Privacy Policy

Effective Date: October 10, 2025  ·  Last Updated: October 10, 2025

1. Introduction

Welcome to DesignMana, operated by MANALABS3D, Inc. ("DesignMana," "MANA," "we," "our," or "us"). This Privacy Policy explains how we collect, use, store, share, and protect your personal information when you use our platform at www.designmana.com(the "Platform"). This Privacy Policy is incorporated into and forms part of our Terms of Service.

BY USING DESIGNMANA, YOU EXPRESSLY CONSENT TO THE COLLECTION, USE, DISCLOSURE, AND STORAGE OF YOUR INFORMATION AS DESCRIBED IN THIS PRIVACY POLICY. If you do not agree, you must immediately cease using the Platform.

Contact Information:

• Email: privacy@designmana.com
• Website: www.designmana.com
• Terms of Service: www.designmana.com/terms

2. Information We Collect

2.1 Information You Provide Directly

Account Registration Information:

• Full legal name
• Email address
• Username and password
• Date of birth (to verify age 18+)
• Phone number
• Business name and tax identification number (EIN, SSN, or VAT number)
• Government-issued identification documents (driver's license, passport)
• Business licenses or professional certifications
• Bank account or payment information
• Billing and shipping addresses

Content and Files:

• 3D design files (STL, OBJ, STEP, CAD, and other formats)
• Images, descriptions, and specifications for Jobs
• Communications with other users through platform messaging
• Customer support communications
• Dispute information and evidence (photos, documents, messages)

Transaction Information:

• Bid amounts and pricing information
• Order history and transaction details
• Payment method information (processed by third-party payment processors)
• Shipping and delivery information
• Ratings, reviews, and feedback

Tax and Compliance Information:

• W-9 or W-8BEN forms
• Tax identification numbers
• Proof of insurance documentation
• Export compliance certifications

2.2 Information Collected Automatically

Device and Usage Information:

• IP address and approximate geographic location
• Browser type and version
• Operating system
• Device identifiers (MAC address, mobile device ID)
• Pages viewed and features accessed
• Time spent on pages
• Clickstream data
• Referring and exit pages
• Search queries on the Platform

Cookies and Tracking Technologies:

• Session cookies (required for platform functionality)
• Persistent cookies (for preferences and authentication)
• Analytics cookies (Google Analytics, Mixpanel, or similar)
• Advertising cookies (for retargeting and ad measurement)
• Web beacons and pixel tags
• Local storage and cache data

Technical and Security Information:

• Login timestamps and authentication logs
• Failed login attempts
• Account activity and access history
• Security event logs
• File upload/download metadata
• System error reports and crash logs

2.3 Information from Third Parties

Payment Processors:

Stripe, PayPal, or other payment providers share transaction data, payment method details, and fraud risk assessments.

Identity Verification Services:

Third-party KYC (Know Your Customer) providers may share identity verification results, background check data, and fraud risk scores.

Social Media and Third-Party Logins:

If you connect social media accounts, we may receive profile information, email addresses, and contact lists.

Public Sources:

• Business registry information
• Professional licensing databases
• Publicly available social media profiles
• Government watchlists and sanctions screening data

Other Users:

Information about you shared by other users in disputes, reviews, or reports.

3. How We Use Your Information

3.1 Platform Operations and Services

We use your information to:

• Create and manage your account
• Facilitate transactions between Creators, Makers, and Designers
• Process payments and distribute royalties
• Host and deliver design files
• Provide customer support
• Send transactional emails and notifications
• Verify identity and prevent fraud
• Enforce our Terms of Service and policies
• Resolve disputes between users
• Improve platform functionality and user experience

3.2 Legal and Compliance Purposes

We use your information to:

• Comply with tax reporting obligations (IRS Forms 1099-NEC, etc.)
• Conduct export control and OFAC sanctions screening
• Respond to legal process (subpoenas, court orders, warrants)
• Cooperate with law enforcement investigations
• Investigate prohibited content and Terms violations
• Defend against legal claims and litigation
• Maintain records for audit and regulatory purposes

