Privacy Policy

1. Introduction

Dynamix Services LLC, a limited liability company registered in North Carolina, USA, operating under the brand name "Dynamix" ("Company," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, use our services, or interact with our platform, including our 3D customization tools and design services.

This Privacy Policy applies to all users of our Service, including visitors, customers, and business partners. By accessing or using our Service, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy.

2. Information We Collect

We collect information that you provide directly to us and information that is automatically collected when you use our Service. The types of information we collect depend on how you interact with our Service.

2.1. Information You Provide Directly:

• Account Information: Name, email address, password, phone number, and profile information when you create an account
• Contact Information: Billing and shipping addresses, phone numbers, and email addresses
• Payment Information: Credit card numbers, billing addresses, and payment details (processed securely by Stripe - we do not store full credit card numbers)
• Order Information: Products ordered, quantities, customization details, order history, and preferences
• Custom Design Content: Design files, logos, images, text, graphics, and specifications you upload or create
• 3D Models and Customizations: 3D model files, customization settings, design preferences, and configuration data
• Communications: Customer service inquiries, support requests, feedback, and any other communications you send to us
• Business Information: Company name, tax ID, business address, and other information for B2B accounts
• Marketing Preferences: Your preferences for receiving marketing communications and promotional offers

2.2. Information We Collect Automatically:

• Device Information: Device type, operating system, browser type and version, device identifiers, and mobile network information
• Usage Information: Pages visited, time spent on pages, links clicked, search queries, and interaction patterns
• Location Information: IP address, approximate geographic location (city/state level), and time zone
• 3D Tool Usage: Customization tool interactions, design modifications, tool preferences, and feature usage
• Technical Information: Log files, error reports, performance data, and system information
• Session Information: Session IDs, authentication tokens, and security-related data
• Cookies and Tracking: Information collected through cookies, web beacons, pixels, and similar tracking technologies (see our Cookie Policy )

2.3. Information from Third Parties:

• Google OAuth: When you sign in with Google, we receive your email address, name, and profile picture
• Payment Processors: Stripe provides us with payment confirmation and transaction details
• Shipping Carriers: Tracking information and delivery status from shipping partners
• Social Media: If you connect your social media accounts, we may receive profile information (with your consent)

3. How We Use Your Information

We use the information we collect for various purposes, including:

3.1. Service Provision:

• Process and fulfill your orders, including custom and personalized products
• Create, store, and manage your custom designs and 3D models
• Provide 3D customization tools and design services
• Manage your account and authenticate your identity
• Process payments and handle billing
• Coordinate shipping and delivery

3.2. Communications:

• Send order confirmations, shipping updates, and delivery notifications
• Respond to your inquiries, support requests, and customer service communications
• Send you marketing communications and promotional offers (with your consent)
• Notify you about changes to our Service, policies, or terms
• Send important account and security notifications

3.3. Service Improvement:

• Analyze usage patterns and user behavior to improve our Service
• Develop new features and enhance existing functionality
• Personalize your experience and provide relevant content
• Conduct research and analytics to understand user preferences

3.4. Security and Legal:

• Detect, prevent, and address fraud, security threats, and unauthorized access
• Comply with legal obligations and respond to legal requests
• Enforce our Terms of Service and other policies
• Protect our rights, property, and the safety of our users
• Investigate and resolve disputes

3.5. Legal Basis for Processing (GDPR):

For users in the European Economic Area (EEA), we process your personal data based on the following legal bases:

• Contract Performance: To fulfill our contract with you (processing orders, providing services)
• Legitimate Interests: To improve our Service, prevent fraud, and ensure security
• Consent: For marketing communications and non-essential cookies (you can withdraw consent at any time)
• Legal Obligation: To comply with applicable laws and regulations

4. Information Sharing and Disclosure

We do not sell your personal information. We may share your information only in the following circumstances:

4.1. Service Providers:

We share information with trusted third-party service providers who assist us in operating our Service, conducting our business, or serving our users. These service providers are contractually obligated to protect your information and use it only for the purposes we specify:

• Stripe: Payment processing, fraud prevention, and payment security. Stripe's use of your information is governed by their Privacy Policy
• Cloudinary: Secure storage, processing, and delivery of your images, design files, and 3D models. Cloudinary's use of your information is governed by their Privacy Policy
• Resend: Email delivery services for transactional and marketing emails. Resend's use of your information is governed by their Privacy Policy
• Google: Authentication services (OAuth) and analytics (if enabled). Google's use of your information is governed by their Privacy Policy
• Google Cloud Platform: Secure hosting, data storage, and cloud computing services
• Shipping Carriers: Delivery services, including UPS, FedEx, USPS, and DHL, for order fulfillment and tracking

