Privacy policy

1. Who we are and how to contact us

Spoolhouse is a personal 3D filament inventory service operated by ZeroPointOne Ventures Ltd, company number 17398629. We are the controller of personal data processed to operate Spoolhouse under the UK GDPR and Data Protection Act 2018, as amended.

Our registered office and postal contact for privacy enquiries and rights requests is:

For privacy enquiries and rights requests, email hello@zp1.ai or write to the address above.

2. Information we process

• Account details: account identifiers, email address and profile information provided through Clerk, including information supplied by a sign-in provider you choose.
• Your private inventory: physical spools, shelves, filament details, catalogue edits, remaining-weight entries, usage records, settings and associated history, linked to your account. These are private account data, not a public community catalogue.
• Plan and billing references: your plan, subscription status, customer and subscription identifiers and payment-related records. Stripe processes payment details during checkout and billing management.
• Technical information: operational and security logs, IP address, browser or device information and request details generated when using the service.
• Browser storage: session cookies and localStorage preferences used for sign-in, session continuity and interface settings.
• Correspondence: information you provide when contacting us or making a privacy request.

3. Purposes and lawful bases

• Contract: creating and managing your account, storing and displaying your inventory, recording usage, providing plan features and administering subscriptions.
• Legitimate interests: maintaining a reliable service, diagnosing faults, protecting accounts, preventing fraud and abuse and handling enquiries. We balance these interests against your rights and reasonable expectations; you may object where this basis applies.
• Legal obligations: keeping records required by tax or accounting law and responding to legally binding requests. We may also retain relevant information where necessary to establish, exercise or defend legal claims under our legitimate interests.

4. Service providers and disclosures

The known providers supporting the service are:

• Replit — hosting and PostgreSQL: hosts the application and database, processing stored account-linked inventory and technical information needed to run it. Replit privacy notice.
• Clerk — authentication: processes account identifiers, email and profile details, sign-in and session information to manage access. Clerk privacy notice.
• Stripe — payments: processes payment, billing and subscription information to collect recurring payments and provide billing management. Stripe privacy notice.

Providers may also act as independent controllers for some processing described in their own notices. We may disclose necessary information to professional advisers, authorities where legally required, or in connection with a business transfer subject to applicable data protection requirements.

5. Security and overseas processing

We use account-based access controls to limit access to private inventory and take reasonable organisational and technical measures appropriate to the risks. No online system is completely secure. Keep your sign-in credentials private and avoid entering unnecessary sensitive personal information in inventory fields.

Our providers may process information outside the UK. We do not promise UK-only hosting. Where a restricted international transfer takes place, applicable data protection law requires an appropriate legal basis and, where necessary, appropriate safeguards. Contact hello@zp1.ai for information about transfer arrangements.

6. Retention and deletion

We retain information for as long as needed for the purpose for which it was collected. Relevant criteria include whether your account remains active, service and security needs, applicable legal recordkeeping duties and the need to resolve disputes. No fixed retention period is promised here.

You can remove inventory in the app and use “Delete account and inventory” on your account page to request permanent removal of your sign-in and account-linked shelves, spools, catalogue edits, settings and history. Export anything you need first.

A hashed account identifier and deletion date are retained to prevent old sessions recreating deleted data. Deletion does not erase exports you previously downloaded or immediately erase provider backups. Payment, tax, legal or security records may remain where necessary; provider-held records are also subject to their own duties and retention practices. Cancelling Pro or downgrading is not account deletion.

7. Cookies and local preferences

Session cookies support authentication and secure access. LocalStorage remembers interface preferences and local application state. You can manage cookies and site storage through your browser, but blocking or clearing essential storage may sign you out or reset preferences.

Non-essential tracking, if introduced, would require appropriate information and consent where required by law.

8. Your rights and complaints

Subject to applicable conditions and exemptions, you may request access to your personal data, correction, erasure, restriction, portability and objection to processing based on legitimate interests. If any processing relies on consent, you may withdraw it without affecting earlier lawful processing.

Email hello@zp1.ai or write to our postal contact above to exercise your rights or ask about transfers and retention. We may need proportionate information to verify your identity. These rights are not absolute; we will explain any applicable limitation.

You may complain to the Information Commissioner’s Office (ICO), the UK supervisory authority, or another competent data protection authority. You do not have to contact us first.

9. Children

Spoolhouse is not targeted at children. Users must have legal capacity to use the service or obtain parental or guardian permission where required. If you believe a child’s data has been provided inappropriately, contact hello@zp1.ai or write to us so we can assess it and take appropriate action, including deletion where required.

10. Updates to this policy

We will update the date when this policy changes and provide appropriate prospective notice of material changes through the service or another suitable available channel, as required by law. Changes do not remove your existing statutory rights.