Privacy Policy
How Morph3D handles personal data on the platform, in compliance with the Brazilian General Data Protection Law (Law No. 13.709/2018 — LGPD).
This is a courtesy translation. The Portuguese version is the legally binding document and prevails in case of any discrepancy. Read it at Política de Privacidade.
Last updated: July 3, 2026
This Policy describes how Morph3D handles personal data on the platform, in compliance with the Brazilian General Data Protection Law (Law No. 13.709/2018 — LGPD). It applies to the personal data of individuals who use the platform — including representatives, agents and contacts of corporate clients (legal entities) and, where applicable, individual clients.
1. Controller and Data Protection Officer
FuturePrints Ltda, CNPJ 54.827.025/0001-92, R. das Acácias, 275, Bairro dos Estados, Timbó/SC, CEP 89093-620, which operates under the Morph3D brand, is the data controller for the personal data processed through the platform.
- Data Protection Officer (DPO): Thomas.
- Channel for the data subject and the DPO: contato@morph3d.com.br · (47) 93618-2026.
2. Data we process and minimization
We collect only what is necessary for each purpose (art. 6, III, LGPD). We do not request sensitive personal data (art. 5, II) nor data from children and adolescents — the platform is intended for professional/business use.
| Category | Examples | Source |
|---|---|---|
| Identification and contact | name, email, phone/WhatsApp, job title, company, CNPJ | provided by you |
| Billing data | company name, CNPJ/CPF, address, state tax registration | provided by you |
| Uploaded files | CAD/STL/STEP, drawings, technical specifications | uploaded by you |
| Order data | material, quantity, delivery address, history | generated during use |
| Payment | Pix/card/boleto confirmation (we do not store full card data) | from the payment method |
| Browsing | IP, device, pages visited, essential cookies | collected automatically |
CAD/STL/STEP files are treated primarily as the client's industrial trade secret and receive reinforced protection (see Clauses 4 and 6, and the NDA). As a rule they do not contain personal data; when they do, the safeguards of this Policy apply to them.
3. Legal bases and purposes
We process data only when supported by a legal basis under the LGPD:
| Purpose | Legal basis (LGPD) |
|---|---|
| Registration, quoting, production and order fulfillment | Contract performance / preliminary procedures (art. 7, V) |
| Issuance of NF-e (Brazilian tax invoice) and tax, accounting and fiscal obligations | Compliance with a legal/regulatory obligation (art. 7, II) |
| Communication about the order, support and billing | Contract performance (art. 7, V) |
| Fraud prevention, security and legal defense | Legitimate interest / exercise of rights (art. 7, IX and VI) |
| Platform improvement and metrics (aggregated data) | Legitimate interest (art. 7, IX) |
| Marketing communications | Consent (art. 7, I) — revocable at any time |
When the basis is legitimate interest, we balance that interest against your rights and freedoms, limit the processing to what is strictly necessary, and you may object through the channels in Clause 1. The corresponding legitimate interest assessment report may be requested by the data subject or required by the ANPD (art. 10, §3, LGPD).
4. Sharing — processors and subprocessors
We share data only with those necessary to operate the service, acting as processors (art. 5, VII), contractually bound to confidentiality, security and processing restricted to our instructions:
- Production partners (makers), when the order is produced within the network — they receive only the files and data strictly necessary for the contracted part, under a confidentiality undertaking equivalent to the NDA. Morph3D remains responsible to you for their compliance.
- Hosting/cloud, for storage of files and the application;
- Payment methods (Pix/card/boleto), to process charges;
- ERP/tax invoicing system, for issuing NF-e;
- Carriers, for delivery.
We do not sell personal data nor use it for purposes incompatible with this Policy. Disclosure may occur under legal requirement or court order, limited to what is strictly necessary.
5. International transfer
Data is preferably hosted in Brazil. Should any processor (e.g., a cloud provider) process data outside Brazil, the transfer will comply with the LGPD (art. 33), with safeguards such as a country with an adequate level of protection or standard contractual clauses approved by the ANPD (ANPD Governing Board Resolution No. 19/2024).
6. Retention and disposal
We keep data only for as long as necessary for the purposes or the legal obligation:
- CAD/STL/STEP files: kept for as long as necessary to perform the order and then deleted within up to 3 (three) months after the order is completed. For approved/produced orders, they may be retained for up to 12 (twelve) months, for any rework, warranty or dispute defense.
- Early deletion upon request: at the data subject's request, we delete the files before this deadline, except where a legal obligation states otherwise.
- Tax data (linked to NF-e): retained for the legal period — as a rule 5 (five) years — due to legal obligation.
- Registration/contact data: for as long as the relationship lasts and for the legal retention periods, after which it is deleted or anonymized.
- Application access records (logs): kept for at least 6 (six) months, in compliance with art. 15 of the Brazilian Internet Civil Rights Framework (Law No. 12.965/2014), and for a longer period when necessary for security or legal defense.
After these periods, data is deleted or anonymized securely. Backup copies are overwritten in the normal cycle, remaining confidential until then.
7. Security
We adopt technical and administrative measures to protect data: access control restricted to what is necessary, transmission over encrypted connections (HTTPS), authenticated-access storage and backups. No system is completely immune to incidents. In the event of a significant security incident that may pose a risk or cause harm, we will notify the affected data subjects and the ANPD as provided in art. 48 of the LGPD.
8. Automated decisions
The instant quote (instant-quote), where applicable, is generated in an automated manner, based on the file's geometry and the informed parameters, to estimate price and lead time. It does not produce discriminatory effects and does not replace human review when you request a manual quote. You may request a review of that quote through the channels in Clause 1 (art. 20, LGPD).
9. Data subject rights (art. 18)
You may, at any time, request: confirmation and access; correction; anonymization, blocking or deletion of unnecessary data or data processed in noncompliance; portability; information about sharing; withdrawal of consent; and objection to processing based on legitimate interest. Simply contact the DPO through the channels in Clause 1; we will respond within the deadlines set by the LGPD, and may request proof of identity. Some requests may be denied or limited where there is a legal obligation to retain data or a regular exercise of rights in legal proceedings. You may also file a petition directly with the ANPD.
10. Cookies and analytics
We use essential cookies for the site to function and analytics cookies (Google Analytics 4, with anonymized IP), to understand usage on an aggregated basis and improve the experience — based on legitimate interest (Clause 3). We do not use advertising cookies. You may block or remove cookies and opt out at any time in your browser settings (or via the Google Analytics opt-out add-on).
11. Changes
We may update this Policy; the "Last updated" date indicates the version in force. Material changes will be communicated through the usual channels.
Morph3D is a brand of FuturePrints Ltda — CNPJ 54.827.025/0001-92 · Timbó/SC · contato@morph3d.com.br · (47) 93618-2026