Privacy Policy

This policy explains what Rapid Manufacturing (ABN 81 994 894 143) collects when you use ToolpathCloud, why, and what control you have over it. It covers both cutting shops who hold accounts and customers who request quotes through a shop’s page.

We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

1. What we collect

From shop account holders

• Business name, chosen page address, and contact email.
• Authentication details — we store a hashed password, never the password itself.
• Shop configuration: materials, pricing rules, rates, and delivery settings.
• Stripe connected account identifiers and payout status. We never see or store bank details or full card numbers. Stripe collects identity and business verification information directly from you to meet its own AML/CTF obligations.

From customers requesting a quote

• Email address, and name where provided.
• Delivery address, where delivery is selected.
• The DXF file uploaded, and the geometry derived from it — cut length, area, pierce count, part dimensions.
• Quote and order records, including amounts and status.

Automatically

Standard server logs (IP address, timestamp, request path, user agent), retained for security, abuse prevention and debugging.

We do not collect sensitive information as defined by the Privacy Act, and ask that you do not send it to us.

2. Why we collect and use it

• To generate quotes and process orders — the core service.
• To give a shop the information it needs to fulfil an order placed with it.
• To take payment and collect our platform fee.
• To authenticate account holders and secure the service.
• To detect, investigate and prevent abuse, fraud and technical faults.
• To meet legal, tax and record-keeping obligations.

We do not sell personal information. We do not use uploaded design files to train machine learning models. We do not send direct marketing to quote customers. Shop account holders may receive service and account emails; any marketing email we send will include an unsubscribe option, as required by the Spam Act 2003 (Cth).

You can deal with us anonymously or under a pseudonym only where it is practicable — which it generally is not, since we need a real email address to send you a quote and a delivery address to deliver parts.

3. Uploaded files

Design files are commercially sensitive and we treat them that way. They are stored in a private bucket that is not publicly readable and not directly accessible by any browser. Access is limited to the server, and to the shop the file was submitted to.

When you upload a file to a shop’s quote page, you are sending it to that shop. They can view and download it in order to quote and cut your parts.

4. Who we disclose to

• The shop you ordered from — your contact details, delivery address, file and order details. They need these to make and deliver your parts, and they handle that information under their own privacy obligations.
• Stripe — for payment processing and identity verification. Stripe handles card data directly; it never reaches our servers.
• Supabase — our database, authentication and file storage provider.
• Our hosting provider — for serving the application.
• Authorities — where we are required or authorised by law to disclose, or to establish or defend a legal claim.

5. Overseas disclosure (APP 8)

Our infrastructure and payment providers operate internationally, so your personal information is likely to be stored or processed outside Australia — including in the United States and other countries where those providers maintain infrastructure. We take reasonable steps to ensure overseas recipients handle personal information consistently with the Australian Privacy Principles, and rely on those providers’ contractual data protection commitments.

6. How long we keep it

• Account and shop data — while the account is open, then destroyed or de-identified within a reasonable period after closure, except where records must be retained by law.
• Quote and order records — retained for at least five years, as required for tax and financial record-keeping.
• Uploaded files — retained while needed for the related quote or order and the period in which a dispute could arise.
• Server logs — retained for a short operational period.

7. Security

Traffic is encrypted in transit. Passwords are hashed by our authentication provider. Database access is restricted by row-level security so a shop can only reach its own records, and file storage is private by default. No system is perfectly secure, and we cannot guarantee absolute security.

If a data breach occurs that is likely to result in serious harm, we will notify affected individuals and the Office of the Australian Information Commissioner as required by the Notifiable Data Breaches scheme.

8. Accessing and correcting your information

You may request access to the personal information we hold about you and ask us to correct it if it is inaccurate, out of date or incomplete. Contact us at support@toolpathcloud.com. We will respond within a reasonable period, normally 30 days, and will explain our reasons if we refuse.

If your request concerns an order, note that the shop you ordered from holds its own copy of that information and you may need to contact them as well.

9. Complaints

If you believe we have breached the Australian Privacy Principles, contact us first at support@toolpathcloud.com and we will investigate and respond. If you are not satisfied with our response, you may complain to the Office of the Australian Information Commissioner at oaic.gov.au or on 1300 363 992.

10. Cookies

We use cookies that are strictly necessary to run the service — keeping shop owners signed in and maintaining session security. We do not use advertising or cross-site tracking cookies.

11. Children

ToolpathCloud is a business tool and is not directed at children. We do not knowingly collect information from anyone under 16.

12. Changes

We will update this policy as the service changes, and will revise the date at the top when we do.

13. Contact

Privacy questions or complaints: support@toolpathcloud.com, or write to us at PO Box 209, Toronto NSW 2283, Australia.