Privacy Policy

This Privacy Policy describes how OpusFab Pte Ltd ("we", "us", or "our") collects, uses, stores, and protects your personal information when you visit or use our website and automated CNC quoting services. We are committed to protecting your privacy and handling your data transparently and responsibly.

1. Intellectual Property & CAD Files

As a software-first prototyping partner, we understand that your CAD data is your most valuable asset. Unlike brokers who distribute your files across multiple third-party shops:

• Your STEP/CAD files are processed on our secure proprietary software.
• Files are only transmitted to our owned and operated manufacturing facility in Shantou, China.
• We do not sell, license, or share your designs with any third-party marketing entities or external manufacturers.
• Your files are deleted from our system upon your request, subject only to legal or regulatory hold requirements.

2. Information We Collect

We collect information that identifies, relates to, or could reasonably be linked to you or your business:

2.1 Information You Provide Directly

• Account Information: Name, work email address, company name, phone number, billing address, and password.
• Project Data: CAD files (STEP), material specifications, finishing requirements, and order notes.
• Communication Data: Emails, messages, support inquiries, and feedback you send us.

2.2 Information Collected Automatically

• Usage Data: How you interact with our quoting engine and platform, including pages visited, features used, and time spent.
• Device Information: IP address, browser type and version, operating system, device type, screen resolution, and language preferences.
• Log Data: Timestamps, request URLs, HTTP status codes, and referral sources.

2.3 Cookies and Similar Technologies

We use cookies and similar tracking technologies to:

• Authenticate users and maintain session state
• Remember your preferences and settings
• Analyse platform usage to improve functionality
• Detect and prevent fraud and security incidents

You can control cookie preferences through your browser settings. Disabling essential cookies may affect the functionality of our Services.

3. How We Use Your Information

We use the collected data to provide our core services, including:

• Generating automated, binding CNC quotes based on our 12 years of facility data.
• Executing the manufacturing and delivery of physical prototypes.
• Managing your account, processing payments, and communicating about your orders.
• Improving our DFM analysis software and platform features.
• Providing technical support from our engineering teams.
• Detecting, investigating, and preventing fraud, security breaches, and prohibited activity.
• Complying with legal obligations, including tax, accounting, and regulatory requirements.

4. Third-Party Processors and Service Providers

We engage carefully selected third-party service providers to perform functions on our behalf. These providers have access to personal data only to the extent necessary to perform their services and are contractually obligated to protect it:

• Payment Processing: Stripe, Inc. processes all credit card, debit card, and bank transfer payments. Payment data is handled in accordance with PCI DSS standards. We do not store full card numbers on our servers.
• Cloud Infrastructure: Our platform is hosted on Cloudflare Pages and Workers. Data is stored and processed in accordance with their security and privacy standards.
• Shipping and Logistics: We share delivery addresses and contact information with courier and freight companies (e.g. DHL, FedEx, SF Express) solely for the purpose of delivering your parts.
• Email and Communications: We may use third-party email service providers to send order confirmations, shipping notifications, and support responses.
• Analytics: We use analytics tools to understand platform usage and improve our Services.

We do not sell, rent, or trade your personal data to third parties for their own marketing purposes.

5. Data Storage, Security, and Cross-Border Transfers

OpusFab Pte Ltd is a Singapore-registered company (68 Circular Road, #02-01, Singapore 049422). While your physical parts are manufactured in our China facility, all digital data is managed through secure protocols.

Cross-border data transfers: Your personal data and CAD files may be transferred from Singapore to our manufacturing facility in Shantou, China, for the sole purpose of producing your order. We implement appropriate safeguards for such transfers, including encryption in transit and access controls.

Security measures: We implement industry-standard technical and organisational measures to protect your data, including:

• TLS/SSL encryption for all data transmitted between your browser and our servers
• Encrypted storage for sensitive data at rest
• Role-based access controls limiting who can access your CAD files
• Regular security assessments and monitoring
• Staff training on data protection and confidentiality

No security system is impenetrable. While we strive to protect your data, we cannot guarantee absolute security.

6. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law:

• Account data: Retained until you close your account, or until 2 years of inactivity, whichever is later.
• CAD files and project data: Retained for 90 days after order completion, unless you request earlier deletion.
• Transaction records: Retained for a minimum of 5 years per Singapore tax and accounting requirements.
• Communication records: Retained for 3 years for customer service and dispute resolution purposes.
• Log and analytics data: Retained for 12 months, after which it is anonymised or deleted.

7. Your Rights and Choices

Under the Singapore Personal Data Protection Act (PDPA) 2012 and applicable data protection laws, you have the following rights:

• Access: You may request a copy of the personal data we hold about you.
• Correction: You may request that we correct inaccurate or incomplete personal data.
• Deletion: You may request deletion of your personal data and CAD files, subject to legal or regulatory retention requirements.
• Portability: You may request your data in a structured, commonly used format.
• Withdraw Consent: You may withdraw consent for marketing communications or optional data processing at any time.
• Object: You may object to certain types of processing, such as analytics that are not essential to service delivery.

To exercise any of these rights, please contact our Data Protection Officer at [email protected]. We will respond to your request within 30 days.

8. Data Breach Notification

In the unlikely event of a data breach that affects your personal data, we will:

• Investigate the breach promptly to assess its scope and impact
• Notify the Personal Data Protection Commission of Singapore (PDPC) as required by law
• Notify affected users without undue delay if the breach is likely to result in significant harm
• Take remedial measures to prevent recurrence

9. Children's Privacy

Our Services are not directed to individuals under the age of 18. We do not knowingly collect personal data from children.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service offerings. We will notify you of material changes by posting the updated policy on our website and updating the "Last updated" date.

11. Contact Us

If you have questions about this policy, wish to exercise your data protection rights, or have concerns about our data handling practices, please contact our Data Protection Officer: