Privacy policy

Draft: this page is being reviewed and may change before Nozzlet opens. Questions? Use our contact form.

Last updated: October 1, 2026

This policy explains how IAPZ Technology Inc. ("Nozzlet", "we", "us") collects, uses, shares, and protects personal information when you use nozzlet.com, nozzlet.ca, Nozzlet Works (app.nozzlet.com), and our other services, and the choices and rights you have.

In short:

  • We collect what we need to run the directory, connect customers with makers, and keep Nozzlet safe.
  • We don't sell your personal information.
  • Your design files stay private unless you choose to share them.
  • Your Nozzlet Works business records are private to your business. We don't publish, sell, or share them, and we don't use them to train AI models.
  • Our website statistics don't use cookies or follow you across other sites.
  • You can download your data or delete your account at any time.

1. Information we collect

Information you give us

  • Account details: name, email, password (stored only in scrambled, "hashed" form), country, language, and optionally your city or postal/ZIP code and phone number.
  • If you sign in with Google: your name, email, and profile picture from Google.
  • Makers: business name, address, business phone, website and social links, services, materials, photos, descriptions, hours, and availability. Home-based makers' street addresses are never shown publicly.
  • Verification: confirmation codes sent to your phone; for the Verified badge, claims, or licensed categories, business registration details and documents you upload (such as a business licence or proof of address).
  • Customer projects: requests, descriptions, and 3D files you upload.
  • Messages between customers and makers, reviews, and reports you send us.
  • Advertisers: company details and ad content.
  • Support requests and anything you tell us when you contact us.
  • Nozzlet Works: your shop setup (printers, filaments, supplies, and shop rates such as electricity and labour), products and their costs and prices, inventory, jobs and schedules, and maintenance records. If you use Works to keep records about your own customers or orders, we store those for you too (see Section 4).
  • Waitlists: email, country, and what you're signing up for (for example Nozzlet Works early access, or being told when Nozzlet launches in your country).

Information collected automatically

  • Device and usage information: browser, device type, pages viewed, searches, and actions on the site. Our site statistics tool (Cloudflare Web Analytics) counts visits without cookies and without identifying you.
  • Approximate location: from your IP address, or your device's location if you allow it, to show nearby makers.
  • Cookies and similar technologies: see Section 9.
  • Security information: sign-in times, IP addresses and the browsers you sign in from (to send new-device alerts), and scrambled fingerprints of email and IP addresses used to limit repeated sign-in attempts. We can't turn these fingerprints back into an address.

Information from others

  • Payment providers (Stripe and PayPal) tell us whether a payment succeeded and give us limited details such as the card's last four digits and expiry date. We never receive or store full card numbers.
  • Publicly available business information used to create unclaimed business listings (business name, city, services, website, business phone). We don't create unclaimed listings for home-based businesses.

2. How we use your information

We use personal information to:

  • create and manage accounts, and verify emails, phones, and businesses;
  • show listings and search results, including by location, and match files and requests with suitable makers;
  • deliver messages, requests, bids, review requests, and notifications by email, on-site, and (for makers who opt in) by text;
  • run Nozzlet Works for your business: calculate costs and suggested prices, track filament and supplies, schedule jobs, and send maintenance reminders;
  • if you use both Nozzlet Works and the directory, produce automatic quotes for customers from your Works costs, only when you choose to offer them;
  • process subscriptions and ad payments, and send receipts and billing notices;
  • keep Nozzlet safe: prevent spam, fraud, and abuse; review reports; enforce our terms and policies. This includes automated checks, some using artificial intelligence, on listings, photos, ads, reviews, requests, and messages to spot spam, scams, abuse, and prohibited content. When a message is flagged, we may warn the recipient and our team may see the flagged part of the message and the sender's account; full conversations are only reviewed by our team if a participant reports them. Automated checks may hold content for review by our team, but decisions to suspend or close accounts are always made by a person;
  • provide support;
  • improve Nozzlet, including measuring which features are used (using summarized or de-identified data where possible);
  • send waitlist updates you asked for, and marketing and news only if you've opted in (you can unsubscribe any time);
  • meet legal obligations, such as tax and accounting records.