4.2. Legal Requirements:

• When required by law, court order, or government regulation
• To respond to legal process, such as subpoenas or warrants
• To protect our rights, property, or safety, or that of our users or others
• To investigate fraud, security threats, or violations of our Terms of Service
• In connection with a merger, acquisition, or sale of assets (with notice to users)

4.3. With Your Consent:

We may share your information with other parties when you explicitly consent to such sharing, such as when you authorize integration with third-party services or participate in promotional programs.

4.4. Business Transfers:

In the event of a merger, acquisition, reorganization, bankruptcy, or sale of assets, your information may be transferred to the acquiring entity. We will notify you of any such change in ownership or control of your personal information.

5. Data Security

We implement industry-standard technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. Our security measures include:

• Encryption: We use SSL/TLS encryption for data transmission and encrypt sensitive data at rest
• Access Controls: We limit access to personal information to authorized employees, contractors, and agents who need such access to perform their duties
• Secure Payment Processing: Payment information is processed through PCI DSS-compliant payment processors (Stripe)
• Regular Security Audits: We conduct regular security assessments and vulnerability testing
• Secure Infrastructure: Our Service is hosted on secure cloud infrastructure with robust security controls
• Data Backup: We maintain regular backups of data to prevent data loss
• Incident Response: We have procedures in place to detect, respond to, and recover from security incidents

Important: While we implement reasonable security measures, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security of your information. You are responsible for maintaining the confidentiality of your account credentials.

5.1. Data Breach Notification:

In the event of a data breach that may affect your personal information, we will notify you and relevant authorities as required by applicable law. We will provide notice without undue delay and in accordance with legal requirements, typically within 72 hours of becoming aware of the breach (as required by GDPR).

6. Cookies and Tracking Technologies

We use cookies, web beacons, pixels, and similar tracking technologies to collect and store information about your use of our Service. For detailed information about our use of cookies, please see our Cookie Policy .

You can control cookies through our cookie consent banner or your browser settings. However, disabling certain cookies may limit your ability to use some features of our Service.

7. Google OAuth Integration

When you choose to sign in with Google, we receive limited information from your Google account, including your email address, name, and profile picture. We use this information solely for authentication and account creation purposes.

We do not access, store, or use any other data from your Google account beyond what is necessary for authentication. Your use of Google's authentication services is also subject to Google's Privacy Policy and Terms of Service .

8. Email Communications

We use Resend email services to send you various types of communications:

• Transactional Emails: Order confirmations, shipping updates, account notifications, password resets, and other service-related communications (these cannot be unsubscribed from as they are necessary for service delivery)
• Marketing Emails: Product updates, promotional offers, newsletters, and marketing communications (only if you opt-in)
• Support Communications: Responses to your inquiries, support requests, and customer service communications

You can unsubscribe from promotional/marketing emails at any time by clicking the unsubscribe link provided in the email or by updating your preferences in your account settings. Unsubscribing from marketing emails will not affect transactional emails.

9. Data Retention

We retain your personal information for as long as necessary to provide our services, fulfill the purposes outlined in this policy, comply with legal obligations, resolve disputes, and enforce our agreements. Specific retention periods:

• Account Information: Until account deletion or 3 years of inactivity, whichever comes first
• Order Data: 7 years for tax, accounting, and business record purposes (as required by law)
• Payment Information: Payment data is processed by Stripe and retained according to their policies and legal requirements
• Custom Designs and 3D Models: Until account deletion or 2 years of inactivity, whichever comes first
• Customer Service Communications: 3 years from the date of last communication
• Marketing Preferences: Until you opt-out or account deletion
• Analytics Data: 2 years (if analytics are enabled)
• Security Logs: 1 year for security monitoring and fraud prevention
• Legal Records: As required by applicable law or for the duration of any legal proceedings

After the retention period expires, we will securely delete or anonymize your personal information, except where we are required to retain it for legal purposes.

10. Your Privacy Rights

Depending on your location, you may have certain rights regarding your personal information. We are committed to honoring these rights.