3.3 Security and Fraud Prevention

We use your information to:

• Detect and prevent fraudulent transactions
• Monitor for suspicious activity and security threats
• Scan uploaded files for malware and prohibited content
• Authenticate user identity and prevent unauthorized access
• Investigate data breaches and security incidents
• Block users from sanctioned countries or restricted parties lists

3.4 Marketing and Communications (Optional)

With your consent (where required by law), we may:

• Send promotional emails about new features, designs, or offers
• Display personalized advertising on and off the Platform
• Conduct surveys and request feedback
• Share news, updates, and industry insights

You can opt out of marketing communications at any time by clicking "Unsubscribe" in emails or adjusting your account preferences.

3.5 Analytics and Improvement

We use your information to:

• Analyze platform usage patterns and trends
• Conduct A/B testing of features
• Generate aggregated, anonymized statistics
• Train machine learning models for content moderation
• Improve search algorithms and recommendations
• Develop new features and services

4. How We Share Your Information

4.1 With Other Users

Public Profile Information:

• Username, profile photo, and bio are visible to all users
• Ratings, reviews, and feedback are publicly displayed
• Portfolio designs uploaded to the marketplace are publicly viewable

Transaction-Specific Sharing:

• Creators and Makers can see each other's contact information for active Jobs
• Shipping addresses are shared for delivery purposes
• Design files are shared with Makers who accept Jobs
• Messages exchanged through platform messaging are visible to both parties

4.2 With Service Providers

We share information with third-party vendors who perform services on our behalf:

• Payment Processors: Stripe, PayPal, and similar services process payments and store payment method information
• Cloud Hosting and Storage: Amazon Web Services (AWS), Google Cloud, or similar providers host our servers and store design files
• Analytics and Monitoring: Google Analytics, Mixpanel, Sentry, and similar tools track usage and errors
• Identity Verification: KYC/AML service providers verify user identity and conduct background checks
• Email and Communication: SendGrid, Mailchimp, or similar services deliver transactional and marketing emails
• Customer Support: Zendesk, Intercom, or similar platforms manage support tickets and live chat
• Security and Fraud Detection: Cloudflare, fraud detection APIs, and security scanning services
• Accounting and Tax Compliance: Tax preparation software and accounting service providers

THESE SERVICE PROVIDERS ARE CONTRACTUALLY OBLIGATED TO PROTECT YOUR DATA, BUT DESIGNMANA IS NOT LIABLE FOR THEIR ACTIONS, BREACHES, OR MISUSE OF YOUR INFORMATION.

4.3 For Legal and Safety Reasons

We may disclose your information without notice when required or permitted by law:

Legal Obligations:

• In response to subpoenas, court orders, or legal process
• To comply with tax reporting and government audits
• To meet export control and sanctions screening requirements
• When required by regulatory agencies or law enforcement

Safety and Rights Protection:

• To investigate violations of our Terms of Service
• To detect, prevent, or address fraud and security threats
• To protect the rights, property, or safety of DesignMana, users, or the public
• To enforce our intellectual property rights
• To defend against legal claims or litigation

Prohibited Content:

• Reports of weapons, illegal items, or dangerous content to law enforcement
• Child sexual abuse material (CSAM) reports to the National Center for Missing & Exploited Children (NCMEC) and law enforcement

4.4 Business Transfers

If DesignMana is involved in a merger, acquisition, bankruptcy, dissolution, reorganization, sale of assets, or similar transaction, your information may be transferred to the successor entity. You will be notified via email and/or platform notice of any change in ownership or control of your personal information.

4.5 Aggregated and Anonymized Data

We may share aggregated, de-identified, or anonymized data that cannot reasonably identify you:

• Industry reports and statistics
• Platform performance metrics
• Research and academic studies
• Public marketing materials

Note: While we make efforts to anonymize data, re-identification risks exist. DesignMana is not liable if anonymized data is re-identified by third parties.

4.6 With Your Consent

We may share your information for other purposes with your explicit consent.

