Privacy Policy

This Privacy Policy is maintained by OPEX MFG Inc. ("OPEX", "we", "us", or "our") to explain how we collect, use, store, and protect personal data when you use our website, instant quoting tool, account area, and related manufacturing services (collectively, the "Services"). OPEX is a Canadian business and handles personal data in accordance with applicable Canadian privacy laws, including the Personal Information Protection and Electronic Documents Act (PIPEDA) and Quebec's Act respecting the protection of personal information in the private sector (Law 25).

This document is app-owned content maintained by OPEX MFG Inc. — it is not an independent certification or legal opinion. By using the Services, you agree to the practices described in this Privacy Policy. If you do not agree, please do not use the Services.

The Services are designed for business-to-business (B2B) use by engineering, manufacturing, and procurement professionals. They are not directed to consumers or to individuals under 18 years of age, and we do not knowingly collect personal data from minors. If you believe we have collected such data, please contact us and we will delete it in accordance with applicable law.

We collect data you provide directly and data generated automatically as you use the Services.

Information you provide:

• Account information: name, work email, company name, job title, and password.
• Social sign-in data: if you sign in with Google, we receive the profile information you authorize (typically your name and email address).
• Order and quote details: billing and shipping addresses, phone number, tax identifiers, uploaded CAD files (STL, STEP, IGES, OBJ), technical drawings, part specifications, material and finish preferences, tolerances, quantities, and delivery requirements.
• Certification and compliance requirements associated with your project when you provide them (for example, industry-specific standards you require).
• Communications: messages you send through our contact form, support requests, challenge applications, and newsletter sign-ups.

Information collected automatically:

• Usage data: pages viewed, features used, quote configurator interactions, and file upload metadata (file type, size, and upload timestamp).
• Device and network data: browser type, operating system, IP address, approximate location derived from IP, user-agent string, and referrer URL.
• First-party analytics identifiers: a random session ID stored in session storage to help us understand how the Services are used.
• Language and currency preferences and other saved session settings.

We use personal data to:

• Provide instant quotes, process orders, and manufacture and ship parts.
• Analyze CAD files, provide design-for-additive-manufacturing feedback, and generate production and inspection documentation associated with your order.
• Create and manage your account and authenticate you.
• Communicate with you about quotes, orders, support, and product updates.
• Improve the Services, diagnose issues, and understand usage patterns.
• Send marketing communications where you have opted in, which you can unsubscribe from at any time.
• Comply with legal, regulatory, tax, and contractual obligations and protect our rights and users.

We process personal data on the following bases, depending on the context: performance of a contract with you (for example, to fulfil a quote or order); our legitimate interests in operating, securing, and improving the Services; compliance with legal obligations; and your consent (for example, for optional marketing communications or non-essential analytics where required by law). Where processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of prior processing.

We use cookies and similar technologies to keep you signed in, remember your preferences, and measure how the Services are used.

• First-party analytics: We operate a first-party analytics endpoint that collects event names, session IDs, page paths, referrers, and device/network information. This data is stored in our backend database and used only by OPEX.
• Google Analytics 4: We use Google Analytics 4 to analyze website traffic. Google may use cookies and process data according to its own privacy policy. You can manage Google Analytics cookies through your browser settings or Google's opt-out tools.
• Authentication and preferences: We use local storage and cookies to maintain your session and remember settings such as currency selection.

We do not sell personal data. We share data only as needed to operate the Services:

• Service providers: hosting, database, analytics, email, payment processing, and customer support providers bound by confidentiality and data-processing obligations.
• Manufacturing network: production files, part specifications, and shipping information shared with the manufacturing partners and post-processing suppliers that fulfill your order, under confidentiality obligations.
• Logistics and shipping partners: shipping addresses and contact information used to deliver your order and provide tracking.
• Professional advisors: auditors, accountants, and legal counsel where reasonably needed.
• Legal compliance: when required by law, court order, or to protect our rights, property, or safety.
• Business transfers: in connection with a merger, acquisition, or sale of assets, with appropriate confidentiality protections.

We retain personal data for as long as necessary for the purposes described above:

• Account data: retained while your account is active and deleted within 30 days of a verified deletion request.
• CAD files and order-related data: retained for 2 years after your last order or until you request deletion, whichever comes first.
• Contact form submissions and challenge applications: retained for 2 years.
• Analytics data: retained for 26 months.
• Marketing preferences: retained until you unsubscribe; suppression records may be kept longer to honor your choices.
• Invoices and tax records: retained for the period required by applicable tax and accounting law (typically 6–7 years in Canada).

Retention periods may be extended where required by law or to resolve disputes. On expiry or a verified deletion request, project files are removed from active systems and overwritten in backups on our normal backup rotation cycle.

Depending on your location, you may have rights to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Request deletion of your personal data, subject to legal retention obligations.
• Receive a portable copy of your data in a structured, commonly used format.
• Object to or restrict certain processing, including direct marketing.
• Withdraw consent where processing is based on consent.
• Lodge a complaint with a data protection supervisory authority. In Canada, you may contact the Office of the Privacy Commissioner of Canada (www.priv.gc.ca); in Quebec, the Commission d'accès à l'information du Québec (www.cai.gouv.qc.ca).

To exercise any of these rights, contact us at support@opexmfg.com. We will respond within a reasonable timeframe (and within 30 days where required by law) and may need to verify your identity before acting on your request.

We use industry-standard measures to protect personal data, including encryption in transit (TLS), access controls, role-based permissions, row-level security in our database, and regular review of our practices. No system is completely secure, and we cannot guarantee absolute security. You are responsible for keeping your account credentials confidential and for ensuring any CAD files or data you upload do not contain personal information you are not authorized to share.

If we become aware of a security incident affecting your personal data, we will notify you and, where required, the relevant supervisory authority in accordance with applicable law.

OPEX is based in Canada. Your data may be processed in Canada, the United States, and other countries where our service providers operate. When data is transferred outside your jurisdiction, we rely on appropriate safeguards such as standard contractual clauses or equivalent legal mechanisms.

Our instant quoting tool uses automated analysis of your uploaded CAD files (for example, volume, bounding box, and feature extraction) to generate indicative prices and lead times. This automated processing is used to support quoting only; final orders are reviewed and confirmed by our team, and you may contact us to discuss any quote before placing an order.

We may update this Privacy Policy from time to time. The "Last updated" date at the top reflects the most recent revision. Material changes will be communicated by updating this page and, where appropriate, by email. Your continued use of the Services after the effective date constitutes acceptance of the revised Privacy Policy.

OPEX MFG Inc. is the controller of personal data collected through the Services. For questions about this Privacy Policy, to exercise your rights, or to report a suspected data breach, contact our Privacy Officer at support@opexmfg.com or through our contact page. Please include enough detail for us to identify you and understand your request.