Privacy policy / Datenschutzerklärung

This policy explains which personal data Partomat (partomat.com) processes, why, and what rights you have. It covers the website, the design studio, AI generation, order requests and the early-access list.

1. Controller

insightformer UG (haftungsbeschränkt), Liebigstr. 36, 01187 Dresden, Germany
Email: info@insightformer.com, phone: +49 15678 363731

2. Hosting and technical data

Partomat runs on a server of DigitalOcean, LLC in Frankfurt, Germany. When you open the site, your browser sends technical data such as your IP address, the time, the requested address and your browser type. We need this to deliver the site and protect it from attacks and abuse. The web server does not write access logs. To limit spam and abuse, we count requests per IP address per hour for forms and sign-in; these counters are deleted after 24 hours at the latest. Error logs of the application are kept for a short time and do not contain your inputs.

Legal basis: Art. 6(1)(f) GDPR (secure and reliable operation). DigitalOcean processes data as our processor under its data processing agreement; access from the USA is covered by the EU-US Data Privacy Framework or, failing that, the EU standard contractual clauses.

Our domain and its DNS are managed by Cloudflare, Inc. Visitor traffic does not pass through Cloudflare; only DNS lookups of the domain name are answered by Cloudflare.

3. Design studio and AI generation

When you ask the AI to design or change a part, we send your request, the current design program and earlier messages of the same session to the AI model you selected. Depending on the model this is OpenAI (for OpenAI models) or OpenRouter, Inc., which forwards the request to the model's provider (for example Anthropic, Google or other model developers). These providers process the data in the USA and other countries. We use the reply only to show you the design. Legal basis: Art. 6(1)(b) GDPR (providing the service you request).

Please do not enter personal data, such as names or addresses, in design requests. Designs are generated by AI and can contain errors; check dimensions and suitability before you make or use a part.

If you connect your own OpenRouter account, the key OpenRouter issues is stored only in your browser. It is sent with each AI request through our server to OpenRouter, and we do not store it.

Your current design and conversation are saved in your browser's local storage so they survive a reload. If you have an account, you can also save projects on our server; they are stored until you delete them or your account.

4. Accounts, credits and payments

If you buy AI credits, we process your email address, your credit balance and the history of top-ups and usage. Payments are handled by Stripe (Stripe Payments Europe, Ltd., Ireland); we do not receive your card details. Sign-in links are sent by email through Resend (Plus Five Five, Inc., USA). Legal basis: Art. 6(1)(b) GDPR. Payment records are kept for up to 10 years because German tax and commercial law require it (Art. 6(1)(c) GDPR). Transfers to the USA are based on the providers' standard contractual clauses or the EU-US Data Privacy Framework.

5. Order requests

If you request a manufacturing quote, we process your name, email address, delivery country, notes, the model files and the design program. We use them to get quotes from manufacturing partners and to send you a final offer; for this we share the files and necessary details with the partner that makes your part. Legal basis: Art. 6(1)(b) GDPR. Requests that do not lead to an order are deleted 12 months after the last contact; order records are kept as long as tax and commercial law require.

When you click a link to another manufacturing service, we count the click (which service and process, no personal data). The other service is responsible for what happens on its website.

6. Early-access list

If you join the early-access list, we store your email address and, if you enter it, what you would like to make. We use this only to tell you when AI generation and ordering open. Legal basis: your consent, Art. 6(1)(a) GDPR. You can withdraw it at any time by emailing info@insightformer.com or using the unsubscribe link in our emails; we then delete your entry. Otherwise we delete it two years after the last contact at the latest.

7. Product statistics

To improve the service and run the public model leaderboard, we record for each AI generation the model, whether it produced a valid design, the duration and the cost, and for comparisons the models involved, the chosen winner and the request text (up to 500 characters). These records contain no IP address, no cookie ID and no account reference. Legal basis: Art. 6(1)(f) GDPR (improving the product).

8. Cookies and local storage

We use no tracking, advertising or analytics cookies and load no external fonts, scripts or embeds. We only store what the site needs to work: a sign-in cookie if you have an account, short-lived cookies during sign-in with a third-party account, and local storage for your current design, a connected OpenRouter key and an unsent prompt. These are strictly necessary for the service you request (§ 25(2) no. 2 TDDDG), so no consent is required.

9. Backups and storage period

Our database is backed up nightly; backups are kept for 7 days. Unless stated otherwise above, we delete data when it is no longer needed for its purpose and no legal retention period applies.

10. Recipients

Only people and service providers who need the data for operation, security, payment, AI generation or fulfilling your request receive it: DigitalOcean (hosting), OpenAI and OpenRouter with the respective model providers (AI generation), Stripe (payments), Resend (email) and manufacturing partners (orders). We do not sell your data.

11. Your rights

  • Access to your data (Art. 15 GDPR)
  • Rectification (Art. 16 GDPR)
  • Erasure (Art. 17 GDPR)
  • Restriction of processing (Art. 18 GDPR)
  • Data portability (Art. 20 GDPR)
  • Objection to processing based on legitimate interests (Art. 21 GDPR)
  • Withdrawal of consent at any time, with effect for the future (Art. 7(3) GDPR)

An email to info@insightformer.com is enough. You can also complain to a data protection authority; for us this is the Sächsische Datenschutz- und Transparenzbeauftragte (Saxon data protection authority).

12. Changes

We update this policy when the service, our providers or the law change.

Last updated: 16 October 2026