Privacy Policy

How this policy applies

Plain-language scope

This policy covers the website, customer accounts, quote requests, published quotes, and support contact available now.

Slicer3DLab is based in Brisbane, Queensland, Australia.

We use Australian Privacy Principle-informed practices and comply with the Privacy Act 1988 (Cth) where it applies to us.

Personal information we collect

Contact details you provide, including your name, email, optional phone number, optional business name, and enquiry message.
Quote details, including product category, intended use, project idea, requested wording, quantity, deadline, optional material, optional approximate budget, reference URL, and consent to be contacted.
Account and profile details, including email, optional name, phone, business name, Australian address fields, provider user identifier, email-verification state, and account-setting activity.
Quote workspace records, including customer revisions, status history, published price, lead time, expiry, approval or withdrawal decisions, and customer-visible messages.
Administrative records needed to review a quote, including staff actions, internal notes, and communication status. Internal notes are not shown in customer account responses.
Basic technical information needed to operate and protect the service, such as request timing, IP-derived rate-limit data, browser or device information available in ordinary server logs, error diagnostics, and authentication cookies.

How we collect it

We collect information directly when you submit a form, create or use an account, update your profile, revise a quote request, approve or withdraw a quote, email us, or otherwise contact us.

Our hosting, authentication, and security services also create ordinary technical and session records when you use the website. We do not currently run a marketing analytics or advertising tracker.

Why we use personal information

To respond to an enquiry, review a project, ask for missing details, prepare or revise a quote, and record a customer decision.
To use an optional approximate budget as planning context only; it does not automatically calculate or cap the final quote.
To create and secure your account, verify ownership, keep your profile current, and show only quotes that belong to you.
To maintain accurate business, support, security, audit, and dispute records.
To validate requests, rate-limit public write endpoints, investigate errors, prevent misuse, and protect customers and the service.
To improve the clarity and reliability of the website and quote workflow. We do not sell personal information.

Storage and service providers

Vercel hosts and delivers the Next.js website and may process ordinary request, security, and diagnostic data.
Neon stores application-owned quote, profile, audit, and communication records in Postgres.
Neon Auth processes email/password registration, email verification, login, recovery, sessions, and account settings. Slicer3DLab application tables do not store your password or copy provider session tables.
The mailbox used for hello@slicer3dlab.au processes messages sent to that address in the ordinary way.
A server-only Resend integration exists for authorised contact and transactional quote messages, but production sending is not active. If a message is sent through it, Resend processes the sender and recipient addresses, message content, and delivery metadata needed to provide that service.

What is not active

There is no live checkout, payment capture, Stripe payment flow, or trusted order and delivery history.
There is no customer file upload flow. Future private uploads must use controlled server-issued access and private storage.
There is no newsletter, behavioural advertising profile, production analytics package, AI assistant, or ChatGPT app data flow.
Cloudflare R2, Stripe, OpenAI, and ChatGPT do not currently receive customer data through the public service.

When we disclose information

To the service providers described above, only as needed to host, authenticate, store, secure, or communicate about the service.
To professional advisers, insurers, regulators, courts, law enforcement, or other parties where reasonably necessary or required by law.
In connection with a genuine business restructure or transfer, subject to appropriate confidentiality and legal obligations.
With another party when you direct us or give informed consent. We do not sell personal information.

Retention, access, correction, and deletion

We keep personal information only while it is reasonably needed for an enquiry, quote, account, support, security, audit, dispute, or legal purpose.
Quote requests, revisions, published quotes, decisions, and audit history are durable business records. Contact-form messages are not currently stored in the application database.
Neon Auth retains provider-managed account and session records, while Slicer3DLab retains the application profile and quote records needed for the customer workspace.
You can ask to access, correct, or delete personal information by contacting hello@slicer3dlab.au. We may verify your identity first and may retain records where reasonably required by law, security, accounting, dispute, or legitimate operational needs.

Security and overseas processing

Provider credentials and database access stay on the server. Browser submissions use same-origin routes with validation, safe response shapes, and rate limiting.
Protected pages recheck the authenticated session, customer quote lookups are owner-scoped, and administrator operations require a separate active administrator record.
No online service is completely risk-free. We use reasonable technical and organisational safeguards and respond to suspected data incidents. We will notify affected people and regulators where the law requires.
Vercel, Neon, Neon Auth, Resend, and mailbox providers may use infrastructure in Australia and overseas. Final production regions and any practicable country disclosures must be confirmed before public launch and updated here if they change.

Children and sensitive information

The website and account service are intended for adults and for young people using them with a parent or guardian. Do not submit unnecessary sensitive information or private details about a child.

Personalised products may include a name or gift wording. Provide only the information needed for the requested design and review.

Questions and complaints

Send privacy questions, access or correction requests, and complaints to hello@slicer3dlab.au. Please explain what happened and how we can contact you. We will review the matter and respond within a reasonable time.

If the Privacy Act applies to the matter and you are not satisfied with our response, you may be able to complain to the Office of the Australian Information Commissioner.

Changes to this policy

We may update this policy when our information handling changes. The date at the top shows the current version.

Before enabling uploads, payments, analytics, marketing, AI, ChatGPT, or another material provider flow, we must update this policy to describe the real collection, use, disclosure, retention, and overseas processing involved.