10.1. GDPR Rights (EU/EEA Residents):

If you are located in the European Economic Area (EEA), you have the following rights under the General Data Protection Regulation (GDPR):

• Right of Access: You can request a copy of the personal data we hold about you
• Right to Rectification: You can request correction of inaccurate or incomplete personal data
• Right to Erasure ("Right to be Forgotten"): You can request deletion of your personal data in certain circumstances
• Right to Restrict Processing: You can request that we limit how we use your personal data
• Right to Data Portability: You can request a copy of your data in a structured, machine-readable format
• Right to Object: You can object to processing of your personal data for certain purposes
• Right to Withdraw Consent: You can withdraw consent at any time where processing is based on consent
• Right to Lodge a Complaint: You have the right to file a complaint with your local data protection authority

10.2. CCPA Rights (California Residents):

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA):

• Right to Know: You can request information about what personal information we collect, use, disclose, and sell
• Right to Delete: You can request deletion of your personal information (subject to certain exceptions)
• Right to Opt-Out: You can opt-out of the sale of personal information (we do not sell personal information)
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights
• Right to Correct: You can request correction of inaccurate personal information

10.3. How to Exercise Your Rights:

To exercise any of these rights, please contact us using one of the following methods:

• Contact us through our Contact Page and specify your privacy request
• Update your preferences in your account settings (for certain rights)
• Use the contact form on our website to submit data subject requests

We will respond to your request within 30 days (or as required by applicable law). We may need to verify your identity before processing your request to protect your privacy and security.

Note: Some rights may be limited or unavailable in certain circumstances, such as when we need to retain information for legal compliance or to complete a transaction you have requested.

11. Children's Privacy (COPPA)

Our Service is not intended for children under the age of 13 (or 16 in the EEA). We do not knowingly collect, use, or disclose personal information from children under 13 (or 16 in the EEA) without verifiable parental consent.

If we become aware that we have collected personal information from a child under 13 (or 16 in the EEA) without verifiable parental consent, we will take steps to delete such information as soon as possible. If you believe we have collected information from a child under 13 (or 16 in the EEA), please contact us immediately.

We comply with the Children's Online Privacy Protection Act (COPPA) in the United States and similar laws in other jurisdictions.

12. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence, including the United States and other countries where our service providers operate. These countries may have data protection laws that differ from those in your country.

When we transfer personal information from the EEA to countries outside the EEA, we ensure appropriate safeguards are in place, including:

• Standard Contractual Clauses approved by the European Commission
• Adequacy decisions by the European Commission
• Other appropriate safeguards as required by applicable law

By using our Service, you consent to the transfer of your information to countries outside your country of residence, including the United States, where data protection laws may differ.

13. Third-Party Links and Services

Our Service may contain links to third-party websites, services, or applications that are not owned or controlled by us. This Privacy Policy does not apply to such third-party services. We are not responsible for the privacy practices of third parties.

We encourage you to review the privacy policies of any third-party services you access through our Service. Your interactions with third-party services are subject to their respective privacy policies and terms of service.

14. Do Not Track Signals

Some browsers include a "Do Not Track" (DNT) feature that signals to websites you visit that you do not want to have your online activity tracked. Currently, there is no uniform standard for recognizing and responding to DNT signals. As such, we do not currently respond to DNT browser signals or mechanisms.

However, you can control tracking through our cookie consent banner and your browser settings. For more information, see our Cookie Policy .

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by:

• Posting the updated Privacy Policy on this page with a new "Last updated" date
• Sending you an email notification (if you have an account with us)
• Displaying a prominent notice on our Service

Your continued use of our Service after any changes to this Privacy Policy constitutes your acceptance of the updated policy. If you do not agree with the changes, you should discontinue use of our Service and contact us to delete your account.

We encourage you to review this Privacy Policy periodically to stay informed about how we collect, use, and protect your information.

16. Data Controller Information

For purposes of GDPR, Dynamix Services LLC, a limited liability company registered in North Carolina, USA, operating under the brand name "Dynamix", is the data controller responsible for your personal information. If you have questions or concerns about how we process your personal information, you can contact us using the information provided in the "Contact Us" section below.

17. Contact Us

Company Information: Dynamix Services LLC is a limited liability company registered in North Carolina, USA, operating under the brand name "Dynamix".

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Privacy Inquiries

For privacy-related questions, data subject requests, or to exercise your privacy rights, please contact us through our contact page. When submitting your request, please specify that it is a privacy request or data subject request so we can route it to the appropriate team.

Visit our Contact Page to submit your privacy inquiry or data subject request.

We are committed to resolving any privacy concerns you may have and will respond to your inquiries in a timely manner, typically within 30 days of receiving your request.