Privacy Policy
Last updated: January 28, 2026
1. Introduction
TerrainPrints ("we," "our," or "us") respects your privacy and is committed to protecting your personal data. This privacy policy explains how we collect, use, and safeguard your information when you use our service to create 3D-printed terrain models from your Strava activities.
2. Data We Collect
From Strava (with your permission)
- Your Strava profile information (name, email)
- Activity data (name, date, distance, elevation, duration)
- GPS route data (polyline coordinates)
From You Directly
- Shipping address for order fulfillment
- Payment information (processed securely by Stripe)
- Communications you send to us
Automatically Collected
- Device and browser information
- IP address
- Usage data and analytics
3. How We Use Your Data
- To provide our service: Generate terrain models from your GPS data
- To fulfill orders: Process payments and ship products
- To communicate: Send order updates and respond to inquiries
- To improve: Analyze usage to enhance our service
We do NOT:
- Sell your personal data to third parties
- Use your data for AI/ML training purposes
- Share your Strava data with third parties (except as required for order fulfillment)
- Display your data to other users
4. Data Retention
| Data Type | Retention Period |
|---|---|
| Cached activity data | 7 days (per Strava API requirements) |
| Preview files | 7 days |
| Order records | 7 years (legal/tax requirements) |
| Account data | Until you delete your account |
5. Your Rights
Under GDPR, UK GDPR, and CCPA, you have the following rights:
- Right to Access: Request a copy of your personal data
- Right to Rectification: Correct inaccurate data (update via Strava)
- Right to Erasure: Delete your account and associated data
- Right to Data Portability: Export your data in a machine-readable format
- Right to Object: Object to certain processing of your data
- Right to Withdraw Consent: Disconnect Strava at any time
To exercise these rights, you can:
- Delete your account from your account settings
- Disconnect TerrainPrints from your Strava account
- Contact us at privacy@terrainprints.com
6. Strava Integration
We access your Strava data through their official API with your explicit consent. You can revoke this access at any time through your Strava settings.
When you disconnect TerrainPrints from Strava:
- We are notified via webhook
- Your cached activity data is deleted within 48 hours
- Your account tokens are revoked
- Existing orders are not affected (already processed)
7. Third-Party Services
- Strava: Activity data source (their privacy policy)
- Stripe: Payment processing (their privacy policy)
- NASA EOSDIS: Elevation data (public domain)
- OpenStreetMap: Water feature data (ODbL license)
8. Data Security
We implement appropriate technical and organizational measures to protect your data:
- All data transmitted via HTTPS encryption
- OAuth tokens encrypted at rest
- Admin access restricted and network-isolated
- Regular security reviews and updates
9. International Transfers
Your data may be processed in the United States. We ensure appropriate safeguards are in place for international data transfers in compliance with applicable laws.
10. Children's Privacy
Our service is not intended for children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us.
11. Changes to This Policy
We may update this privacy policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date.
12. Contact Us
For privacy-related inquiries or to exercise your rights:
- Email: privacy@terrainprints.com
- Contact Form: terrainprints.com/contact