Privacy
Last updated November 8, 2026What we collect when you use oneoffparts.com, what we do with it, and who else touches it. We are a machine shop; we collect what it takes to quote, make and ship your parts, and nothing for its own sake.
What we collect
- Account. Your name, work email, company, and the people, designers and ship-to addresses you add to your organization.
- Files. The models, drawings and bills of materials you upload, the geometry we compute from them (hole lists, thumbnails, weights), and the options you choose.
- Orders. Quotes, orders, PO numbers, invoices, shipment and tracking details, and the stage of each job.
- Payment. Card details go straight to Stripe over an encrypted connection; we never see or store the card number. We keep Stripe’s reference for the payment and the last four digits.
- Tax and shipping accounts. A resale or exemption certificate if you upload one, and the carrier account numbers you choose to add.
- Technical. Your IP address, browser, and a log of file uploads, downloads, sign-ins and failed uploads. Export-control screening results are logged, including the pattern that tripped them.
- Cookies. A sign-in cookie and a guest token so a quote survives a page refresh. No advertising or third-party tracking cookies.
What we do with it
- Quote, make, inspect and ship your parts, and tell you where they are.
- Charge and invoice you, collect and remit sales tax, and keep the books.
- Answer your questions and contact the designer you named when a drawing raises one.
- Screen for export-controlled data, protect the site, and investigate misuse.
- Keep records the law and our quality system require.
We do not sell your information, rent it, or use it for advertising. We do not use your files for anything but your parts.
Who else sees it
- Stripe processes card payments.
- UPS, FedEx and ShipStation receive the ship-to name, address and package details to rate and ship.
- Microsoft 365 sends and stores our email to you.
- QuickBooks (Intuit) holds the estimate and invoice for your order.
- Cloudflare carries traffic to the site.
- A finishing vendor (anodizer, plater) sees the parts, not your files, when you order a finish we do not do in house.
- Anyone the law requires us to tell, and a buyer of the business if it is ever sold, bound by this policy.
Where it lives and how long
Files, orders and account records are stored on our own systems in the United States. We keep your files while you have an account or an order refers to them so a reorder is a click; tell us and we delete them. Order, invoice and inspection records are kept for the period our quality system and tax law require, normally seven years. Export-control screening logs are kept for five years.
Your choices
- See and change your account, people, designers and addresses on your Organization page.
- Ask us to delete your files or close your account at [email protected]. We will confirm within 10 business days, keeping only what the law requires.
- Emails about an order are part of the order; we do not send marketing email.
Security of your files
- Everything travels over an encrypted connection (HTTPS).
- Files are stored on our own server at the shop, not in a shared public bucket. If we move them to cloud storage, they are encrypted at rest.
- A file can be opened only by a signed-in user of the company that uploaded it, or by our staff. Guest uploads are tied to the browser that made them until the person signs in. There are no public links.
- Every upload, view and download is logged with who, when and from where.
- Your model is read in your own browser to find holes and draw the preview; drawings are read on our server. Neither is sent to anyone else. The one exception: a bill of materials sent as a picture is read by an AI model (Anthropic’s Claude, under its commercial terms, which do not use the data for training) to pull out the quantities. The picture is a parts list, never your model or drawing.
- Payment details never touch our servers.
- No system is perfectly secure. If we learn of a breach affecting your data, we tell you.
Changes and contact
If this policy changes, the date at the top changes with it. Questions to [email protected], or Curvilinear Components LLC, 1023 Calle Sombra, Suite K, San Clemente, CA 92673.