5. Data Security

5.1 Security Measures We Implement

DesignMana takes data security seriously and implements industry-standard measures:

Technical Safeguards:

• Encryption of data in transit using TLS 1.3
• Encryption of design files at rest using AES-256
• Secure access controls and authentication (password hashing, multi-factor authentication)
• Firewalls and intrusion detection systems
• Automated malware and vulnerability scanning
• Regular security audits and penetration testing

Administrative Safeguards:

• Employee background checks and confidentiality agreements
• Limited access to personal data on a need-to-know basis
• Security training for staff
• Incident response and breach notification procedures

Physical Safeguards:

• Secure data centers with restricted physical access
• Environmental controls and disaster recovery systems

5.2 Critical Security Limitations and Risk Acknowledgment

NO SYSTEM IS 100% SECURE. Despite our efforts, you acknowledge and accept the following risks:

Inherent Internet Risks:

• Data transmitted over the Internet is susceptible to interception, eavesdropping, and hacking
• Unauthorized third parties may gain access to our systems despite security measures
• Malware, phishing, and social engineering attacks may compromise your account

Third-Party Risks:

• Service providers, cloud hosts, and payment processors may experience breaches
• Other users may misuse, steal, or disclose your design files
• Hackers may target DesignMana or its infrastructure

Design File Risks:

CRITICAL WARNING: 3D design files uploaded to DesignMana are inherently vulnerable to theft, misuse, and unauthorized reproduction. Makers may violate confidentiality obligations and copy, reverse-engineer, or redistribute your files. Files may be intercepted during transmission or storage. Once a design file is disclosed, it cannot be "taken back."

YOU ASSUME ALL RISK ASSOCIATED WITH UPLOADING SENSITIVE, PROPRIETARY, OR CONFIDENTIAL DESIGNS. We strongly advise against uploading:

• Patent-pending inventions
• Trade secrets or proprietary technology
• Highly confidential or classified designs
• Designs with significant commercial value without additional protections

5.3 Your Security Responsibilities

You are responsible for:

• Maintaining strong, unique passwords
• Enabling multi-factor authentication if available
• Keeping your account credentials confidential
• Logging out of shared or public devices
• Monitoring your account for unauthorized activity
• Promptly notifying us of suspected breaches at security@designmana.com

Failure to follow security best practices may result in account compromise, and DesignMana is not liable for losses resulting from your negligence.

5.4 Data Breach Notification

In the event of a data breach affecting your personal information or design files, we will:

• Investigate the breach promptly
• Notify affected users within 72 hours of discovery (where required by law)
• Provide information about the breach, affected data, and recommended actions
• Notify regulatory authorities as required by applicable law

However, DesignMana is not liable for damages resulting from data breaches, except where caused by our gross negligence or willful misconduct, and even then, subject to the limitations in Section 11.

6. Data Retention

6.1 How Long We Keep Your Information

We retain your information for as long as necessary to provide services, comply with legal obligations, and resolve disputes:

• Active Accounts: Account information, transaction history, and uploaded designs are retained while your account is active
• Design Files: Creator-uploaded design files are retained for the duration of the transaction plus 90 days; marketplace designs uploaded by Designers are retained indefinitely unless you remove them; deleted files may persist in backups for up to 180 days
• Transaction Records: Payment and transaction data are retained for 7 years for tax compliance and audit purposes
• Communications: Platform messages and support tickets are retained for 3 years
• Legal and Compliance Data: Tax forms, identity verification records, and dispute documentation are retained for 7 years
• Closed or Suspended Accounts: After account closure, we retain necessary data for 7 years for legal, tax, and regulatory compliance

6.2 Data Deletion Requests

You may request deletion of your personal data by contacting privacy@designmana.com. However:

• We may retain data required for legal, tax, or regulatory compliance
• Anonymized or aggregated data may be retained indefinitely
• Backup copies may persist until the next backup cycle
• Data shared with third parties may not be retrievable

Deletion requests do not guarantee complete removal of all traces of your information.

