are not satisfied with our response, you may have the right to contact your local data protection authority.
Related Policies
Review our other legal and data protection documents for a complete understanding of how CipherFab operates.
Let's Build Something Great Together
Get a Free Instant QuoteCipherFAB simplifies custom manufacturing through a global network of vetted suppliers, delivering quality components with transparency, speed, and reliability.