Extruo Privacy Policy

Effective date: September 1, 2026
Version: 1.0

This Privacy Policy explains how Extruo Technologies LLC, a Florida limited liability company (“Extruo,” “we,” “us,” or “our”), collects, uses, discloses, and protects personal information when you use extruo.app, app.extruo.app, and our related software, services, and communications (collectively, the “Service”).

Extruo is designed primarily for hobbyist and small-business 3D-printing sellers in the United States.

1. Scope

This Policy applies to information processed through the Service and our related support, legal, account, and email communications.

It does not govern third-party websites, payment providers, or services that operate under their own privacy policies.

2. Roles and Responsibilities

For account information, billing records, technical information, and our direct communications with you, Extruo generally determines why and how personal information is processed.

When an account holder enters information about that account holder’s own customers, workers, suppliers, or other contacts, the account holder generally determines why and how that information is used. Extruo processes it primarily as a service provider or processor on the account holder’s behalf.

Account holders are responsible for providing any required privacy notices, obtaining any required permissions, limiting collection to appropriate information, and responding to the privacy requests of people whose information they enter into Extruo.

3. Information We Collect

Account and identity information

We may collect:

  • name;
  • email address;
  • password hash;
  • account identifiers;
  • profile preferences;
  • optional Google account identifier, name, email address, and avatar when Google sign-in is used; and
  • account status, plan, and settings.

Passwords are not stored in plaintext.

Business records and User Content

We process information you enter or import, which may include:

  • material and filament inventory;
  • print-queue and production records;
  • products and stock;
  • purchases, expenses, bookkeeping entries, and suppliers;
  • sales and transaction records;
  • tax-oriented reports and sales-tax summaries;
  • notes and custom descriptions; and
  • other business-management records.

Information about your customers and contacts

You may choose to enter:

  • customer or contact names;
  • email addresses;
  • telephone numbers;
  • mailing or shipping addresses;
  • transaction history; and
  • free-form notes.

Do not enter Social Security numbers, complete payment-card numbers, bank-account credentials, health information, government-identification numbers, or other highly sensitive personal information unless Extruo expressly supports that category and you have confirmed that doing so is lawful and appropriate.

Uploaded files

Depending on available features, you may upload:

  • product or model images;
  • purchase receipts;
  • spreadsheets, including Excel-compatible files; and
  • in a future update, printable model or slicer files such as STL or 3MF.

Unless a feature states otherwise, Extruo stores uploaded files but does not inspect or analyze their substantive contents.

Billing information

Stripe processes payment details. Extruo may receive and store:

  • Stripe customer and subscription identifiers;
  • subscription plan and status;
  • invoice and payment status;
  • billing name and email;
  • limited payment-method details, such as card brand and last four digits, when provided by Stripe; and
  • tax-related billing location or identifiers where needed.

Full card numbers do not touch or remain on Extruo’s servers.

Technical and usage information

We may collect:

  • IP address;
  • browser and device type;
  • operating system;
  • timestamps;
  • pages, routes, or features requested;
  • authentication and session events;
  • server logs;
  • diagnostic information; and
  • error reports and traces through Sentry.

We configure error monitoring to reduce collection of secrets and unnecessary personal data, but diagnostic reports may contain limited contextual information needed to identify and fix an error.

Communications

We collect the content and metadata of messages you send to support, legal, or general contact addresses.

We also keep records of transactional and product-update emails sent to you and related delivery, bounce, and unsubscribe events.

4. How We Collect Information

We collect information:

  • directly from you when you create an account, enter records, upload files, contact us, or adjust settings;
  • automatically through session cookies, server logs, and security or error-monitoring tools;
  • from Stripe in connection with billing;
  • from Google when you choose Google sign-in; and
  • from another user when that user lawfully enters information about a customer or contact into the Service.

