Privacy Policy

VAU0 LLC is a limited liability company organized under the laws of the State of New Mexico, operating the 2ZIN e-commerce platform under the trade name 2ZIN (To Zero Inventory Network). Our principal place of business is in the United States. We manufacture and sell 3D-printed products on demand, and we provide custom 3D printing services to consumers and businesses worldwide.

For privacy inquiries, contact us at: privacy@2zin.com

We collect information you provide directly, information generated automatically when you use our services, and information from third parties.

2.1 Information You Provide Directly

• Account Registration: Full name, email address, and password (stored as a bcrypt hash — never in plain text). Phone number is optional.
• Order Information: Billing name, billing address, shipping name and address, email for order confirmation, phone number for delivery.
• Custom 3D Print Files: STL, OBJ, 3MF, STEP, and IGES files you upload for custom printing. We also collect your print configuration choices (material, color, quality settings).
• Payment Information: When you pay, you enter card details directly into Stripe or PayPal. We receive only a payment confirmation, last 4 digits, and card brand. We never see or store your full card number, CVV, or bank credentials.
• Communications: Messages you send us via email, contact forms, or our AI chat assistant (Zara). Chat messages are processed by OpenAI to generate responses.
• Newsletter Subscription: Email address and first name when you opt in to marketing communications.
• Reviews: Your name, email, and review content when you submit a product review.

2.2 Information Collected Automatically

• Log Data: IP address, browser type and version, operating system, referring URLs, pages visited, time and date of visits, time spent on pages.
• Device Information: Device type (desktop/mobile/tablet), screen resolution, browser language settings.
• Cookie Data: Session identifiers, cart contents, authentication tokens, analytics identifiers. See Section 6 for full cookie details.
• Usage Data: Products viewed, searches performed, items added to cart, checkout steps completed, features used.
• Transaction Data: Order amounts, items purchased, shipping methods chosen, promo codes used.

2.3 Information from Third Parties

• Payment Processors: Stripe and PayPal confirm successful payments and provide fraud risk signals.
• Shipping Carriers: UPS, USPS, and FedEx (via EasyPost) provide delivery status and tracking updates.
• Marketplace Platforms: When you order through Etsy, eBay, Amazon, or Walmart, we receive order and shipping information from those platforms per their seller policies.
• Analytics Providers: Google Analytics provides aggregated data about how visitors use our site.

• Files are stored on encrypted servers in access-controlled directories that are NOT publicly accessible via URL.
• Files are accessed ONLY by production staff assigned to your specific order — no one else within our organization can access them.
• Files are NEVER shared with any third party for any purpose other than fulfilling your print order.
• Files are NEVER sold, licensed, published, used to train AI models, used for marketing, or repurposed in any way.
• Files are automatically and permanently deleted 90 days after your order is marked complete or cancelled.
• You may request immediate deletion at any time by emailing privacy@2zin.com with your order number.
• We do not keep backup copies of your files beyond the 90-day window.

We use your information only for the following purposes:

• Order Fulfillment: Processing payments, manufacturing products, arranging shipping, and sending order confirmations, shipping notifications, and delivery updates.
• Account Management: Creating and maintaining your account, authenticating logins, managing saved addresses and order history.
• Customer Support: Responding to inquiries, resolving disputes, processing returns and refunds, and investigating complaints.
• Custom Print Services: Reviewing uploaded files, calculating quotes, communicating about print specifications, and executing production.
• Marketing Communications: Sending promotional emails, new product announcements, and special offers — ONLY if you have opted in. You can unsubscribe at any time.
• AI Chat Assistant: Your chat messages are sent to OpenAI's API to generate responses from our assistant “Zara.” We do not use chat logs for training AI models.
• Site Analytics and Improvement: Understanding how users navigate our site, which products are popular, where users drop off in checkout — to improve the experience.
• Fraud Prevention: Detecting and preventing fraudulent orders, chargebacks, account takeovers, and misuse of our services.
• Legal Compliance: Meeting obligations under applicable law, responding to lawful government requests, maintaining financial records for tax purposes.
• Marketplace Operations: When selling through Etsy, eBay, Amazon, or Walmart — fulfilling orders placed on those platforms per our seller agreements.

We do not use your information for automated decision-making or profiling that produces legal or similarly significant effects without human review.

We share your personal information only in the following circumstances. We never sell your personal data to third parties for their own marketing purposes.

5.1 Service Providers

We share data with trusted vendors who help us operate our business, under contractual obligations to protect your information and use it only for the services they provide to us:

5.2 Legal Disclosures

We may disclose your information if required by law, court order, subpoena, or other lawful process, or if we believe in good faith that disclosure is necessary to:

• Comply with applicable law or legal process served on us
• Protect and defend the rights or property of VAU0 LLC
• Prevent or investigate possible wrongdoing in connection with our services
• Protect the personal safety of users or the public
• Protect against legal liability

5.3 Business Transfers

If VAU0 LLC is involved in a merger, acquisition, asset sale, or bankruptcy, your personal information may be transferred as part of that transaction. We will notify you via email and/or a prominent notice on our website before your information becomes subject to a different privacy policy.

5.4 With Your Consent

We may share your information for any other purpose with your explicit consent.

We use cookies and similar tracking technologies to operate our site, remember your preferences, analyze usage, and deliver relevant advertising.

When you first visit 2ZIN, you will see a cookie consent banner where you can choose your preferences. You can change your choices at any time. To opt out of Google Analytics across all sites, install the Google Analytics Opt-out Browser Add-on. To manage Facebook ad preferences, visit facebook.com/ads/preferences.

Note: disabling strictly necessary cookies will prevent core functions (login, cart, checkout) from working. We recommend allowing at least essential cookies.

For complete details on all cookies we set, see our Cookie Policy.