7. International Data Transfers

7.1 Data Processing Locations

DesignMana is based in the United States. Your information may be transferred to, stored, and processed in the United States and countries where our service providers operate (including but not limited to Canada, the European Union, and Asia-Pacific regions).

By using DesignMana, you consent to the transfer of your information to the United States and other jurisdictions that may not provide the same level of data protection as your home country.

7.2 Legal Basis for International Transfers

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Adequacy decisions by the European Commission or other regulators
• Your explicit consent to the transfer

7.3 Access by Foreign Governments

Your information may be accessible to U.S. government agencies, law enforcement, and intelligence services under U.S. law, including national security requests under FISA, subpoenas, warrants, court orders, and administrative requests by regulatory agencies. We may be prohibited from notifying you of such requests due to legal restrictions.

DESIGNMANA IS NOT LIABLE FOR ACCESS TO YOUR DATA BY GOVERNMENT ENTITIES, FOREIGN OR DOMESTIC.

8. Your Privacy Rights

8.1 General Rights

Depending on your jurisdiction, you may have the following rights:

• Right to Access: Request a copy of the personal information we hold about you and how we use it
• Right to Correction: Request correction of inaccurate or incomplete personal information
• Right to Deletion: Request deletion of your personal information (subject to legal retention requirements)
• Right to Data Portability: Request a copy of your data in a structured, machine-readable format
• Right to Object: Object to processing of your personal information for direct marketing or other purposes
• Right to Restrict Processing: Request restriction of processing under certain circumstances
• Right to Withdraw Consent: Withdraw consent for processing based on consent (does not affect prior processing)
• Right to Lodge a Complaint: File a complaint with a data protection authority in your jurisdiction

8.2 How to Exercise Your Rights

To exercise your rights, contact us at privacy@designmana.com with your full name and account email address, the specific right you wish to exercise, details of your request, and proof of identity (government-issued ID may be required).

We will respond within 30 days (or as required by applicable law). However, some requests may take longer, we may deny requests that are unfounded, excessive, or prohibited by law, and we may charge a reasonable fee for repetitive or burdensome requests.

8.3 California Privacy Rights (CCPA/CPRA)

California residents have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

• Right to Know: Categories and specific pieces of personal information collected, sources, business purposes, and categories of third parties with whom information is shared
• Right to Delete: Request deletion of personal information (subject to exceptions)
• Right to Opt-Out of Sale/Sharing: Opt out of "sale" or "sharing" of personal information for targeted advertising
• Right to Correct: Request correction of inaccurate personal information
• Right to Limit Use of Sensitive Personal Information: Limit use of sensitive personal information to necessary purposes
• Right to Non-Discrimination: You cannot be discriminated against for exercising your CCPA rights
• Authorized Agents: You may designate an authorized agent to make requests on your behalf (proof of authorization required)

To exercise California rights, email privacy@designmana.comwith "California Privacy Request" in the subject line.

8.4 European Union / UK Rights (GDPR / UK GDPR)

EU and UK residents have rights under the General Data Protection Regulation (GDPR):

• Legal Basis for Processing: Contract performance, legal obligations, legitimate interests, and consent
• Data Protection Officer (DPO): For GDPR-related inquiries, contact dpo@designmana.com
• Right to Lodge a Complaint: EU residents may file complaints with their national data protection authority; UK residents may contact the Information Commissioner's Office (ICO)
• International Transfers: We use Standard Contractual Clauses (SCCs) for EU/UK data transfers to the U.S.

8.5 Other Jurisdictions

If you reside outside California, the EU, or the UK, your rights are determined by local law. Contact privacy@designmana.com for information about your specific rights.

9. Cookies and Tracking Technologies

9.1 Types of Cookies We Use

• Strictly Necessary Cookies: Required for platform functionality (login, account access, transactions). Cannot be disabled without breaking core features.
• Performance and Analytics Cookies: Track usage patterns to help us understand how users interact with the platform. May be disabled in your browser settings.
• Functional Cookies: Remember your preferences (language, layout, settings) to improve user experience.
• Advertising and Targeting Cookies: Track your activity for personalized ads on and off the Platform. Provided by Google Ads, Facebook Pixel, and similar services.

