Privacy Policy - Madimaker.com

Last updated: 2026/09/01

Welcome to Madimaker.com. We respect your privacy and are committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR).

1. Who We Are

This website is operated by Madimaker (MadiStudios). For legal and commercial purposes, Madimaker and MadiStudios refer to the same business entity and may be used interchangeably throughout this website.

Contact: Hello@madimaker.com

2. Information We Collect

We may collect the following personal data:

• Name, email address, account identifiers, and authentication-provider references
• Subscription, entitlement, purchase, quota, and download information
• Optional business identity information, including trading name, country, tax identifier, and seller-provided storefront links
• Agreement versions and acceptance records
• License IDs, Certificate status, design hashes, Artifact IDs, exact artifact hashes, filenames, formats, assurance levels, and cryptographic-signature metadata
• Community-preset origin and lineage decisions
• Source-rights attestations, source hashes, attribution requirements, and rights-review decisions
• Optional seller-declared marketplace listing URLs
• Aggregate Certificate verification activity and referring domains
• Technical data such as IP address, browser type, device, and approximate location where reasonably necessary for security, abuse prevention, consent evidence, and service operation
• Communication data such as emails and support messages

Note: Purchases made on third-party platforms are subject to their own privacy policies.

3. Sales Through Third-Party Platforms

Our products may also be sold through external platforms such as:

• Patreon
• Cults3D
• Etsy

When purchasing through these services, your data is handled according to their respective privacy policies. We do not control their data practices.

4. How We Use Your Information

We use your data to:

• Provide accounts, subscriptions, generators, downloads, and digital products
• Determine export eligibility, source rights, Community lineage, and plan permissions
• Issue, sign, verify, reactivate, supersede, or revoke Digital Resale Certificates and artifact receipts
• Display the limited public Certificate proof described below
• Prevent fraud, abuse, license circumvention, and intellectual-property infringement
• Respond to inquiries, rights complaints, takedown requests, and support needs
• Send promotional emails and updates only where you have opted in
• Measure and improve website performance and user experience
• Maintain security, audit records, and service integrity
• Comply with legal, accounting, tax, consumer-protection, and rights-enforcement obligations

5. Legal Basis for Processing

We process your data based on:

• Contractual necessity for accounts, subscriptions, exports, downloads, Certificates, and support
• Legal obligations, including accounting, tax, consumer-protection, and data-protection duties
• Legitimate interests in service security, fraud prevention, license verification, rights enforcement, dispute handling, and proportionate service improvement
• Consent for marketing emails and any optional processing that requires consent

6. Email Communications

If you subscribe to our communications:

• You may receive promotional emails, updates, or new product announcements
• You can unsubscribe at any time via the link included in each email
• We do not send spam or share your email with third parties for marketing.

7. Data Sharing

We do not sell your personal data.

We may share data with:

• Payment and subscription providers
• Hosting, database, storage, email, and security providers
• Analytics providers such as Google Analytics
• Professional advisers, authorities, or rights claimants where disclosure is legally required or reasonably necessary to establish, exercise, or defend legal claims

Service providers process data only as required to provide their contracted services and subject to applicable data-protection requirements.

7.1 Public License Verification

A Digital Resale Certificate is intended to be publicly verifiable. The public proof is limited to the trading name, country, identified model or design revision, applicable agreement version, issue date, allowed use, current Certificate status, Artifact IDs and hashes, assurance level, and optional seller-declared listing or storefront URLs.

We do not intentionally publish the subscriber's email address, tax identifier, billing identifiers, payment details, User ID, or internal database keys in the public proof.

We may record aggregate verification activity and the referring domain to understand legitimate verification use and investigate abuse. We do not claim that verification activity counts third-party marketplace sales and do not intentionally retain unnecessary visitor identity.

8. Data Retention

We retain data only as long as necessary:

• Transaction and subscription records: for applicable legal, tax, accounting, chargeback, and dispute periods
• Agreement acceptances and security evidence: for the period reasonably needed to prove the applicable contract and protect accounts
• Active project, preset, and optional listing data: while required to provide the service or until removed, subject to backups and dispute holds
• Certificate, signature, artifact-hash, source-rights, revocation, and audit facts: only for the minimum period reasonably justified by legal compliance, fraud prevention, buyer verification, and rights enforcement
• Aggregate verification activity and referrer domains: for a limited period appropriate to security and product integrity
• Email subscriptions: until you unsubscribe

Account deletion ends current selling permission, removes optional public listing links, and deletes or anonymizes unnecessary account, project, session, and thumbnail data. It does not require deletion of minimum historical Certificate and audit facts where retention remains legally justified. Lawful end buyers retain the personal-use rights granted with their purchase.

9. Your Rights

Under GDPR, you have the right to:

• Access your data
• Request correction or deletion
• Object to or restrict processing
• Request data portability where applicable
• Withdraw consent at any time
• Lodge a complaint with the Spanish Data Protection Agency (AEPD) or another competent supervisory authority

Contact: madistudios3d@gmail.com

10. Cookies

Madimaker.com uses cookies to:

• Ensure proper functionality
• Analyze traffic (e.g. Google Analytics)
• Improve user experience

You can manage cookies through your browser settings.

11. Data Security

We apply appropriate technical and organizational measures to protect your personal data.

12. Children's Privacy

This website is not intended for individuals under 16 years of age.

We do not knowingly collect data from minors. If such data is identified, it will be deleted.

13. International Data Transfers

Some third-party providers may process data outside the EEA.

We ensure appropriate safeguards are in place where required.

14. Changes to This Policy

We may update this Privacy Policy at any time.

Changes will be published on this page.