5. How We Use Information

We use personal information to:

  • provide and operate the Service;
  • authenticate users and maintain sessions;
  • store, display, organize, export, and delete User Content;
  • calculate and present reports based on user-entered data;
  • process subscriptions, invoices, refunds, and applicable taxes;
  • send verification, account, billing, security, support, and product-update communications;
  • provide optional communications you request;
  • respond to questions and legal requests;
  • secure the Service and prevent fraud, abuse, and unauthorized access;
  • diagnose errors, maintain infrastructure, and improve reliability;
  • enforce our Terms of Service;
  • comply with legal obligations; and
  • create de-identified or aggregated operational information that does not reasonably identify an individual or business.

Extruo does not use your business records to provide tax, legal, or accounting advice.

6. Cookies and Similar Technologies

Extruo uses:

  • session and authentication cookies needed to keep you signed in and secure your account; and
  • local storage or similar browser storage for user preferences and necessary application state.

Extruo does not currently use:

  • advertising cookies or trackers;
  • third-party behavioral advertising;
  • cross-site profiling;
  • third-party analytics beacons; or
  • cookies used to sell or share personal information for targeted advertising.

Because we do not engage in cross-site behavioral advertising, browser “Do Not Track” signals do not currently change how the Service operates. We will update this Policy before introducing materially different tracking practices.

7. Email Communications

We send transactional messages such as:

  • account verification;
  • password or security notices;
  • receipts and subscription notices;
  • failed-payment and billing messages;
  • support responses; and
  • important in-product notifications.

We may also occasionally send product updates and service announcements. Where a message is promotional under applicable law, it will include an appropriate unsubscribe method. Unsubscribing from optional messages does not stop essential account, billing, legal, or security communications.

Extruo does not currently plan to send third-party advertising or sell access to mailing lists.

8. How We Disclose Information

We disclose information only as reasonably necessary for the purposes described in this Policy.

Service providers and subprocessors

Provider Purpose Information involved
DigitalOcean, United States Servers and hosting App data stored or processed on hosted infrastructure
Cloudflare DNS, proxy, security, and R2 object storage Traffic metadata, uploaded files, and encrypted backups
Stripe Subscription billing and possible tax calculation Billing identity, payment details held by Stripe, subscription status, invoices, and tax information
Resend Transactional and product-update email delivery Recipient address, email content, and delivery metadata
Google Optional OAuth sign-in Google account ID, name, email address, and avatar
Sentry Error and performance monitoring Error traces, technical context, and limited user or account identifiers where needed for debugging

Providers may change as the Service evolves. We will update this Policy when a change materially affects privacy practices.

Legal, safety, and enforcement disclosures

We may disclose information when we reasonably believe disclosure is necessary to:

  • comply with law, legal process, or a binding government request;
  • protect the rights, property, or safety of users, Extruo, or others;
  • investigate fraud, abuse, security incidents, or violations of our Terms;
  • establish, exercise, or defend legal claims; or
  • respond to an emergency involving danger of death or serious physical harm.

Business transfers

Information may be disclosed or transferred in connection with a merger, financing, acquisition, reorganization, bankruptcy, sale of assets, or similar business transaction. A recipient will be required to handle personal information consistently with applicable law and any commitments that continue to apply.

With your direction

We may disclose information when you direct us to do so or intentionally use a feature that requires disclosure.

9. No Sale, Targeted Advertising, or Profiling

Extruo does not sell personal information.

Extruo does not share personal information for cross-context behavioral advertising, use third-party advertising trackers, or create profiles for targeted advertising.

Extruo does not currently use artificial-intelligence providers to analyze your records, uploaded files, receipts, reports, or other User Content.

If these practices change, we will update this Policy and provide any legally required choices before the change applies.

10. Data Retention

We keep information for as long as reasonably necessary to provide the Service, maintain your account, fulfill the purposes described in this Policy, and meet legal, accounting, security, and dispute-resolution obligations.

When you initiate account deletion:

  1. your account enters a seven-day recovery period;
  2. after that period, associated data is purged from the live production database; and
  3. residual copies ordinarily age out of backups within approximately 30 additional days.

