Privacy policy
What we collect, why we collect it, and what we do with the files you send us.
What we collect
- Account information. If you create an account: your email address and password. Passwords are stored only as a salted hash — we cannot read them, and neither can anyone who obtains the database.
- Quote and order information. Your name, email, phone, company, project description, and how you'd like the work delivered. If you ask us to ship, we also collect the shipping address you give us — if you choose local pickup, we don't ask for one and don't store one. Orders also carry the billing address needed to take payment. Anything you add to a request afterwards from its private page — notes, files, or your reason for closing it — is kept with the request, along with our replies to you and any files we share with you there.
- NDA signatures. If you sign our mutual NDA online, we keep the name, title and company you sign with, the agreement text you signed, and the time, IP address and browser user agent of your signature. That is the evidence that you signed it, and we keep it for as long as the agreement's obligations last.
- Uploaded files. The CAD models, drawings and artwork you send us so we can quote and produce your work.
- Technical information. Standard server logs, including IP address and browser user agent, used to operate and secure the site.
Your design files
We treat uploaded files as your confidential property. They are stored outside the publicly served part of this website and are not browsable by URL. They are accessible to OCreate staff who need them to quote or produce your work, and to you from your request's private page, where you can view or download every file on the request — including anything we share with you. Anyone holding that page's link can open them too, so keep it to yourself and your team; we can replace the link if it reaches the wrong person.
We do not sell, license, publish or share your files with anyone else, and we do not use them as portfolio or marketing material unless you explicitly agree. If you need an NDA in place first, tick the NDA box on the quote form — you can sign our mutual NDA online, and we ask for your files only once both sides have signed.
Cookies
We use only the cookies this site needs to function: a session cookie to keep you signed in, and an anti-forgery cookie that prevents other websites submitting forms on your behalf. We do not use advertising or cross-site tracking cookies, and there is no consent banner because there is nothing to consent to.
Payments
Payments are processed by Stripe. Card details are entered on Stripe's own systems and are never transmitted to, or stored on, our servers. We retain only the transaction reference, amount, status, and the billing details needed for our records. Stripe's handling of your data is governed by its own privacy policy.
Transactional email — account confirmations, password resets, quotes and receipts — is sent through a third-party email provider acting on our behalf. We keep a copy of each message we send for 30 days, so a message that fails to send can be retried, and then delete it. We do not send marketing email unless you ask us to.
How long we keep things
Account and order records are kept while your account is active and for as long as tax and accounting rules require afterwards. Uploaded files attached to a quote that does not become an order are deleted after 12 months. Files attached to a completed order are kept while we may reasonably need to reproduce or support that work.
Your rights
You can download a copy of the personal data associated with your account, or delete your account, from your account settings. If you are a California resident, the CCPA gives you the right to know what we collect, to request deletion, and not to be discriminated against for exercising those rights. We do not sell personal information.
To ask about data we hold that is not covered by the self-service export — for example a quote submitted without an account — contact us.
Changes
If we change this policy we will update this page. Material changes affecting how we handle your files or personal data will be communicated directly to account holders.