3DCarParts.org's Privacy Policy

Privacy Policy

Last Updated: December 7, 2024

Welcome to 3DCarParts.org! This Privacy Policy explains how we collect, use, protect, and retain your personal data when you use our platform. By using our platform, you consent to the collection, use, and sharing of your information as described in this policy.

1. Information We Collect

a. Personal Data

We collect personal information when you register an account, such as your name, email address, and other necessary details to facilitate your use of our platform.

b. User-Generated Content

We collect and store 3D models, comments, and other content that you upload to provide and enhance our services.

c. Usage Data

We automatically collect information about your interactions with our platform, including:

  • Technical Data: IP addresses, browser type, and operating system.
  • Behavioral Data: Pages viewed, session duration, and other usage patterns.

d. Cookies and Similar Technologies

We use cookies and other tracking technologies to enhance your user experience, provide personalized advertisements, and analyze website usage. For more information, see Section 4(b).

2. How We Use Your Information

a. Service Provision

To operate, maintain, and improve the platform's core functionality and tailor it to user needs.

b. Communication

To send account-related notifications, updates, and promotional materials that align with your interests.

c. Analytics

To analyze usage trends, enhance performance, and optimize the user experience.

d. Advertising

We partner with Google AdSense to display targeted advertisements based on your browsing behavior. AdSense may use cookies to collect information about your interests. Learn more about how Google uses your data here.

3. Data Sharing and Disclosure

a. Third-Party Services

We may share your data with trusted third-party providers for:

  • Hosting and infrastructure (e.g., cloud services).
  • Analytics (e.g., Google Analytics).
  • Advertising (e.g., Google AdSense).

These providers are contractually obligated to process your data securely and in compliance with applicable laws.

b. Legal Compliance

We may disclose your information to comply with legal requirements, protect our rights, or address emergencies.

4. Your Rights and Choices

a. Managing Your Account

You can view, edit, or delete your account information anytime by logging into your account settings.

b. Cookie Preferences

You can manage or disable cookies through your browser settings. Visit our Cookie Policy for detailed instructions on cookie management.

c. Withdrawal of Consent

You have the right to withdraw consent for data processing at any time. Contact us here to request withdrawal. Note: Withdrawal does not affect the legality of data processed before withdrawal.

d. GDPR Rights

Users in the EEA have the following rights:

  • Right to Access: Request a copy of your personal data.
  • Right to Rectification: Correct any inaccuracies in your data.
  • Right to Erasure: Request the deletion of your data.
  • Right to Object: Object to specific processing activities, such as direct marketing.

To exercise your GDPR rights, please use our general contact form here.

e. CCPA Rights

California residents have specific rights under the CCPA:

  • Right to Know: Learn about the categories and specifics of personal data we collect.
  • Right to Deletion: Request the deletion of your personal data, subject to exceptions.
  • Right to Opt-Out: We do not sell personal data, but if practices change, you will have the right to opt out.

To exercise your CCPA rights, contact us via our general contact form here.

5. Data Retention

We retain personal data and user content until you delete it from your account. Deleted data is removed from active servers within 90 days and may persist in encrypted backups for disaster recovery purposes.

6. Third-Party Platform Integrations

a. Content Aggregation

We aggregate publicly available 3D models from platforms like Thingiverse® through their official APIs. For aggregated content, we collect and store:

  • Creator's public username and profile URL for attribution
  • Model metadata (title, description, license information)
  • Public model files and images
  • License type and requirements

We do NOT collect or store any user authentication credentials, personal information, or private data from third-party platforms.

b. Data Usage Restrictions

Third-party platform data is used exclusively for:

  • Displaying content with proper attribution
  • Linking back to original sources
  • Internal analytics (anonymous and aggregated only)

This data is never sold, transferred to unrelated parties, or used for external analytics.

c. Creator Rights

Original creators can:

  • Request removal of their aggregated content at any time
  • Opt-out from future content aggregation
  • Access information about how their content is being used

Submit requests through our Content Removal Form or contact api@3dcarparts.org.

7. Children's Privacy

Our service is intended for users aged 13 and older. We do not knowingly collect personal information from children under 13 in compliance with COPPA (Children's Online Privacy Protection Act). If we become aware that we have collected personal information from a child under 13 without parental consent, we will take immediate steps to delete that information. Parents or guardians who believe we may have collected information from their child should contact us immediately at our contact page.

8. Security and Breach Notification

a. Security Measures

We implement industry-standard security measures including:

  • SSL/TLS encryption for data in transit
  • Encrypted storage for sensitive data at rest
  • Regular security audits and vulnerability assessments
  • Access controls and authentication mechanisms
  • Firewall protection and intrusion detection systems

b. Breach Notification Procedures

In the event of a data breach that may impact your personal information:

  • We will notify affected users via email within 72 hours of discovery
  • We will post a notice on our platform with breach details and mitigation steps
  • For breaches affecting third-party platform data (e.g., Thingiverse), we will notify the platform within 72 hours
  • We will cooperate fully with regulatory authorities as required by law

If you suspect unauthorized access to your account or data, please contact us immediately at security@3dcarparts.org.

9. Advertising and User Content Hosting

a. Advertising

We use Google AdSense to display ads. These ads may involve tracking technologies like cookies to personalize content. Users in certain regions may opt out of personalized ads as required by law.

b. Content Ownership

By uploading content to our platform, you retain ownership of your intellectual property but grant us a non-exclusive license to use, store, and display the content to operate and improve our services.

10. International Transfers

If you are located in the EEA, your data may be transferred outside the EEA to service providers in countries with different privacy laws. We ensure such transfers comply with GDPR using standard contractual clauses or similar safeguards.

11. Changes to This Privacy Policy

We may update this policy periodically. Significant changes will be announced on our platform. Your continued use of the platform constitutes acceptance of the updated policy.

12. Contact Us

For questions or concerns about this Privacy Policy, please contact us at www.3dcarparts.org/contact-us/.