9.2 Third-Party Tracking

Third-party services may track your activity across websites, including Google Analytics, Google Ads, Facebook Pixel, retargeting platforms, and social media plugins. These third parties have their own privacy policies. DesignMana is not responsible for their tracking practices or data collection.

9.3 Managing Cookies and Opting Out

• Browser Settings: Most browsers allow you to block or delete cookies
• Google Analytics Opt-Out: https://tools.google.com/dlpage/gaoptout
• Network Advertising Initiative (NAI): http://optout.networkadvertising.org
• Digital Advertising Alliance (DAA): http://optout.aboutads.info
• Do Not Track (DNT): DesignMana does not currently respond to DNT signals

Note: Disabling cookies may impair platform functionality, including login, transactions, and account access.

10. Children's Privacy

10.1 Age Restriction

DesignMana is not intended for individuals under the age of 18. We do not knowingly collect personal information from minors under 18. If you are under 18, you must not create an account, use the Platform, or submit any personal information.

10.2 Parental Notice

If we discover that we have inadvertently collected information from a user under 18, we will delete the account immediately, remove all associated personal information and content, and notify the account email address.

If you are a parent or guardian and believe your child has created an account, contact us immediately at privacy@designmana.com.

10.3 Compliance with COPPA

DesignMana complies with the Children's Online Privacy Protection Act (COPPA) by restricting access to users 18 and older, not knowingly collecting data from children under 13, and promptly deleting any data inadvertently collected from minors.

11. Disclaimers and Limitation of Liability

11.1 Privacy and Security Disclaimers

DESIGNMANA PROVIDES THE PLATFORM "AS IS" AND "AS AVAILABLE" WITHOUT WARRANTIES REGARDING DATA PRIVACY OR SECURITY.

We specifically disclaim all warranties, express or implied, including but not limited to:

• Security: We do not warrant that your information will be secure from unauthorized access, hacking, or breaches
• Confidentiality: We do not guarantee confidentiality of design files or communications
• Third-Party Actions: We are not responsible for actions of other users, Makers, service providers, or third parties who access your information
• Accuracy: We do not warrant the accuracy, completeness, or reliability of data
• Compliance: We do not guarantee compliance with all international privacy laws

11.2 No Liability for Data Breaches or Misuse

TO THE MAXIMUM EXTENT PERMITTED BY LAW, DESIGNMANA SHALL NOT BE LIABLE FOR ANY DAMAGES, LOSSES, OR HARM ARISING FROM:

• Data Breaches: Unauthorized access, interception, third-party breaches, or compromised accounts
• Intellectual Property Theft: Theft, misuse, reverse engineering, or unauthorized reproduction of design files
• Third-Party Actions: Misconduct by users, Makers, Designers, service providers, advertisers, or government entities
• Technical Failures: Data loss due to system failures, crashes, outages, or errors in data processing
• Legal and Regulatory Consequences: Fines, penalties, lawsuits, or enforcement actions due to privacy violations

11.3 Maximum Liability Cap

IN NO EVENT SHALL DESIGNMANA'S TOTAL CUMULATIVE LIABILITY FOR ANY PRIVACY-RELATED CLAIMS EXCEED THE GREATER OF:

• $500 USD, OR
• The amount of platform fees you paid in the 12 months preceding the claim

EVEN IF DESIGNMANA HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.

11.4 Exceptions to Liability Limitations

Some jurisdictions do not allow exclusions or limitations of liability. In such cases, the above limitations may not apply, and our liability will be limited to the maximum extent permitted by law.

11.5 Basis of the Bargain

You acknowledge that DesignMana offers the Platform free or at low cost in reliance on these limitations, that without these protections the Platform could not be offered economically, and that these limitations reflect a reasonable allocation of risk that you accept voluntarily.

12. Changes to This Privacy Policy

12.1 Right to Modify

DesignMana reserves the right to modify this Privacy Policy at any time, at our sole discretion, by posting an updated version at www.designmana.com/privacywith a new "Last Updated" date.

