Privacy Policy

Who We Are

Layer X (“we”, “us”, “our”) is a precision additive manufacturing studio operating at 204, Iscon Emporio, Jodhpur Cross Roads, Satellite, Ahmedabad – 380015, Gujarat, India. We operate the website layerx3d.in and associated services.

For any privacy-related enquiries contact us at legal@layerx3d.in.

What Data We Collect

We collect data you provide directly and data generated by your use of our platform:

• Account data — Name, email address, phone number when you register or check out.
• Address data — Shipping and billing addresses for order fulfilment.
• Order data — Items purchased, quantities, payment references, order status and history.
• Return and refund data — If you submit a return request: the reason for return, supporting evidence (photographs), and for Cash on Delivery orders, the bank account details you provide for the refund transfer. This data is used solely to process your return and is not shared with third parties beyond the payment processor.
• Design files — STL, STEP, OBJ, 3MF, and other CAD files you upload for quoting or production.
• Communication data — Messages sent via our contact form, quote requests, and support emails.
• Usage data — Pages visited, time spent, browser type, device type, and IP address — collected via server logs and analytics.
• Payment data — We do not store card numbers or UPI credentials. Payment is processed by Razorpay (PCI-DSS Level 1). We retain only the transaction reference ID and payment status.

How We Use Your Data

• To fulfil orders, process payments, and arrange shipping.
• To send order confirmations, shipping updates, and invoices via email.
• To respond to quote requests, support queries, and contact form submissions.
• To maintain your account and provide access to your order history and uploaded files.
• To process return and refund requests — including verifying eligibility, communicating decisions, and initiating refunds via Razorpay or bank transfer.
• To improve our platform through anonymised usage analytics.
• To comply with legal obligations including GST invoicing requirements under Indian tax law.

We do not sell, rent, or share your personal data with third parties for marketing purposes.

Cookies

We use cookies and similar technologies for:

• Essential cookies — Session management, authentication state, and cart persistence. These are strictly necessary and cannot be disabled.
• Analytics cookies — Anonymised usage data to understand how users navigate the site. No personal data is sent to analytics providers without aggregation.
• Preference cookies — Storing your settings such as preferred currency or language (where applicable).

You can control non-essential cookies through your browser settings. Disabling essential cookies will prevent login and cart functionality from working.

Third-Party Services

We integrate with the following third-party services, each governed by their own privacy policies:

• Supabase — authentication, database storage, and file storage. Data is stored on servers in the EU/US.
• Razorpay — payment processing. Subject to Razorpay's Privacy Policy.
• Resend / SMTP providers — transactional email delivery (order confirmations, invoices).
• Google Fonts — web fonts loaded from Google's CDN. Your IP address is sent to Google on font requests.

Design File Handling

Your uploaded design files (STL, STEP, etc.) are stored securely on encrypted infrastructure. We will:

• Use files only for the purpose of generating quotes and fulfilling production orders.
• Sign a mutual NDA before any file sharing is required on first contact.
• Purge files from our systems on written request, within 30 days.
• Never share your design files with third parties except contracted manufacturing partners under strict NDA.

Data Retention

• Account data — Until account deletion request is received.
• Order and invoice data — 7 years, as required by Indian GST regulations.
• Return and refund records — 7 years, as part of the financial transaction record required by Indian GST and consumer protection regulations. Bank account details provided for COD refunds are deleted after the refund is confirmed.
• Design files — Until purge request, or 2 years after last order activity.
• Contact form submissions — 2 years.

Your Rights

Depending on your jurisdiction, you may have the right to:

• Access a copy of the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data (where legally permissible).
• Object to or restrict certain processing activities.
• Data portability — receive your data in a machine-readable format.

To exercise any of these rights, email legal@layerx3d.in with the subject “Data Rights Request”. We will respond within 30 days.

Security

We use industry-standard security measures including TLS encryption in transit, encrypted storage at rest, access controls, and regular security audits. No transmission over the internet is 100% secure; we cannot guarantee absolute security but take every reasonable precaution to protect your data.

Children's Privacy

Our services are not directed at children under 18. We do not knowingly collect personal data from minors. If you believe a minor has provided us with personal data, contact us immediately at legal@layerx3d.in.

Changes to This Policy

We may update this Privacy Policy periodically. Significant changes will be communicated by email or a prominent notice on the website. The “Last updated” date at the top of this page reflects the most recent revision. Continued use of our services after changes constitutes acceptance.