The short version
This policy explains what Navi3D collects when you browse navi3d.in, request a quote, place an order, or use Mould Studio and Drone Studio — and what we do with it.
In plain terms: we hold your account details and order history so we can serve you, we hold the files you upload so we can manufacture or process them, and we hold a small amount of technical data so our free tools stay free without being abused. That is the whole picture.
Who handles your data
Navi3D, based in Navi Mumbai, Maharashtra, India, is the data fiduciary for the personal data described here. You can reach us any time at [email protected].
This policy sits alongside our Terms of Service.
What we collect
We do not collect sensitive categories of personal data, and we ask that you do not send them to us.
Why we collect it
- To perform the contract. Producing a quote, manufacturing your part, taking payment, shipping the order and handling support.
- To run the free tools. Enforcing the daily free-tier limit in Mould Studio, verifying you are human, and keeping generated files available for your download link.
- For security and fraud prevention. Detecting abuse, payment fraud and attempts to circumvent usage limits.
- To meet legal obligations. Tax invoices, GST records and statutory accounting retention.
- With your consent. Newsletters and marketing email, which you can withdraw at any time using the unsubscribe link.
We do not run behavioural advertising, and we do not build marketing profiles from your engineering files.
Your uploaded models
This is the part most customers care about, so we will be explicit.
Your designs remain your intellectual property. We use them only to do the job you asked for — generate a quote, cut or print the part, or build your mould. We do not sell them, share them commercially, publish them, or use them to train machine-learning models.
Uploaded models and the outputs generated from them are stored on Cloudflare R2 object storage. Access is restricted to the Navi3D team members who need it to fulfil your order or investigate a support request.
Mould Studio download links are unguessable single-use tokens. Anyone holding a link can download that package, so treat it as confidential and save your files locally rather than relying on the link long-term.
If you want a file deleted before its normal retention period, email us the order number or download token and we will remove it, subject to any record we must keep for tax purposes.
We may photograph finished physical parts for our portfolio. Tell us if you would prefer we did not, and we will exclude your work.
Device fingerprinting
Mould Studio's free tier works without an account, which creates an obvious problem: how do we apply a daily limit to someone we cannot identify?
Our answer is a device fingerprint. Your browser combines stable signals — a rendered canvas image, user agent, language, screen dimensions, timezone offset, CPU cores and memory — and hashes them with SHA-256. Only that hash is sent to us, paired with your IP address.
- It is used for one purpose only: counting free generations per calendar day, reset at midnight IST.
- It is not used for advertising, cross-site tracking or profiling.
- It is not reversible into your identity, and it is never linked to a paid account — Premium is verified from your signed-in account, never from a fingerprint.
Your browser also stores a small local counter of generations used today, purely so the interface can show the right number before the server replies.
Cookies & browser storage
We keep this minimal. There are no advertising or analytics-profiling cookies on navi3d.in.
Clearing your browser storage will sign you out, empty your cart and reset the local quota display — the server-side limit still applies.
Payments
All payments are processed by Razorpay. When you pay, the card, UPI or netbanking details are entered inside Razorpay's own checkout and go directly to them — they never touch our servers.
What we receive back and store is limited to the order identifier, payment identifier, the signature we verify to confirm the payment is genuine, the currency and amount, the tax breakdown and the status.
Razorpay processes this data as an independent payment processor under its own privacy policy and its PCI-DSS obligations. Domestic payments accept UPI, cards, netbanking and wallets; international payments are card-only.
How long we keep it
- Account data — while your account is open, and for a short period afterwards in case you return.
- Orders, invoices and tax records — for as long as Indian tax and accounting law requires, typically eight years.
- Uploaded models and generated output — kept while they are needed to fulfil and support the order, then removed on our housekeeping cycle or on your request.
- Free-tier usage records — short-lived, since they only need to cover the current day's limit.
- Support email — kept while the matter is open and for a reasonable period after, so we have context if you write again.
Security
Traffic to navi3d.in is encrypted in transit with TLS. Passwords are hashed, never stored in readable form. Access to production systems and customer files is limited to team members who need it. Payment credentials never reach us at all.
No system is perfectly secure. If a breach ever affects your personal data, we will notify you and the relevant authority as required by law, and tell you plainly what happened and what to do.
Your rights
Under India's Digital Personal Data Protection Act, 2023, you can ask us to:
- Access — get a copy of the personal data we hold about you.
- Correct — fix anything inaccurate, incomplete or out of date.
- Erase — delete data we no longer need for a lawful purpose.
- Withdraw consent — for anything we do on the basis of consent, such as the newsletter.
- Nominate — name someone to exercise these rights if you are unable to.
- Complain — raise a grievance with us, and escalate to the Data Protection Board of India if unsatisfied.
Email [email protected] from the address on your account and we will respond within 30 days. Some data must be retained regardless — a paid invoice cannot be erased on request, because tax law requires us to keep it.
Children's data
Navi3D is not intended for children. We do not knowingly collect personal data from anyone under 18. If you believe a child has given us their data, contact us and we will delete it.
International transfers
Some of our infrastructure providers operate globally, so your data may be processed on servers outside India. Where that happens, we use established providers with recognised security practices and contractual protections, and we transfer only what the service requires.
Changes to this policy
We update this policy when our products or providers change. The effective date at the top of the page always reflects the current version, and material changes will be announced on the website.
Grievance officer
If you have a privacy concern or want to exercise any of the rights above, write to our grievance officer. We acknowledge every request and aim to resolve it within 30 days.
Last updated 23 July 2026. © 2026 Navi3D. All rights reserved.