12.2 Notice of Material Changes

Material changes include changes to the types of data collected, how data is used or shared, data retention periods, or reduction of your privacy rights. Notice will be provided via email, platform notification, or prominent website notice. You will have 30 days to review changes before they take effect.

12.3 Continued Use Constitutes Acceptance

Your continued use of the Platform after changes take effect constitutes your acceptance of the modified Privacy Policy. If you do not agree, you must stop using the Platform and close your account by contacting support@designmana.com.

12.4 No Retroactive Application

Changes generally apply prospectively to information collected after the effective date, unless required by law or made with your explicit consent.

13. Third-Party Links and Services

13.1 Third-Party Websites

The Platform may contain links to third-party websites. DesignMana is not responsible for their privacy practices, content, accuracy, availability, or data collection. You access third-party sites at your own risk.

13.2 Third-Party Integrations

The Platform integrates services such as Stripe, PayPal, AWS, Google Cloud, Google Analytics, Mixpanel, and social media plugins. These integrations may collect information independently. DesignMana is not liable for their data practices.

13.3 Single Sign-On (SSO)

If you use social login (e.g., "Sign in with Google"), the third-party provider may share profile information with DesignMana according to your privacy settings on that platform.

14. Marketing and Communications

14.1 Transactional Communications

You cannot opt out of transactional emails, including account verification, order confirmations, payment receipts, dispute notifications, policy updates, security alerts, and legal notices. These are essential to providing the service.

14.2 Marketing Communications (Opt-In/Opt-Out)

With your consent, we may send promotional emails, newsletters, surveys, and special offers. To opt out:

• Click "Unsubscribe" at the bottom of any marketing email
• Adjust preferences in your account settings
• Email privacy@designmana.com with "Unsubscribe" in the subject

Opt-out takes effect within 10 business days.

14.3 Advertising and Retargeting

We may display targeted advertising based on your activity using cookies, tracking pixels, email addresses, and device identifiers. To opt out, use the cookie opt-out tools in Section 9.3 or adjust ad settings on Google, Facebook, and other platforms.

15. California "Shine the Light" Law

California Civil Code Section 1798.83 permits California residents to request information about disclosure of personal information to third parties for direct marketing purposes. DesignMana does not share personal information with third parties for their direct marketing purposes without your consent. To request information, email privacy@designmana.comwith "California Shine the Light Request" in the subject line.

16. Accessibility

DesignMana is committed to making this Privacy Policy accessible to all users, including those with disabilities. If you have difficulty accessing this Privacy Policy, contact us at accessibility@designmana.com. We will provide the information in an alternative format upon request.

17. Dispute Resolution and Arbitration

17.1 Incorporation of Terms of Service

All disputes arising from or relating to this Privacy Policy are subject to the dispute resolution, arbitration, and class action waiver provisions in our Terms of Service, Section 17, including:

• Mandatory binding arbitration (except small claims and injunctive relief)
• Class action waiver
• 30-day informal negotiation period
• JAMS arbitration in San Diego County, California
• 1-year statute of limitations

17.2 Governing Law

This Privacy Policy is governed by the laws of the State of California, USA, without regard to conflict of law principles.

17.3 Venue

For claims not subject to arbitration, you consent to the exclusive jurisdiction of the state and federal courts located in San Diego County, California.

18. International Users and Compliance

18.1 Compliance with Local Laws

While DesignMana is based in the United States, we strive to comply with international privacy laws where applicable, including GDPR (EU), UK GDPR, CCPA/CPRA (California), PIPEDA (Canada), LGPD (Brazil), and PDPA (Singapore). However, DesignMana cannot guarantee compliance with all local laws in every jurisdiction.

18.2 User Responsibility for Local Compliance

You are responsible for ensuring your use of DesignMana complies with your local privacy, data protection, and export control laws. If your country restricts data transfers to the United States or prohibits certain types of processing, you may not use the Platform.

18.3 Export Control and Sanctions

Certain design files uploaded to DesignMana may be subject to export controls (ITAR, EAR) and cannot be shared with users in sanctioned countries. DesignMana screens users and transactions against OFAC lists, but we are not liable for violations of export laws.

