Privacy Policy

This Privacy Policy explains how Nozzl ("Nozzl", "we", "us" or "our") collects, uses, discloses, and protects personal data when you access or use the Nozzl print-farm management platform, the website at nozzl.cloud, the desktop local agent, and any related applications, APIs, and services (collectively, the "Service"). It forms part of, and is incorporated by reference into, our Terms of Service. By using the Service, you acknowledge that you have read and understood this Policy.

1. Who We Are

Nozzl provides a multi-tenant platform for monitoring, controlling, and managing 3D printers and print farms. For personal data processed about you in connection with the Service, Nozzl acts as the data controller. Where you use the Service to process personal data about your own customers or team members, you are the controller and Nozzl acts as your processor.

2. Information We Collect

We collect the following categories of information:

• Account information: your name, email address, password (stored hashed), organization details, and role.
• Billing information: plan, subscription status, and billing identifiers. Card details are handled by our payment processor and are never stored on our servers.
• Content and configuration: the models, designs, files, printer configurations, queues, orders, and other materials you upload or generate ("Customer Content").
• Printer and telemetry data: printer status, job progress, temperatures, logs, and events reported by connected cloud or local (LAN) printers.
• Usage and device data: log data, IP address, browser and device information, and interactions with the Service, collected to operate and secure the platform.
• Communications: messages you send to our support team and related correspondence.

3. How We Use Information

We use personal data to:

• provide, operate, maintain, and secure the Service;
• authenticate users and manage accounts and permissions;
• process payments, manage subscriptions, and prevent fraud;
• send transactional messages, service notices, and, where permitted, product updates;
• provide customer support and respond to enquiries;
• monitor, analyze, and improve the performance, safety, and reliability of the Service; and
• comply with legal obligations and enforce our Terms.

4. Legal Bases for Processing

Where the GDPR or similar laws apply, we rely on the following legal bases: performance of a contract (to provide the Service you request); our legitimate interests (to secure, maintain, and improve the Service and prevent abuse); your consent (for optional communications, where required); and compliance with legal obligations.

5. Cookies & Similar Technologies

We use strictly necessary cookies to keep you signed in and to protect the Service. Where required by law, we ask for your consent before setting non-essential cookies. You can control cookies through your browser settings, though disabling strictly necessary cookies may prevent parts of the Service from functioning.

6. How We Share Information

We do not sell your personal data. We share personal data only with:

• service providers and sub-processors who host, support, or help us operate the Service (for example, cloud hosting, database, email delivery, and payment processing), under contractual confidentiality and data-protection obligations;
• third-party printer or integration services you choose to connect, to the extent necessary to provide the requested functionality;
• authorities or other parties where required by law, to protect our rights, or to prevent harm; and
• a successor entity in connection with a merger, acquisition, or sale of assets, subject to this Policy.

7. International Transfers

Personal data may be processed in countries other than your own. Where we transfer personal data out of the EEA or the UK, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.

8. Data Retention

We retain personal data for as long as your account is active and as needed to provide the Service, and thereafter only as required to comply with legal obligations, resolve disputes, and enforce our agreements. Customer Content may be deleted after a reasonable period following account termination, as described in our Terms.

9. Security

We implement technical and organizational measures designed to protect personal data against unauthorized access, loss, or misuse, including encryption in transit, access controls, and the hashing of credentials. No method of transmission or storage is completely secure; you are responsible for keeping your credentials confidential and maintaining your own backups of Customer Content.

10. Your Rights

Depending on your location, you may have the right to access, correct, delete, or port your personal data, to restrict or object to certain processing, and to withdraw consent where processing is based on consent. You may exercise these rights by contacting us using the details below. You also have the right to lodge a complaint with your local data-protection authority.

11. Children's Privacy

The Service is not directed to individuals under 18, and we do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can delete it.

12. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will provide reasonable notice (for example, by email or an in-app notice) and update the effective date above. Your continued use of the Service after changes become effective constitutes acceptance of the revised Policy.

13. Contact

Questions about this Privacy Policy or our data practices can be directed to our support team through the Service or by email at [email protected].