1. Introduction
MakerStage (“we,” “us,” or “our”) operates an on-demand manufacturing platform at makerstage.com. We provide CNC machining, 3D printing, sheet metal fabrication, and related services to hardware teams worldwide.
This Privacy Policy explains what personal and project data we collect, why we collect it, how we protect it, and what rights you have. It applies to all users of our website, RFQ forms, file upload tools, and communications channels.
By using our services, you acknowledge that you have read and understood this policy. If you do not agree, please do not submit personal data or project files through our platform.
2. Information We Collect
2.1 Account & Contact Information
When you submit an RFQ or contact us, we collect:
- Full name and job title
- Company name
- Business email address
- Phone number (if provided)
- Shipping and billing addresses (when placing orders)
2.2 Project & Technical Data
To quote and manufacture your parts, we collect project files and specifications:
- CAD files (STEP, IGES, STL, 3MF, Solidworks, and similar formats)
- Technical drawings (PDF, DXF)
- Part specifications: materials, tolerances, surface finishes, quantities, and special requirements
- Project notes and messages exchanged during the quoting process
2.3 Usage & Device Data
When you visit our website, we may collect (subject to your cookie preferences):
- IP address (hashed/truncated for analytics — never stored in full)
- Browser type, operating system, and device category
- Pages viewed, referral source, and session duration
- Interactions with forms and CTAs (anonymized event data)
2.4 Payment Information
We use third-party payment processors to handle transactions. MakerStage does not store credit card numbers or full payment credentials on our servers. Our payment processors are PCI DSS compliant.
3. How We Use Your Information
We use the information we collect to:
- Provide services: Generate quotes, manufacture parts, coordinate shipping, and deliver customer support.
- Communicate: Send order updates, RFQ clarifications, shipping notifications, and respond to inquiries.
- Improve our platform: Analyze aggregated, anonymized usage data to improve site performance, UX, and service reliability.
- Ensure security: Detect and prevent fraud, abuse, and unauthorized access to our systems.
- Comply with legal obligations: Maintain records required by tax, trade, and regulatory authorities.
We do not use your data for automated decision-making or profiling that produces legal effects.
4. Legal Basis for Processing
Where applicable law requires a legal basis for processing personal data, we generally process your information under one of the following:
- Contract performance: Processing necessary to provide quotes, fulfill orders, and deliver manufacturing services you have requested.
- Legitimate interest: Improving our services, ensuring platform security, and conducting aggregated analytics — balanced against your privacy rights.
- Consent: Analytics cookies and non-essential tracking are only enabled after you provide consent via our cookie banner.
- Legal obligation: Retaining records required by tax or regulatory authorities.
5. File Security & Confidentiality
We understand that CAD files and technical drawings represent significant intellectual property. Protecting your project data is a core commitment:
- Encryption: Project files are stored with enterprise-grade providers (including Box) that encrypt data in transit and at rest using industry-standard protocols.
- Access control: File access is restricted to authorized MakerStage personnel on a need-to-know basis.
- Confidentiality: We treat all uploaded project files as confidential. Mutual NDAs are available upon request before files are shared or reviewed.
- Private storage: Files are stored in private, access-controlled cloud storage — never in publicly accessible locations.
- Deletion: Files are deleted upon request or after the retention period (see Section 9), whichever comes first, where legally permissible.
7. Third-Party Services
We use a limited number of third-party services to operate the platform. Each operates under a data processing agreement:
- Cloud hosting & storage: For website hosting and secure file storage.
- Email delivery: Transactional email for order updates and RFQ confirmations.
- Analytics: Aggregated, consent-based website analytics.
- Payment processing: PCI DSS-compliant payment handling. We never store full card details.
- Error monitoring: Application error tracking with PII filters (request bodies and headers are scrubbed).
We do not sell, rent, or trade your personal data to any third party for marketing purposes.
8. Data Sharing
We may share limited information in the following cases:
- Manufacturing partners: We share project files and relevant specifications with vetted manufacturing partners solely to fulfill your order. Partners operate under confidentiality agreements.
- Service providers: Infrastructure, communications, and analytics providers that process data on our behalf under data processing agreements.
- Legal requirements: When required by law, court order, or government authority, or to protect the safety and rights of our users and platform.
- Business transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred as part of the transaction, subject to the same privacy protections.
9. Data Retention
- Project files (CAD, drawings): Retained for the duration of the business relationship plus a reasonable period for reorders and warranty claims. Deleted upon request where legally permissible.
- Account & contact data: Retained while your account is active or as needed to provide services. Upon account deletion request, data is removed within 30 days, except where retention is required by law.
- Analytics & logs: Anonymized usage data is retained for up to 26 months. Server logs containing hashed IPs are retained for no more than 30 days.
- Financial records: Invoices and transaction records are retained as required by applicable tax and accounting regulations.
10. International Data Transfers
MakerStage is based in the United States. If you are accessing our services from outside the U.S., your data may be transferred to and processed in the United States or other countries where our service providers operate.
We use service providers that maintain appropriate technical and organizational safeguards for cross-border data transfers.
11. Your Rights
11.1 All Users
Regardless of your location, you can:
- Request access to the personal data we hold about you.
- Request correction of inaccurate or incomplete data.
- Request deletion of your data (subject to legal retention requirements).
- Opt out of non-essential communications at any time by unsubscribing or contacting us.
- Adjust cookie and analytics preferences via the consent banner.
11.2 EEA & UK Residents
If you are located in the European Economic Area or the United Kingdom, we aim to honor the following rights:
- Data portability: Receive your data in a structured, commonly used format upon request.
- Restrict processing: Request that we limit how we use your data in certain circumstances.
- Object to processing: Object to processing based on legitimate interests.
- Withdraw consent: Where processing is based on consent, withdraw it at any time without affecting prior processing.
11.3 California Residents (CCPA/CPRA)
Under the California Consumer Privacy Act (as amended), you have the right to:
- Know what personal information we collect, use, and disclose.
- Request deletion of your personal information.
- Opt out of the “sale” or “sharing” of personal information. We do not sell personal data.
- Non-discrimination for exercising your privacy rights.
To exercise any of these rights, contact us at hello@makerstage.com. We will respond within 30 days (or the applicable statutory period).
12. Children's Privacy
Our services are designed for businesses and professionals. We do not knowingly collect personal data from individuals under the age of 16. If we become aware that we have collected data from a child, we will delete it promptly. If you believe a child has submitted data to us, please contact hello@makerstage.com.
13. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal requirements. When we make material changes, we will update the “Effective date” at the top of this page and, where appropriate, notify you via email or a prominent notice on our website.
We encourage you to review this page periodically to stay informed about how we protect your data.
14. Contact Us
If you have questions about this Privacy Policy, want to exercise your data rights, or have a concern about how your information is handled, contact us:
- Email: hello@makerstage.com
- General inquiries: Contact page