19. Data Protection Officer (DPO) and Contact Information

• DPO (GDPR/UK GDPR inquiries): dpo@designmana.com
• Privacy Inquiries: privacy@designmana.com
• Security Incidents: security@designmana.com
• General Inquiries: contact@designmana.com
• Support: support@designmana.com
• Legal: legal@designmana.com

20. Specific Disclosures for Transparency

20.1 California Privacy Disclosures (Last 12 Months)

Categories of Personal Information Collected:

• Identifiers (name, email, IP address, device ID)
• Commercial information (purchase history, transaction data)
• Financial information (payment methods, tax IDs)
• Internet activity (browsing history, usage data)
• Geolocation data (approximate location from IP address)
• Professional information (business name, certifications)
• Inferences (preferences, fraud risk assessments)
• Sensitive personal information (government IDs, precise geolocation)

Sale or Sharing of Personal Information:

• We do NOT sell personal information for monetary consideration
• We MAY "share" information with advertising partners for targeted ads (may qualify as "sale" under CCPA)
• To opt out, email privacy@designmana.com with "Do Not Sell/Share My Info"

20.2 Data Processing Activities

We may use automated systems for fraud detection, content moderation, search result ranking, and ad targeting and personalization. You have the right to contest automated decisions that significantly affect you.

We may create user profiles based on transaction history, behavioral patterns, usage data, and risk assessments for fraud prevention.

20.3 Retention Periods Summary

21. Consent and Acknowledgment of Risks

21.1 Express Consent

BY USING DESIGNMANA, YOU EXPRESSLY AND UNAMBIGUOUSLY CONSENT TO:

• Collection and Use: The collection, use, processing, and storage of your personal information as described
• International Transfers: The transfer of your information to the United States and other countries
• Third-Party Sharing: Sharing of your information with service providers and other third parties
• Government Access: Potential access to your information by U.S. government agencies under legal authority
• Design File Risks: The inherent risk of intellectual property theft, unauthorized use, or disclosure of uploaded design files
• Security Limitations: The risk of data breaches and security incidents despite our reasonable precautions
• Limited Liability: The limitations on DesignMana's liability described in Section 11

21.2 Withdrawal of Consent

You may withdraw consent at any time by closing your account, ceasing to use the Platform, or requesting data deletion. Withdrawal does not affect lawfulness of prior processing or data required for legal, tax, or regulatory compliance.

21.3 Assumption of Risk

YOU ACKNOWLEDGE AND ASSUME ALL RISKS ASSOCIATED WITH:

• Intellectual Property Risks: Design files may be stolen, copied, reverse-engineered, or misused; trade secrets may lose protection once uploaded
• Security Risks: Account compromise, data interception, system breaches, and service provider breaches
• Legal and Compliance Risks: Export control violations, tax obligations, IP disputes, and regulatory enforcement
• Third-Party Risks: User violations of confidentiality, service provider misuse, and payment processor security issues

YOU USE DESIGNMANA AT YOUR OWN RISK.

22. Survival and Severability

The following provisions survive termination or closure of your account: data retention obligations (Section 6), disclaimers and limitation of liability (Section 11), indemnification obligations, dispute resolution and arbitration (Section 17), and governing law and venue (Section 17).

If any provision of this Privacy Policy is found invalid, unlawful, or unenforceable, the invalid provision will be modified to the minimum extent necessary to make it enforceable, and the remaining provisions will remain in full force and effect.

23. Additional Disclosures and Warnings

23.1 No Guarantee of Anonymity

DesignMana cannot guarantee anonymity or complete privacy. Your information may be disclosed to other users for transactions, in response to legal process, in the event of data breaches, or through aggregated data that may be re-identified. Do not share information on the Platform that you wish to keep completely private.

23.2 Public Information Warning

Information you make public on DesignMana may be indexed by search engines, copied or archived by third parties, used for purposes beyond your control, and may be difficult or impossible to completely remove. Think carefully before sharing information publicly.

