Privacy Policy
This Policy explains what personal data 3DClub collects, what we use it for, who we share it with, and what your rights are. It applies to anyone who visits the site, buys the product, uses the Platform, or contacts us, and it was written for readers in the European Union, the United Kingdom, the United States, and Brazil.
In one sentence: we collect the minimum needed to sell the product and grant Access, we do not sell your data, and we have no access to your printers, your Printed Items, or your sales.
1. Who is responsible for your data
The party responsible for processing your data, called the “controller” under European law, is the seller behind the 3DClub brand, identified on the purchase receipt that Hotmart issues when your payment is confirmed.
Brand: 3DClub
Email for privacy matters: [email protected]
Any privacy matter can be handled directly through the email address above.
2. Who this policy applies to
This policy applies to:
- Visitors to our sales site;
- People who buy the product;
- Members who sign in to the 3DClub Platform;
- People who contact us by email.
It does not apply to third-party sites and services that you reach through our links, or to payment processing carried out directly by Hotmart, which has its own policy.
3. Data we collect
3.1 Purchase and contact data
- Email address and name, provided at purchase;
- Transaction record: product, amount, currency, date, and status, received from Hotmart, along with any other registration data that Hotmart sends in the purchase notice;
- Country of residence, used to calculate tax;
- Billing data required by the tax law of your country.
We do not receive your card details. Payment is processed directly by Hotmart, which is the party that collects and stores the financial data. We receive only the payment confirmation and the data needed to grant your Access.
3.2 Account and Access data
- Sign-in email and an internal account identifier;
- Access start and end dates and the purchase reference (the Hotmart transaction number);
- Login and session data: the one-time code sent by email and authentication logs, which may include your IP address, browser, and device.
3.3 Platform usage data
- Which Kit you download and when, a record used to apply the hourly download limit and protect the Files;
- Technical error logs, used to fix failures.
The language you choose on the Platform is stored only in your browser, not on our servers.
3.4 Technical data from the sales site
- IP address;
- Browser type and version, operating system, and device type;
- Browsing data collected by audience measurement and advertising tools: pages visited, source of the visit, clicks, and time spent;
- Playback data for the demo video, handled by the service that hosts the video;
- Cookie identifiers and similar technologies.
3.5 Communications
- The content of the messages you send us and of our replies;
- Delivery and open status of the emails we send, such as the email with the sign-in code.
3.6 Data we do not collect
We do not collect sensitive data, such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic data, biometric data, health data, sex life, or sexual orientation. Please do not send this kind of information in the messages you send us.
We also have no access to your printers, the Printed Items you make, your stores, or your sales. The amounts you type into the price calculator are not sent to us or stored by us.
4. How we obtain this data
- Directly from you: when you buy, sign in to the Platform, or write to us;
- Automatically: through server, login, and download logs, when you browse the site or use the Platform;
- From Hotmart: confirmation of a purchase, refund, or chargeback, and the data needed to grant or end your Access.
5. What we use it for and the legal basis
Every use of personal data needs a justification recognized by law, called a legal basis. Below is each purpose with its basis:
| Purpose | Data used | Legal basis (GDPR) |
|---|---|---|
| Selling and granting Access Confirming the purchase and enabling your email on the Platform | Contact, purchase, account | Performance of a contract, Art. 6(1)(b) |
| Authenticating you Sending the sign-in code and maintaining your session | Email, account, technical | Performance of a contract, Art. 6(1)(b) |
| Delivering downloads Generating the temporary link and applying the hourly limit | Account, downloads | Performance of a contract, Art. 6(1)(b), and legitimate interest, Art. 6(1)(f) |
| Providing support Answering questions and resolving problems with Files or with sign-in | Contact, communications | Performance of a contract, Art. 6(1)(b) |
| Processing refunds and chargebacks Applying the 14-day guarantee and ending Access | Purchase, account, communications | Performance of a contract, Art. 6(1)(b) |
| Meeting tax obligations Keeping sales records | Purchase, billing | Legal obligation, Art. 6(1)(c) |
| Proving the License Confirming that you purchased, when you or a marketplace ask | Purchase, contact | Performance of a contract, Art. 6(1)(b) |
| Keeping the service secure Preventing fraud, misuse, Access sharing, and mass copying | Technical, account, downloads | Legitimate interest, Art. 6(1)(f) |
| Defending our rights In the event of a dispute or unauthorized distribution of the Files | All that apply | Legitimate interest, Art. 6(1)(f) |
| Measuring site audience Visit and conversion statistics | Technical, cookies | Consent, Art. 6(1)(a), where the law requires it, or legitimate interest, Art. 6(1)(f), in all other cases |
| Advertising and remarketing Measuring the results of ads on social networks and search engines | Technical, cookies, email in encrypted form | Consent, Art. 6(1)(a), where the law requires it, or legitimate interest, Art. 6(1)(f), in all other cases |
| News and offers emails | Contact | Consent, or legitimate interest for customers, with an unsubscribe option in every email |
Where the basis is consent, you can withdraw it at any time, without affecting the lawfulness of any processing carried out before you withdrew it.
