Privacy Policy

Last updated: September 3, 2025

1. Introduction

This Privacy Policy (“Policy”) explains how NCLink (“NCLink,” “we,” “our,” or “us”) collects, uses, stores, discloses, and protects personal data in connection with your use of the NCLink platform, including the website, software, and related services (collectively, the “Platform”).

By creating an account, submitting an order, placing a bid, uploading files, or otherwise accessing or using the Platform, you acknowledge and agree that NCLink may process your personal data in accordance with this Policy.

This Policy is incorporated by reference into NCLink’s Terms of Service. Capitalized terms not otherwise defined in this Policy shall have the meanings set forth in the Terms of Service.

This Policy applies to all users of the Platform, including Clients, Manufacturers, and visitors. If you do not agree with the practices described in this Policy, you must immediately discontinue use of the Platform.

2. Information We Collect

Account Information: When you register an account, we collect your name, email address, password, and other identifiers necessary to create and maintain your user profile.
Order and Transaction Information: When you create or accept an Order, we collect information relating to bids, specifications, lead times, pricing, escrow, payments, and disputes.
File Uploads and User Content: When you upload CAD models, drawings, specifications, communications, or other User Content, NCLink processes such files to enable quoting, preview, and fulfillment. Temporary processing may occur on NCLink servers, and files are stored on AWS S3 and delivered via CloudFront as described in our Terms of Service.
Payment Information: All payments are processed by Stripe, Inc. NCLink does not directly collect or store full card numbers or other sensitive payment credentials. We may receive limited information from Stripe, such as transaction IDs, payment status, and payout details, to facilitate escrow and order tracking.
Communications and Chat Data: We collect messages, files, and attachments exchanged through NCLink’s internal chat system, including production updates, dispute messages, and refund proposals.
Device and Technical Information: We automatically collect log data, device identifiers, IP addresses, browser type, operating system, access times, and cookie identifiers to help operate, secure, and improve the Platform.
Support and Contact Information: If you contact NCLink for assistance, we collect the content of your request and related correspondence.
Public and Review Information: If you submit reviews, ratings, or feedback, such information may be displayed publicly on the Platform and associated with your account.

3. How We Use Your Information

Provision of Services: To operate, maintain, and provide access to the Platform, including account creation, order posting, bidding, escrow, payments, shipping, communications, and dispute resolution.
Transaction Processing: To process bids, hold funds in escrow, release payments, and facilitate shipping arrangements through Stripe and other authorized third-party providers.
File Handling: To process, convert, preview, and store uploaded CAD files, drawings, and related User Content for the purpose of quoting, production, and delivery.
Communications: To transmit notifications, updates, invoices, receipts, dispute correspondence, and other order-related messages between Clients, Manufacturers, and NCLink.
Security and Fraud Prevention: To authenticate users, detect and prevent unauthorized access, fraudulent activity, or abuse of the Platform, and enforce NCLink’s Terms of Service.
Legal and Compliance Obligations: To comply with applicable laws, regulations, tax obligations, export controls, and legal processes, and to respond to lawful requests from government or regulatory authorities.
Improvement of the Platform: To analyze usage patterns, troubleshoot issues, and enhance the functionality, reliability, and user experience of the Platform.
Marketing and Communications: To send service announcements, product updates, promotional messages, or surveys, where permitted by law and subject to user preferences. Users may opt out of non-essential marketing communications at any time.

4. How We Share Information

Between Clients and Manufacturers: User Content, CAD files, specifications, bids, and communications are shared between Clients and Manufacturers as necessary to evaluate, quote, fulfill, and complete Orders.
With Third-Party Service Providers: We share limited information with trusted service providers who support the operation of the Platform, including:
- Stripe, Inc. for payment processing, escrow, and disbursement of funds;
- Amazon Web Services (AWS) for file storage, hosting, and content delivery;
- Other vendors providing analytics, security, and infrastructure support.
For Legal and Compliance Purposes: We may disclose information when required to do so by law, regulation, subpoena, legal process, or government request, or when we believe in good faith that disclosure is necessary to protect the rights, safety, or property of NCLink, our users, or the public.
In Case of Business Transfers: If NCLink undergoes a merger, acquisition, reorganization, or sale of assets, personal data may be transferred as part of the transaction, subject to continued protection consistent with this Policy.
With User Consent: We may share information with third parties when you provide explicit consent for such disclosure.

NCLink does not sell or rent user personal data to unaffiliated third parties for their independent marketing purposes.

5. Data Retention and Deletion

Retention of Records: NCLink retains personal data, Order information, communications, transaction records, and related materials for as long as reasonably necessary to: (a) provide and improve the Platform and Services, (b) complete transactions and resolve disputes, (c) comply with applicable legal, tax, and regulatory requirements, (d) prevent fraud, abuse, or security incidents, and (e) enforce NCLink’s Terms of Service.
Account Termination: Upon termination or deactivation of a user account, NCLink may permanently delete, anonymize, or restrict access to personal data. Certain categories of data—including payment records, tax documentation, dispute histories, and compliance-related logs—may be retained beyond account termination where required or permitted by law, or for legitimate business purposes such as audit, fraud prevention, or legal defense.
File Storage: Uploaded CAD files and associated STL previews will be deleted if no Order is created. If an Order is created, files may be retained in AWS S3 storage for as long as necessary to fulfill the Order and support related dispute or compliance obligations.
No Guarantee of Recovery: Once deleted or anonymized, data cannot be recovered. Users are solely responsible for maintaining their own copies or backups of any files, drawings, or communications uploaded to the Platform.
Legal Holds: NCLink may suspend scheduled deletion of data if it reasonably believes retention is necessary in connection with an ongoing dispute, regulatory inquiry, or legal obligation.

