What we collect, why, where it lives, and how to get it corrected or deleted — in plain English first, full detail below.
Last updated · 13 June 2026We collect what's needed to quote, print, ship and support your order: your name, email, delivery address, your uploaded 3D files, and order history.
Card details go straight to Stripe — we never see or store full card numbers.
Your 3D files stay private. We never print, share or remix your designs for anyone else, and we delete them on request.
We never sell or trade your personal information. Ever.
Marketing email is opt-out-anytime: every promotional email has an unsubscribe link, honoured within 5 business days. Order emails (receipts, tracking) are separate and contain no marketing.
To access, correct or delete your data: email hello@assysts.com.
Assysts Labs (ABN 32 349 037 986), trading as ASSYSTS ("we", "us") is a Sydney-based digital manufacturing business that 3D prints custom parts ordered through assysts.com. We manage personal information in line with the Australian Privacy Principles in the Privacy Act 1988 (Cth).
Contact for anything in this policy: hello@assysts.com.
Account details — your name, email address, and a securely hashed password; or, if you sign in with Google, the name, email address and profile picture Google provides. Optionally, a company name and phone number.
Order and quote details — the parts you've priced and ordered, materials, quantities, prices, and order status history.
Uploaded files — the 3D models (STL, STEP, 3MF) and notes you upload for quoting and printing. These may embed information you consider commercially sensitive; we treat all uploads as confidential.
Delivery details — recipient name, shipping address, and phone number for the carrier.
Payment metadata — payment status, amount, card brand and last four digits, as reported to us by Stripe. Full card numbers and bank credentials are collected by Stripe directly and never touch our systems.
Support correspondence — emails and contact-form messages you send us.
Technical data — IP address, browser and device information, and the cookies needed to keep you signed in.
Marketing preferences — whether you've opted in or out of promotional email.
We don't seek sensitive information (such as health or biometric data), and you can browse the site and price a part without creating an account.
Directly from you — when you create an account, upload a file, place an order, or contact us.
Automatically — essential cookies and server logs generated as you use the site.
From third parties — Google (your basic profile, when you choose Google sign-in) and Stripe (payment confirmations and payment status).
To quote, manufacture, quality-check, pack and ship your parts.
To run your account, take payment, and issue tax invoices.
To send service messages about your orders — confirmations, payment status, dispatch and tracking.
To answer questions and provide support.
To send promotional email such as offers and reminders, only as described in the marketing section below.
To prevent fraud and meet legal obligations, including tax record-keeping.
Our application runs on Vercel; customer data is stored in a Neon-hosted Postgres database located in Sydney, Australia, and uploaded model files are stored in Vercel's private blob storage. Some processing by the providers listed below happens in the United States.
Everything moves over TLS. Passwords are stored hashed, never in plain text. Access to production systems is limited to the people who run the business, and uploaded files are opened only to slice, price, print and inspect your order.
We keep order records as long as needed for tax and warranty purposes (Australian tax records: five years). Uploaded model files for quotes that don't become orders are cleaned up automatically; you can also ask us to delete your files or your whole account at any time.
Your core data is stored in Australia (our database runs in Sydney). However, some of the providers above — Stripe, Vercel, Resend and Google — are United States companies and process data in the United States (and, in some cases, other regions where they operate infrastructure). By using the site you acknowledge this processing. Each provider is bound by its own data processing agreement and security certifications.
If you've bought from us or opted in, we may send occasional promotional email — things like new materials, capability launches, or reminders about a quote you priced. We follow the Spam Act 2003:
Every marketing email identifies ASSYSTS as the sender and includes working contact details.
Every marketing email contains an unsubscribe link that works without logging in, and opt-outs are honoured within 5 business days.
Order and account emails (receipts, payment status, dispatch tracking, password resets) are service messages, not marketing — they're sent regardless of marketing preferences and contain no promotional content.
To stop marketing email at any time: click unsubscribe in any message, or email hello@assysts.com.
If you sign in with Google, we receive your name, email address and profile picture from your Google account. We use this solely to create and authenticate your ASSYSTS account, store it in our database alongside your orders, and never use it for advertising, never sell it, and never share it beyond the service providers listed above. You can delete it by deleting your account.
Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.
You can see and update your details and orders from your dashboard. For a copy of the personal information we hold about you, a correction, or deletion of your files or account, email hello@assysts.com — it's free, and we'll respond within 30 days (almost always much faster). Note that we may need to keep basic transaction records for tax law even after an account is deleted.
If a data breach is likely to result in serious harm, we will assess it promptly and notify affected people and the Office of the Australian Information Commissioner, consistent with the Notifiable Data Breaches scheme.
If you think we've mishandled your information, email hello@assysts.com with the details and we'll respond within 30 days. If you're not satisfied with our response, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.
When this policy changes, the date at the top changes with it, and material changes will be flagged to account holders by email. The current version always lives at assysts.com/privacy.
Questions about this document? Email hello@assysts.com — you'll get an answer from a person, within one business day.