Depending on where you live, you may have specific rights regarding your personal information. We honor all of the following rights regardless of your location.

7.1 California Residents — CCPA / CPRA Rights

• Right to Know: You can request disclosure of the categories and specific pieces of personal information we have collected about you, the sources of that information, our business purposes for collecting it, and the third parties with whom we share it.
• Right to Delete: You can request deletion of personal information we have collected from you, subject to certain exceptions (e.g., information we are legally required to retain).
• Right to Correct: You can request correction of inaccurate personal information.
• Right to Opt-Out of Sale or Sharing: We do not sell personal information. We do not share personal information for cross-context behavioral advertising without your consent.
• Right to Limit Use of Sensitive Personal Information: We do not use sensitive personal information beyond what is necessary to provide our services.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights — you will receive the same prices and service quality.
• How to Submit a CCPA Request: Email privacy@2zin.com with subject line “CCPA Privacy Request.” We will respond within 45 days (extendable by an additional 45 days with notice).

7.2 EU / UK Residents — GDPR / UK GDPR Rights

• Right of Access (Article 15): Obtain a copy of the personal data we hold about you and information about how we process it.
• Right of Rectification (Article 16): Request correction of inaccurate or incomplete personal data.
• Right of Erasure / “Right to Be Forgotten” (Article 17): Request deletion of your personal data where there is no legitimate reason for us to continue processing it.
• Right to Restrict Processing (Article 18): Request that we limit the processing of your personal data in certain circumstances.
• Right to Data Portability (Article 20): Receive your personal data in a structured, machine-readable format (JSON or CSV) and transmit it to another controller.
• Right to Object (Article 21): Object to processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests.
• Rights Related to Automated Decision-Making (Article 22): Not be subject to decisions based solely on automated processing that produce significant legal effects.
• Legal Basis for Processing: We process your data on the following legal bases: (a) contract performance — to fulfill your orders; (b) legitimate interests — to prevent fraud and improve our services; (c) consent — for marketing emails and non-essential cookies; (d) legal obligation — for financial record-keeping.
• How to Submit a GDPR Request: Email privacy@2zin.com. We will respond within 30 days. If we cannot fully comply, we will explain why. You also have the right to lodge a complaint with your local supervisory authority (e.g., ICO in the UK, your national DPA in the EU).

7.3 All Users

• Opt out of marketing emails at any time using the unsubscribe link in any email we send
• Update or correct your account information by logging in to your account settings
• Request a copy of your data by emailing privacy@2zin.com
• Request deletion of your account and associated data by emailing privacy@2zin.com

VAU0 LLC is based in the United States. If you are accessing our services from outside the United States, your personal information may be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your jurisdiction.

For transfers of personal data from the European Economic Area (EEA), United Kingdom, or Switzerland to the United States, we rely on:

• Standard Contractual Clauses (SCCs) approved by the European Commission for transfers to our service providers
• Adequacy decisions where applicable
• Your explicit consent where required

By using our services, you acknowledge and agree to the transfer of your personal information to the United States as described in this policy.

We implement industry-standard technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction:

• All data transmitted between your browser and our servers is encrypted using TLS 1.2 or higher (HTTPS is enforced — all HTTP requests are redirected to HTTPS)
• Passwords are hashed using bcrypt with 12 salt rounds — we never store passwords in plain text
• API keys and sensitive credentials are encrypted using AES-256-GCM encryption at rest
• Database servers are protected by firewall rules — not directly accessible from the internet
• Uploaded 3D model files are stored in private directories with no public URL access
• Access to production systems is restricted to authorized personnel only, using key-based authentication
• Payment card data is never transmitted to or stored on our servers — handled entirely by Stripe and PayPal
• We conduct periodic security reviews of our infrastructure and code

Despite these measures, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify affected users within 72 hours as required by applicable law.

We retain personal information only as long as necessary for the purposes described in this policy, and as required by applicable law:

When your account is deleted, we remove all personal data that is not subject to legal retention requirements within 30 days.

Our services are not directed to children under the age of 13 (or 16 in the European Union). We do not knowingly collect personal information from children under these ages.

If you are a parent or guardian and you believe that your child has provided us with personal information without your consent, please contact us immediately at privacy@2zin.com. We will take steps to remove that information from our systems within 30 days.

If we discover that we have collected personal information from a child under 13 without verified parental consent, we will delete that information promptly.

Some browsers include a “Do Not Track” (DNT) feature that signals websites you visit that you do not want your online activity tracked. There is currently no industry-wide standard for responding to DNT signals, and we do not currently alter our data collection practices in response to DNT signals.

You can control tracking through our cookie consent banner, which is the most effective way to manage your preferences on our site.

Our website may contain links to third-party websites, including marketplace platforms (Etsy, eBay, Amazon), social media platforms, and service providers. This Privacy Policy applies only to our website and services. We are not responsible for the privacy practices of any third-party sites. We encourage you to review the privacy policies of any third-party sites you visit.

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or business operations. When we make material changes, we will:

• Update the "Last Updated" date at the top of this page
• Send an email notification to registered users at least 30 days before the changes take effect
• Display a prominent notice on our website

Your continued use of our services after the effective date of any changes constitutes your acceptance of the updated Privacy Policy. If you do not agree with the changes, you must stop using our services and may request deletion of your account.

If you are located in the EU or UK and are not satisfied with our response to your privacy request, you have the right to lodge a complaint with your local supervisory authority:

• United Kingdom: Information Commissioner's Office (ICO) — ico.org.uk
• Germany: Bundesbeauftragter für den Datenschutz (BfDI)
• France: Commission Nationale de l'Informatique et des Libertés (CNIL)
• Other EU countries: Contact your national Data Protection Authority