Privacy Policy
Last updated: July 3, 2026
At Fabberworks, we are committed to protecting your personal data and the design files you upload. This policy explains what data we collect and why, how we store it, and your rights under GDPR and Turkey's KVKK (Law No. 6698).
1. Data We Collect
Account information: name, email address, and (for Creator accounts) contact and workshop details.
Order data: your uploaded design files (STL, STEP, DXF, Gerber), quote requests, messaging content, and transaction records.
Location data: your delivery address or district/coordinates, used for local Creator matching (see Section 4).
Technical data: session information, device/browser type, and error-tracking logs.
2. How We Use Your Data
To let you create service requests (RFQs), receive quotes, and complete your order.
To match you with suitable local Creators ranked by distance, capability, and rating.
To operate payment, escrow, and delivery processes.
To prevent fraud and abuse and to keep the platform secure.
3. Your Design Files and Intellectual Property
You retain full intellectual property rights to all design files you upload. Fabberworks claims no ownership of these files.
Creators are obligated to treat your designs as confidential information: they may not retain, redistribute, reverse-engineer, or commercialize them outside the scope of the awarded order.
Access to your files is role- and time-bound; every download is logged with the user, file, timestamp, and IP address for audit purposes.
4. Location Data and Privacy
Addresses are geocoded to coordinates via a third-party service for distance calculation, and results are cached.
Customers do not see a Creator's exact address or distance in kilometers — only the district is shown (e.g., "Beşiktaş, Istanbul"). Distance is used internally by the ranking algorithm only.
A Creator's full address is revealed to the paying Customer only after the order passes the QA (quality assurance) stage.
5. Retention and Deletion
Files for completed orders are retained for 2 years after completion to support dispute resolution and compliance, then archived or purged.
Files for cancelled or rejected requests are auto-deleted within 90 days.
You may exercise your right to erasure under GDPR/KVKK to request deletion of your data; requests are honored within 30 days unless an active legal obligation (e.g., an ongoing dispute) applies.
6. Data Security
All files and uploads are stored encrypted at rest with AES-256; all transfers are made over HTTPS/TLS.
All uploaded files are scanned for malware before becoming accessible, and only whitelisted file types are accepted.
7. Your Rights and Contact
Under GDPR and KVKK you have the right to access, correct, delete, and export your data.
For requests or privacy questions, contact us at privacy@fabberworks.com.