23.3 Employment and Tax Implications

Your activity on DesignMana may have legal and financial consequences:

• For Makers and Designers: Platform earnings are taxable income; you are responsible for self-employment taxes; you are an independent contractor, not an employee
• For Creators: Uploaded designs may become evidence in IP disputes; transactions may create contractual obligations; export control violations may result in criminal penalties

Consult a qualified attorney, accountant, or tax advisor regarding your obligations.

23.4 No Legal, Financial, or Tax Advice

DesignMana does not provide legal, financial, tax, or professional advice. This Privacy Policy is for informational purposes only and does not constitute legal advice, tax advice, or professional guidance. Always consult qualified professionals for advice specific to your situation.

24. Specific State and Country Disclosures

24.1 Nevada Residents

Nevada law (NRS 603A.340) allows Nevada residents to opt out of the "sale" of certain covered information. DesignMana does not currently sell covered information as defined by Nevada law. To exercise Nevada opt-out rights (if applicable in the future), email privacy@designmana.comwith "Nevada Opt-Out Request."

24.2 Colorado, Connecticut, Virginia, and Utah Residents

Residents of these states have rights similar to CCPA, including rights to access, correct, delete, and opt out of targeted advertising, sale, or profiling. To exercise these rights, email privacy@designmana.com with your state in the subject line.

We will respond within 45 days (may be extended to 90 days for complex requests).

24.3 European Union and United Kingdom

Legal bases for processing include contractual necessity, legal obligation, legitimate interests (fraud prevention, security, analytics), and consent (marketing, optional features). Data Protection Officer: dpo@designmana.com. International transfers use Standard Contractual Clauses (SCCs) approved by the European Commission.

24.4 Canada (PIPEDA)

Canadian residents have rights under PIPEDA to access personal information, correct inaccuracies, withdraw consent for optional processing, and file complaints with the Privacy Commissioner of Canada. Email privacy@designmana.comwith "Canadian Privacy Request."

24.5 Brazil (LGPD)

Brazilian residents have rights under LGPD including confirmation of processing, correction, anonymization or deletion of data, portability, information about data sharing, and right to withdraw consent. Email privacy@designmana.comwith "Brazilian Privacy Request." National Data Protection Authority: Autoridade Nacional de Proteção de Dados (ANPD).

25. Final Provisions and Entire Agreement

This Privacy Policy, together with the Terms of Service and any additional policies referenced herein, constitutes the entire agreement between you and DesignMana regarding privacy and data protection, superseding all prior privacy policies, statements, or representations.

You may not assign or transfer your rights or obligations under this Privacy Policy. DesignMana may assign this Privacy Policy to any affiliate, successor, or acquirer without notice or consent. DesignMana is not liable for failures to comply with this Privacy Policy due to events beyond our reasonable control (natural disasters, government actions, cyberattacks, war, labor disputes, etc.).

This Privacy Policy is drafted in English. Any translations are provided for convenience only. In the event of conflict between versions, the English version controls.

26. Contact Information and Complaints

26.1 DesignMana Contact Information

MANALABS3D, Inc. (DesignMana)

• Website: www.designmana.com
• General: contact@designmana.com
• Privacy: privacy@designmana.com
• DPO: dpo@designmana.com
• Security: security@designmana.com
• Support: support@designmana.com
• Legal: legal@designmana.com

26.2 Regulatory Authorities

If you are not satisfied with our response, you may file a complaint with the appropriate regulatory authority:

• U.S. Federal: Federal Trade Commission (FTC) — www.ftc.gov
• California: California Privacy Protection Agency — cppa.ca.gov
• European Union: Your national Data Protection Authority
• United Kingdom: Information Commissioner's Office (ICO) — ico.org.uk
• Canada: Office of the Privacy Commissioner of Canada — priv.gc.ca

27. Effective Date and Version History

• Current Version: 1.0
• Effective Date: October 10, 2025
• Last Updated: October 10, 2025

Version 1.0 (October 10, 2025): Initial Privacy Policy published.