Marketplace Contact
Legal

Privacy Policy

Last updated: May 27, 2026 · GDPR & PIPA Compliant

1. Introduction

MYGEN3D ("we", "us", "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and share your personal information when you use MYGEN3D Marketplace.

This policy complies with the EU General Data Protection Regulation (GDPR), the Korean Personal Information Protection Act (PIPA / 개인정보 보호법), and the California Consumer Privacy Act (CCPA).

2. Information We Collect

2.1 Information You Provide

Data TypeExamplesPurpose
Account infoName, email, password (hashed)Account creation and authentication
Profile infoNickname, bio, avatarMarketplace profile display
Seller infoBank account, PayPal email, business reg. no.Payment settlement
Payment infoCard type, last 4 digits (via payment processor)Purchase processing
Uploaded content3D files, product imagesMarketplace listings

2.2 Automatically Collected Information

Data TypeExamplesPurpose
Usage dataPages viewed, search queries, clicksService improvement
Device dataBrowser type, OS, screen resolutionCompatibility optimization
IP addressYour network IPSecurity, fraud prevention, tax compliance
CookiesSession tokens, preferencesAuthentication, user experience

2.3 Information from Third Parties

When you pay via Toss Payments or Paddle, they share transaction confirmation details with us (not full card numbers). We do not store full payment card details.

3. How We Use Your Information

Legal basis (GDPR): Contract performance, legal obligation, legitimate interest, or your consent — depending on the processing activity.

4. Data Sharing & Third Parties

4.1 Payment Processors

Toss Payments Co., Ltd. processes Korean domestic transactions. Your payment data is handled per Toss's privacy policy.

Paddle.com Market Limited processes international transactions as Merchant of Record. Paddle's privacy policy applies to your payment data.

4.2 Cloud Infrastructure

3D files and images are stored on Hetzner Object Storage (EU-based). Account data is stored on secured servers.

4.3 Analytics

We may use privacy-respecting analytics tools to understand site usage. IP addresses are anonymized.

4.4 Legal Disclosure

We may disclose your information when required by law, court order, or to protect the rights and safety of MYGEN3D users.

4.5 No Sale of Data

🔒 We do never sell your personal data to third parties for advertising purposes.

5. Data Retention

Data TypeRetention Period
Account dataDuration of account + 3 years after deletion
Transaction records7 years (tax law requirement)
Uploaded 3D filesWhile account is active; 30 days after account deletion
Server logs / IP90 days
Marketing preferencesUntil opt-out or account deletion

6. Cookies

We use the following cookies:

CookieTypePurposeDuration
g3d_tokenEssentialAuthentication (JWT session)30 days
cart_itemsFunctionalShopping cart contents7 days
currency_prefFunctionalCurrency preference1 year

We do not use third-party advertising cookies. You can clear cookies via your browser settings at any time.

7. Your Rights

Depending on your location, you have the following rights regarding your personal data:

👁
Access
Request a copy of your personal data we hold.
✏️
Rectification
Correct inaccurate or incomplete data.
🗑
Erasure
Request deletion of your data ("right to be forgotten").
Restriction
Limit how we process your data in certain circumstances.
📦
Portability
Receive your data in a machine-readable format.
🚫
Objection
Object to processing based on legitimate interests.
📧
Opt-out Marketing
Unsubscribe from marketing emails anytime.
⚖️
Lodge Complaint
File a complaint with your local data protection authority.

To exercise your rights, contact us at privacy@mygen3d.com. We will respond within 30 days.

8. International Data Transfers

Your data may be transferred to and processed in countries outside your own, including South Korea and EU member states (for Hetzner storage). We ensure appropriate safeguards are in place, including Standard Contractual Clauses where required by GDPR.

9. Children's Privacy

MYGEN3D is not directed to children under 18. We do not knowingly collect personal information from minors. If we become aware that a minor has created an account, we will delete it promptly.

10. Contact & Data Protection Officer

Privacy Inquiries: privacy@mygen3d.com
General Support: support@mygen3d.com
Response time: Within 30 days of receipt
EU Representative: For GDPR inquiries from EU residents, contact gdpr@mygen3d.com