We may retain limited information longer for:

  • subscription, invoice, tax, and accounting records;
  • fraud and abuse prevention;
  • security investigations;
  • legal claims and dispute resolution;
  • compliance with law; and
  • documentation of privacy requests.

De-identified or aggregated information that cannot reasonably be linked back to you may be retained.

11. Your Choices and Rights

Account access and correction

You may review and update available account information through the Service. Contact us if information cannot be corrected through account tools.

Data export

The Service provides an export feature intended to produce a ZIP archive of available CSV records and uploaded files associated with your account.

Account deletion

You may initiate account deletion through the Service, subject to the recovery and retention process described above.

Email choices

You may unsubscribe from optional product announcements using the link in the message or by contacting us. Essential service communications will continue while your account remains active or as legally necessary.

Privacy-law requests

Depending on where you live and which law applies, you may have rights to:

  • know or access personal information;
  • correct inaccurate information;
  • delete information;
  • obtain a portable copy;
  • object to or restrict certain processing;
  • withdraw consent where processing is based on consent; and
  • appeal a denied request where applicable.

Extruo provides export and deletion tools to all account holders and may voluntarily honor comparable requests even when a particular privacy statute does not apply.

Submit requests to [email protected]. We may need to verify your identity and authority. We will not discriminate against you for exercising a legal privacy right.

If your request concerns information entered by one of Extruo’s business customers, contact that business first. Extruo may forward or assist with the request as appropriate.

Authorized agents

Where applicable law permits an authorized agent to submit a request, we may require proof of authorization and identity verification.

12. Security

Extruo uses administrative, technical, and organizational measures intended to protect information, including:

  • HTTPS encryption in transit;
  • password hashing using an industry-standard key-derivation method;
  • encrypted storage volumes;
  • per-tenant data-isolation controls enforced in application code and tests;
  • encrypted nightly backups stored in a separate storage account;
  • routine backup-restore testing;
  • access restrictions intended to limit production access to the operator; and
  • error-reporting practices intended to scrub secrets.

No security measure can guarantee absolute security. You are responsible for securing your devices, credentials, exports, and independent copies of important business records.

13. Security Incidents

If we discover a security incident involving personal information, we will investigate, contain, and remediate it as appropriate.

We will notify affected users and regulators when required by applicable law. The timing and content of notice may depend on the nature of the incident, law-enforcement requests, and the time needed to determine scope and take protective measures.

Report suspected security issues to [email protected].

14. Children’s Privacy

The Service is not intended for children under 18, and Extruo does not knowingly allow individuals under 18 to create accounts.

If you believe a minor has provided personal information through an account without appropriate authorization, contact us.

15. International Access

Extruo is designed and offered for users in the United States. People outside the United States may be technically able to access the Service.

If you access the Service from another country, your information may be transferred to and processed in the United States, where privacy laws may differ from those in your location.

We do not represent that the Service is designed to satisfy every non-US privacy, tax, or business-law requirement.

16. Florida and United States Privacy Disclosures

Extruo is not presently represented to meet the applicability thresholds of every comprehensive state privacy statute. Nevertheless, we provide account holders with access, correction, export, and deletion mechanisms as described above.

Extruo does not sell personal information or share it for cross-context behavioral advertising.

If a law grants additional non-waivable rights, Extruo will honor those rights to the extent applicable.

17. Third-Party Services

Third-party providers such as Stripe and Google process certain information under their own privacy policies when you interact directly with them.

Extruo is not responsible for the independent privacy practices of third-party websites or services.

18. Changes to This Policy

We may update this Privacy Policy as the Service, providers, or legal requirements change.

We will identify the effective date and version at the top. For material changes, we will notify account holders by email or a prominent in-product notice before the changes take effect.

19. Contact Us

For privacy requests, questions, complaints, or legal notices:

Extruo Technologies LLC
Email: [email protected]
General inquiries: [email protected]
Telephone: (863) 271-7066