We rely on your consent for these uses (express consent where required, for example for marketing emails and text alerts), and where permitted by law, on our legitimate business needs or legal obligations.

3. Your design files

  • When you post a request for bid, makers see a preview only (a 3D view with size and volume). They can't download your file.
  • A maker can download your file only after you mark their bid In discussion, or when you send a request directly to them.
  • If you mark a request Confidential, no preview is shown and your file is shared only with makers you choose.
  • Files are deleted automatically 90 days after a request is closed or accepted, and you can delete them sooner.
  • Files attached to messages (3D models, photos, and PDFs) can be opened only by the two sides of that conversation, through links that work for a few minutes. Photos are saved again without hidden details such as GPS location. Message files are deleted 12 months after the conversation's last message.
  • Makers who download your file are responsible for handling it only for your job.
  • We don't use your files for marketing or to train AI models.

4. Your Nozzlet Works business data

  • Your Works records (costs, rates, prices, inventory, jobs, schedules, and any customer and order records) are private to your business and the staff you invite.
  • Nothing from Works appears on the public directory unless you choose it, for example quote prices worked out from your costs.
  • Our team doesn't browse your Works records. Our admin tools show only summary counts (such as how many printers or jobs an account has). We look at your actual records only when needed to help you with a support request, fix a problem, or meet a legal obligation, and every such access is logged.
  • We don't sell your Works data, share it with other businesses, or use it to train AI models.
  • Your customers' information: if you store details about your own customers in Works (such as names, contact details, or orders), you decide what to store and why, and you're responsible for having their permission and handling it under privacy law. We store and protect it only to provide Works to you, and we don't contact your customers or use their information for anything else.
  • You can export your Works data while your subscription is active, or delete it at any time (Section 11). If your Works subscription lapses or ends, access is paused, and your Works records are kept for 12 months and then deleted (Section 8).

5. What others can see

  • Public: maker listings (including business name, city, services, materials, photos, and reviews). Some details, such as phone, website, and social links, are shown only to signed-in users and only on certain plans.
  • Customers' names appear to makers they contact, and a customer's first name and review appear publicly on reviews they post.
  • Your email address and phone number are never shown to other users through Nozzlet messaging or text alerts.

6. Who we share information with

We don't sell personal information and don't share it for others' advertising.

We share information only:

  • With other users, as described in Sections 3 and 5.
  • With service providers who help us run Nozzlet, under contracts that require them to protect it and use it only for us:
Provider What they do
DigitalOcean Hosting and database
Cloudflare File storage (photos and message files, Cloudflare R2), bot protection (Turnstile), site security, and website statistics (Cloudflare Web Analytics, no cookies)
Stripe Subscription and ad payments, tax calculation
Resend Sending emails
Google "Sign in with Google", and the maps on some shop pages (Google Maps)
Have I Been Pwned Checking that a new password hasn't appeared in a known data breach (only the first few characters of a scrambled version of the password are sent, never the password)
OpenStreetMap Map data, and finding a shop's map location from its address (storefront addresses only; home-based shops are placed at their city's centre and their address isn't sent)

We'll add providers here before we start using them (for example, for text messages or automated content checks).

  • For legal reasons: to comply with the law, respond to valid legal requests, protect people's safety, or enforce our terms.
  • In a business transfer: if Nozzlet is sold or reorganized, information may be transferred to the new owner, who must continue to protect it.

7. Where your information is stored

Nozzlet is based in British Columbia, Canada. Your information, including Nozzlet Works data, is stored with DigitalOcean in Toronto, Canada. Photos and files are stored with Cloudflare (R2), in its Eastern North America region, which may be in Canada or the United States. Some service providers process information in Canada, the United States, or other countries. When information is stored or processed outside your province, state, or country, it may be subject to the laws of that place, including access by authorities there. We choose providers with strong protections and use contracts to protect your information.

