Privacy Policy

Last Updated: June 4, 2026

1. Data Controller and Scope

VARANTECH ENERJİ SAN. TİC. LTD. ŞTİ. ("Company", "we", "us") acts as the data controller for personal data processed through Quote3D (the "Service") within the scope of applicable data protection laws, including Turkish personal data protection rules where applicable. This Privacy Policy explains how we collect, use, transfer, store, and protect personal data when you visit the website, create an account, upload models, request quotes, subscribe to paid plans, view invoices, manage billing, or contact support.

2. Categories of Personal Data Collected

Depending on how you use the Service, we may collect and process the following categories of data:

  • Account and identity data: name or display name, email address, encrypted password, role, locale, and account preferences
  • Usage and quote data: uploaded files, quote requests, technical settings, printer, material, and global profile parameters, API usage, dashboard activity, and transaction history
  • Technical and security data: IP address, browser type, device details, language settings, session records, cookie preferences, and anti-abuse or security logs
  • Billing and subscription-related data: selected plan, subscription status, renewal dates, invoice links, billing profile details, country and tax-related billing information, and provider reference identifiers; payment credentials such as full card details are processed by the payment provider and are not stored directly by us
  • Communication and support data: support requests, contact forms, feedback, temporary upload session records, and related correspondence

3. Purposes of Processing

We process personal data to create and manage accounts, authenticate users, issue temporary upload sessions, store and analyze uploaded files, generate quotes and technical analyses, operate the dashboard and API, process and maintain monthly subscriptions, display invoices and billing history, manage renewals and cancellations, monitor quotas and usage, offer customer support, detect abuse and fraud, comply with legal, accounting, tax, and consumer-law obligations, secure the platform, and improve the Service.

4. Legal Bases and Sharing

We process and share personal data on one or more lawful bases permitted by applicable law, including contractual necessity, compliance with legal obligations, legitimate interests, establishment or defense of legal claims, and consent where required. We may share data with hosting and infrastructure providers, identity and email service providers, customer-support and security providers, analytics tools where a valid basis exists, and Lemon Squeezy for checkout, payment, subscription, renewal, tax, invoice, refund, and billing-related processes. We may also disclose data where required by courts, regulators, or other competent public authorities.

5. Data Security

We use administrative, organizational, and technical safeguards designed to protect personal data, including access controls, encrypted transport where appropriate, authentication mechanisms, logging, security monitoring, provider-level security features, and internal restriction of access on a need-to-know basis. No internet transmission, cloud environment, or storage system can guarantee absolute security, but we work to reduce risk using reasonable and proportionate measures.

6. Cookies and Tracking Technologies

We use necessary cookies and similar technologies for authentication, account security, checkout continuity, locale and preference management, as well as optional analytics, functional, or marketing-related technologies where permitted. Non-essential technologies are managed through our cookie preference tools where legally required. More detail is available in our Cookie Policy.

7. Data Retention

We retain personal data for as long as necessary for the relevant purpose and for any retention period required by law. Active account data is generally retained while your account remains in use. Uploaded files and quote-related records may also be retained according to storage needs, user actions, support requirements, and automated cleanup rules for unused or orphaned files. Invoice, payment, tax, accounting, dispute, fraud-prevention, and security records may be retained longer where legally necessary or reasonably required to protect legal rights, even after account closure or plan cancellation.

8. Data Subject Rights

Subject to applicable law, including Turkish Law No. 6698 where applicable and any other mandatory regime relevant to your case, you may request information about whether your data is processed, the purpose of processing, access to your data, correction of inaccurate or incomplete data, deletion, destruction, or anonymization where legal conditions are met, information about domestic or international recipients, objection in certain cases, and compensation where unlawful processing causes damage. You may contact us to exercise these rights.

9. Children's Privacy

The Service is not designed for children or other persons who cannot validly use the Service under applicable law without proper authorization. We do not knowingly process personal data from such users in a manner requiring parental or legal representative consent without an appropriate basis. If we become aware of such data, we will take reasonable steps to review, restrict, or delete it where required.

10. Third-Party Links

The Service may include links to third-party websites, billing pages, checkout forms, or provider-hosted interfaces. We are not responsible for the privacy practices of third-party websites or services outside our control. We recommend reviewing the privacy terms of the relevant third party, including payment and billing providers, before using those services.

11. International Data Transfer

Some of our service providers, including payment, infrastructure, analytics, and support providers, may process or access personal data outside Turkiye. Where international transfers occur, we aim to rely on the legal mechanisms, safeguards, contractual commitments, and regulatory requirements applicable under Turkish data protection law and other relevant rules.

12. Changes and Contact

We may update this Privacy Policy from time to time. The latest published version is the current version unless a different effective date is stated. If you have questions about this policy, Lemon Squeezy billing-related privacy issues, or your personal data rights, please contact us at: [email protected]