Where the basis is legitimate interest, we first assess whether our interest unduly overrides your rights, and you can object at any time, as described in section 11.
6. Cookies and similar technologies
The Platform uses storage in your browser to function (keeping you signed in and remembering your language). The sales site uses audience measurement and advertising tools that set cookies and identifiers. You can decline them or withdraw your consent at any time, as explained in the Cookie Policy.
The full description, by category and by tool, is in the Cookie Policy.
7. Who we share it with
We do not sell your personal data.
We share it only with service providers that need the data to operate the product, always under contracts or terms that require them to protect the information and use it only to provide the service.
| Who | What for | Where the data is stored |
|---|---|---|
| Hotmart | Processing payment, issuing the receipt, handling refunds and chargebacks, and notifying the Platform about the purchase | As set out in Hotmart’s privacy policy |
| Supabase | Platform database and login system (accounts, Access, and download logs) | European Union (France) |
| Cloudflare | Hosting the Platform, delivering pages, and storing and delivering Files and images; anti-bot verification at login, when active | Global server network, including the United States and the European Union |
| Resend | Sending the email with the sign-in code | United States |
| Rocketplayer | Playing the demo video on the sales page | As set out in the service’s own policy |
| Google (Google Fonts) | Providing the typeface used on the pages | United States and the European Union |
| Google (Google Tag Manager and Google Analytics) | Managing the site’s tags and measuring audience | United States and the European Union |
| Sales site tag server | Receiving events from the site and forwarding them to measurement and advertising tools | As set out in the server provider’s policy |
| Meta and Google (ads) | Measuring the results of ad campaigns, when active | United States and the European Union |
We may also share data where there is a legal obligation, an order from a competent authority, or a need to defend our rights in a judicial or administrative proceeding.
If the 3DClub business is ever sold, merged, or restructured, your data may be transferred as part of that transaction. If that happens, we will notify you, and the new controller will be bound by this policy until a new one is communicated to you.
8. International transfers
Some of our providers are located outside the European Economic Area, mainly in the United States and Brazil. This means your data may be processed in a country whose data protection law differs from European law.
When this happens, we use at least one of the safeguards provided for in Chapter V of the GDPR:
- An adequacy decision by the European Commission, including certification under the EU-US Data Privacy Framework, where the provider is certified;
- Standard Contractual Clauses approved by the European Commission;
- Supplementary technical measures, such as encryption in transit and at rest and minimizing what is sent.
You can request a copy of the applicable safeguards by emailing our contact address.
9. How long we keep it
We keep data only for as long as needed to fulfill the purpose for which it was collected and to meet the legal obligations that apply to us.
| Type of data | Retention period | Reason |
|---|---|---|
| Purchase record and proof of License | For the period required by tax and accounting law, generally 5 years from the purchase | Tax and accounting obligations, and proof of License. Where the law of a specific country requires a longer period, we apply the longer one |
| Account and Access (email, dates, purchase reference) | For as long as the Access exists and, afterward, for as long as needed to resolve open issues and meet legal obligations | Allowing use of the Platform and complying with the law |
| Download logs (which Kit and when) | For as long as needed for the purpose in the next column | Applying the hourly limit, preventing abuse, and resolving open issues |
| Support communications | For as long as needed to provide support and for our defense in any dispute | Support history and evidence in case of a dispute |
| Technical security and login logs | For as long as needed for the purpose in the next column | Fraud prevention and auditing |
| Measurement and advertising data (cookies and identifiers) | For the lifetime of each cookie, generally up to 2 years, or until you withdraw consent | Measuring audience and ad results |
| Proof of your consent | For as long as needed to demonstrate compliance | Demonstrating compliance |
| Email address for news emails | Until you unsubscribe | Sending only what you agreed to receive |
After these periods, data is deleted or irreversibly anonymized.