6. Cookies and Tracking

Use of Cookies: NCLink uses cookies, pixel tags, local storage, and similar technologies (“Cookies”) to operate and improve the Platform. Cookies are small data files stored on your device that help us recognize your browser, maintain session security, and remember preferences.
Types of Cookies:
- Essential Cookies: Required to enable core functionality such as login, account security, order posting, bidding, and payments.
- Performance and Analytics Cookies: Used to understand how users interact with the Platform, diagnose issues, and improve services.
- Functional Cookies: Used to remember user preferences and settings.
- Third-Party Cookies: Stripe, AWS CloudFront, and analytics providers may set their own cookies to support payments, file delivery, and performance monitoring.
User Choices: Most web browsers allow you to manage or disable Cookies through settings. Disabling essential Cookies may limit functionality and prevent proper use of the Platform.
Do Not Track: The Platform does not currently respond to “Do Not Track” signals or similar browser settings.
Third-Party Tracking: Third-party service providers may collect information about your online activities across different websites and services when you use the Platform. Such practices are governed by the providers’ own privacy policies.

7. User Rights

Access and Portability: You may request confirmation of whether NCLink holds your personal data and obtain a copy of such data in a portable format.
Correction: You may request that NCLink correct or update inaccurate, incomplete, or outdated personal data associated with your account.
Deletion: You may request deletion of your personal data. NCLink will comply unless retention is required for legal, regulatory, tax, dispute resolution, or fraud prevention purposes.
Restriction and Objection: You may request that NCLink restrict certain processing of your personal data or object to processing where permitted by law, including for marketing purposes.
Opt-Out of Marketing: You may opt out of receiving non-essential promotional communications from NCLink by following unsubscribe instructions in the message or adjusting your account preferences.
GDPR and CCPA Rights: European Union/EEA Residents: You may exercise rights under the General Data Protection Regulation (GDPR), including the right to lodge a complaint with a supervisory authority. California Residents: You may exercise rights under the California Consumer Privacy Act (CCPA), including the right to request disclosure of categories of personal data collected and the right to request deletion, subject to applicable exceptions.

To exercise any of these rights, please contact NCLink at privacy@nclink.org. NCLink may require verification of your identity before responding to requests.

8. Children’s Privacy

Minimum Age Requirement: The Platform is intended for use only by individuals who are at least eighteen (18) years of age and legally capable of entering into binding contracts.
No Collection of Children’s Data: NCLink does not knowingly collect or solicit personal data from children under the age of 18. If NCLink becomes aware that personal data has been collected from a child without verifiable parental consent, such information will be deleted promptly.
Responsibility of Users: By creating an account, users represent and warrant that they meet the minimum age requirement. NCLink may restrict, suspend, or terminate accounts that it reasonably believes are in violation of this policy.

9. International Data Transfers

U.S.-Based Processing: NCLink is headquartered in the United States, and all personal data collected through the Platform is processed and stored primarily in the United States.
Access by International Users: Although NCLink does not actively market or target users outside the United States, individuals located in other jurisdictions may access and use the Platform at their own initiative. By doing so, such users acknowledge and agree that their personal data will be transferred to and processed in the United States, which may have different data protection laws than their country of residence.
Safeguards: NCLink takes reasonable measures to protect personal data in accordance with this Policy, regardless of the user’s country of origin. However, users accessing the Platform from outside the United States are solely responsible for ensuring compliance with any applicable local laws.

10. Third-Party Links & Services

Stripe Payments: All payments on the Platform are processed exclusively through Stripe, Inc. (or its affiliates). By initiating a payment, you agree to Stripe’s terms of service, privacy policy, and applicable policies. NCLink does not control Stripe’s practices and is not responsible for their actions, omissions, or security.
Amazon Web Services (AWS): NCLink uses AWS for hosting, storage, and content delivery, including the storage of uploaded CAD files, converted STL files, and preview images. AWS processes data solely on NCLink’s behalf and subject to its own terms and privacy practices.
Analytics and Performance Tools: NCLink may use third-party analytics or performance monitoring tools to understand usage trends and improve the Platform. These providers may collect limited data such as device identifiers, IP addresses, and browsing behavior.
External Links: The Platform may contain links to third-party websites or services not operated or controlled by NCLink. NCLink is not responsible for the content, practices, or privacy policies of such third parties. Accessing external sites is at your own risk.
Disclaimer: Your interactions with third-party services are solely between you and the provider. NCLink disclaims liability for any loss, damage, or claims arising from reliance on, or use of, third-party services.

11. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or NCLink’s data practices, you may contact us at:
Email: privacy@nclink.org
Mailing Address: NCLink [insert company’s legal address in Indiana]

NCLink will use commercially reasonable efforts to respond to verified requests within the timeframes required by applicable law.

12. Changes to This Privacy Policy

Right to Modify: NCLink reserves the right to update, revise, or otherwise modify this Privacy Policy at any time, in whole or in part, at its sole discretion.

Notice of Changes: Material changes will be communicated by posting the updated Policy on the NCLink website and, where legally required or at NCLink’s discretion, by providing notice via email or through the Platform.

Effective Date: Unless otherwise stated in the notice, modifications shall take effect immediately upon posting.

Continued Use: Continued access to or use of the Platform after the effective date of any modification constitutes acceptance of the revised Privacy Policy. If you do not agree with the modifications, your sole remedy is to discontinue use of the Platform and close your account.