Privacy policy
What we collect, why we collect it, and what we do with the files you send us.
What we collect
- Account information. If you create an account: your email address and password. Passwords are stored only as a salted hash — we cannot read them, and neither can anyone who obtains the database.
- Quote and order information. Your name, email, phone, company, project description, and how you'd like the work delivered. If you ask us to ship, we also collect the shipping address you give us — if you choose local pickup, we don't ask for one and don't store one. Orders also carry the billing address needed to take payment.
- Uploaded files. The CAD models, drawings and artwork you send us so we can quote and produce your work.
- Technical information. Standard server logs, including IP address and browser user agent, used to operate and secure the site.
Your design files
We treat uploaded files as your confidential property. They are stored outside the publicly served part of this website, are not browsable by URL, and are accessible only to OCreate staff who need them to quote or produce your work.
We do not sell, license, publish or share your files with anyone else, and we do not use them as portfolio or marketing material unless you explicitly agree. If you need an NDA in place first, ask — we sign them routinely.
Cookies
We use only the cookies this site needs to function: a session cookie to keep you signed in, and an anti-forgery cookie that prevents other websites submitting forms on your behalf. We do not use advertising or cross-site tracking cookies, and there is no consent banner because there is nothing to consent to.
Payments
Payments are processed by Stripe. Card details are entered on Stripe's own systems and are never transmitted to, or stored on, our servers. We retain only the transaction reference, amount, status, and the billing details needed for our records. Stripe's handling of your data is governed by its own privacy policy.
Transactional email — account confirmations, password resets, quotes and receipts — is sent through a third-party email provider acting on our behalf. We do not send marketing email unless you ask us to.
How long we keep things
Account and order records are kept while your account is active and for as long as tax and accounting rules require afterwards. Uploaded files attached to a quote that does not become an order are deleted after 12 months. Files attached to a completed order are kept while we may reasonably need to reproduce or support that work.
Your rights
You can download a copy of the personal data associated with your account, or delete your account, from your account settings. If you are a California resident, the CCPA gives you the right to know what we collect, to request deletion, and not to be discriminated against for exercising those rights. We do not sell personal information.
To ask about data we hold that is not covered by the self-service export — for example a quote submitted without an account — contact us.
Changes
If we change this policy we will update this page. Material changes affecting how we handle your files or personal data will be communicated directly to account holders.