8. How long we keep information

Information Kept for
Uploaded design files Deleted 90 days after a request closes or is accepted, or sooner if you delete them
Account and listing information While your account is open
Nozzlet Works records While your Works subscription is active, or while you use the free plan. If a subscription lapses or ends, or a free account goes 12 months without a sign-in, kept for 12 months (with email reminders 30, 15, and 5 days before deletion), then deleted. Deleted sooner if you delete them or ask us to
Messages and requests While your account is open (messages stay visible to the other person in the conversation)
Files attached to messages 12 months after the conversation's last message
Sign-in protection records (fingerprints of email and IP addresses) Up to 1 day for counting attempts; up to 90 days for records of blocked attempts
Verification documents (business licence, proof of address) Deleted within 90 days of our decision; we keep a record that verification happened
Payment and tax records As long as tax laws require (typically up to 7 years)
Security and audit logs Up to 12 months, longer if needed for an investigation
Backups Up to 35 days, then overwritten
Waitlist details Until you unsubscribe, or until the waitlist ends (for example, Nozzlet Works opens to everyone or we launch in your country) and you don't sign up

When you delete your account, we delete or de-identify your personal information within 30 days, except what we must keep for legal reasons, and backups, which expire on their normal schedule.

9. Cookies

We use cookies only to:

  • keep you signed in and secure, including across nozzlet.com and app.nozzlet.com (essential, always on);
  • remember your language, country, units, and search settings (preferences).

Maps: some shop pages show a Google map, which loads when you scroll to it. When it loads, Google may set its own cookies and receive your IP address, under Google's privacy policy. We don't use these for advertising.

We don't use cookies for statistics. Our website statistics (Cloudflare Web Analytics) count visits without cookies and without identifying you. We don't use advertising or tracking cookies from ad networks. You can clear or block cookies in your browser, but you'll need essential cookies to sign in.

10. How we protect your information

We use industry-standard safeguards, including encrypted connections (HTTPS), encryption of stored data, hashed passwords, optional two-step verification (required for our admins), access limited to staff who need it, audit logs of admin actions, checking that uploaded files are what they claim to be, refusing passwords known from data breaches, and removing hidden location data from photos. No system is perfectly secure; if a privacy breach creates a real risk of significant harm, we'll notify you and the authorities as the law requires.

11. Your choices and rights

Depending on where you live, you have the right to:

  • access the personal information we hold about you, and get a copy, including your Nozzlet Works records (use My account → Privacy and your data → Download my data);
  • correct inaccurate information (most details can be edited in your account);
  • delete your account and information (My account → Privacy and your data → Delete my account);
  • withdraw consent, for example to marketing emails or text alerts, at any time;
  • in some places, data portability, to know how automated decisions are made, and to not be discriminated against for using your rights.

Canada: you have rights under federal and provincial privacy laws (including PIPEDA, BC's PIPA, and Quebec's Law 25). You can also complain to the Office of the Privacy Commissioner of Canada or your provincial privacy commissioner.

United States: residents of some states (for example California) have additional rights under state privacy laws. We don't sell or "share" personal information for cross-context advertising.

To use your rights or ask a question, contact us (Section 14). We'll respond within the time required by law (usually within 30 days) and may need to confirm your identity first.

12. Marketing and text messages

  • Marketing emails are sent only with your consent, and every one has an unsubscribe link.
  • Account, security, billing, and activity emails (such as new messages or bids) are part of the service.
  • Text alerts are only for makers on Pro or Premium who turn them on. Reply STOP to stop them at any time. Verification codes are sent when you request them.

13. Children

Nozzlet is for people 18 and older (or the age of majority where they live). We don't knowingly collect information from anyone younger. If you believe a young person has created an account, contact us and we'll delete it.

14. Contact us

Person in charge of the protection of personal information: President
IAPZ Technology Inc.
British Columbia, Canada
Contact: our contact form (choose "Privacy or data request")

15. Changes to this policy

We may update this policy. We'll post the new version here with its date and, for important changes, notify you by email or in the app before they take effect.