10. How we protect it
- Encrypted connection across the entire site and the Platform;
- Passwordless sign-in, using a one-time code sent to the purchase email, with Access granted only to people with an active purchase;
- Files delivered through temporary, short-lived links generated for your session;
- Permission rules in the database, so each account sees only what belongs to it;
- No card data stored by us;
- Internal access restricted to those who need it, with individual credentials.
No system is completely secure. If a security incident occurs that poses a high risk to your rights, we will notify you and the competent authority within the legal deadlines, which in the European Union is 72 hours for the authority.
11. Your rights in the European Union and the United Kingdom
If you are in the European Union, the European Economic Area, or the United Kingdom, you have the following rights:
- Access: find out what data we hold about you and receive a copy;
- Rectification: correct wrong or incomplete data;
- Erasure: ask for deletion, where there is no legal reason to keep the data;
- Restriction: restrict the use of your data in certain situations;
- Portability: receive your data in a structured, commonly used format, or ask for it to be sent to another provider;
- Objection: object to processing based on legitimate interest, and object at any time to use of your data for direct marketing;
- Withdrawal of consent: at any time, without retroactive effect;
- Complaint: lodge a complaint with a data protection authority.
For data protection inquiries originating in the European Union or the United Kingdom, use the contact email in this policy. We respond directly, with no intermediary.
12. Your rights in the United States
If you live in a U.S. state with its own privacy law, such as California, Virginia, Colorado, Connecticut, Utah, Texas, Oregon, and Montana, among others, you have rights equivalent to the following:
- To know what categories of personal data we collect, where it comes from, what we use it for, and who we share it with;
- To access a copy of your data;
- To correct inaccurate data;
- To delete your data, subject to the exceptions provided by law;
- To opt out of the sale or sharing of personal data for cross-context behavioral advertising;
- To not be discriminated against for exercising any of these rights.
Sale and sharing
We do not sell personal data in exchange for money. The measurement and advertising tools we use may be considered “sharing for cross-context behavioral advertising” under California law. You can decline them through the options in the Cookie Policy, through the Global Privacy Control signal in your browser, or by writing to us.
You may also designate an authorized agent to exercise these rights on your behalf, upon proof of authorization.
13. Your rights in Brazil
If you are in Brazil, the General Data Protection Law (LGPD) guarantees you: confirmation that processing exists, access, correction, anonymization, blocking or deletion of unnecessary data, portability, information about sharing, information about the possibility of not consenting, revocation of consent, and review of automated decisions.
You can lodge a complaint with the Brazilian National Data Protection Authority (ANPD).
14. How to exercise your rights
Write to [email protected] from the email address you used to make the purchase, telling us which right you want to exercise.
- We respond within 30 days. For complex requests, this period may be extended by another 60 days, and we will let you know;
- Exercising your rights is free of charge. Manifestly unfounded or repetitive requests may result in a reasonable fee or a justified refusal;
- We may ask for additional information to confirm your identity, only as much as needed to prevent someone else from accessing your data;
- If you ask us to delete your account, your Access to the Platform ends. We keep only what the law requires us to keep, such as the purchase record.
15. Children and teenagers
The product is intended for people 18 or older and is not directed at children. We do not knowingly collect data from minors. If you are a legal guardian and believe a minor has sent us data, write to the contact email and we will delete the record.
16. Automated decisions
Access to the Platform is granted or ended automatically based on the purchase status that Hotmart reports, such as an approved purchase, a refund, or a chargeback. This is an automated decision that affects your Access. If you think it is wrong, write to the contact email and a person will review your case.
Apart from this, we do not make solely automated decisions that significantly affect you, and we do not carry out profiling with that kind of consequence.
17. Changes to this policy
We may update this policy when we change the product, adopt new tools, or when the law requires it. The date of the last update appears at the top of the page.
In the event of a relevant change, we will notify you by email or by a prominent notice on the site before the change takes effect. If the change depends on your consent, we will ask for it again.
This document may be made available in more than one language. If the versions differ in interpretation, the version in the language in which the sale was made to the consumer prevails.
18. Contact and complaints
For any privacy matter: [email protected].
If you are not satisfied with our response, you can complain to the data protection authority in your country:
- European Union: the national authority of your country of residence, whose list is at edpb.europa.eu;
- United Kingdom: Information Commissioner’s Office, ico.org.uk;
- United States: your state Attorney General or the Federal Trade Commission, ftc.gov;
- Brazil: ANPD, gov.br/anpd.