Privacy Policy
Last updated: July 20, 2026
This Privacy Policy explains how Ravlok ("Ravlok," "we," "us," or "our"), a service operated by ARCAOR LLC, PO Box 205, Sedalia, MO 65302, United States, collects, uses, shares, and protects information in connection with our production and order-fulfillment service (the "Service").
Ravlok is a production partner for online sellers. Sellers ("Designers") connect their marketplace shop (for example, an Etsy shop), attach their own 3D model files to their listings, and we print, pack, and ship the resulting orders to their buyers on their behalf. This means we handle two kinds of personal information: information about Designers who use our Service, and limited information about their buyers, which reaches us through the connected marketplace solely so that we can fulfill orders.
If you have questions, contact us at support@ravlok.com.
1. Information we collect
1.1 Information Designers provide to us
- Account information: name, email address, and a password (stored only as a secure hash).
- Business/profile information: your display name, shop name, and any notes you add to your profile.
- Uploaded content: the 3D model files you upload (for example, .stl, .obj, .3mf) and the print settings you assign to them (material, size, and similar specifications).
- Payment information: when you add a payment method to be billed for production, card details are collected and stored by our payment processor, Stripe — not by Ravlok. We store only a Stripe customer identifier and non-sensitive details such as the card brand and last four digits.
1.2 Information we receive when you connect a marketplace shop
When you authorize Ravlok to connect to your marketplace account (via OAuth), we receive and store:
- Access credentials for your shop (OAuth access and refresh tokens), which we store encrypted at rest and never expose or share.
- Shop and listing data for the connected shop (for example, listing titles, variations, and shop identifiers).
- Paid-order data for orders placed in your shop, including order identifiers, item and quantity details, and — necessarily — the buyer's name and shipping address, because we cannot ship a physical product without them.
1.3 Information about buyers
We do not have a direct relationship with your buyers. We receive a buyer's name and shipping address only through your connected marketplace, and only for orders you route to us. We use this information for one purpose: to produce and deliver that order. We do not use buyer information for marketing, we do not sell it, and we do not contact buyers directly — all buyer communication remains with you and the marketplace.
1.4 Information collected automatically
When you use the Service we may collect standard technical information such as IP address, browser type, and basic usage/log data, used to operate, secure, and troubleshoot the Service.
2. How we use information
We use the information above to:
- provide the Service — validate uploaded files, price orders, queue and produce prints, and arrange shipping;
- import and process paid orders from your connected shop, and post shipment/tracking information back to that shop;
- bill you (the Designer) for production through Stripe;
- communicate with you about your account, orders, and support requests;
- maintain the security, integrity, and proper functioning of the Service; and
- comply with legal obligations.
We do not use buyer personal information for any purpose other than fulfilling the specific order it relates to.
3. How we share information
We share information only as needed to run the Service:
- Payment processing: with Stripe, to charge your payment method. Stripe processes card data under its own privacy policy.
- Shipping and production: with shipping carriers and, where applicable, production/logistics providers, to deliver orders (this includes the buyer's name and shipping address for the relevant order).
- The connected marketplace: we send shipment and tracking details back to your marketplace (for example, Etsy) so the buyer can be notified through that marketplace.
- Service providers: with vendors that host our infrastructure and database on our behalf, under obligations of confidentiality and security.
- Legal and safety: where required by law, legal process, or to protect the rights, property, or safety of Ravlok, our users, or others.
- Business transfer: in connection with a merger, acquisition, or sale of assets, subject to this Policy.
We do not sell personal information, and we do not share it for cross-context behavioral advertising.
4. Data retention
We retain Designer account information for as long as your account is active and as needed to provide the Service. We retain order records (including the buyer information tied to an order) for as long as necessary to fulfill the order, provide support, resolve disputes, and meet legal, tax, and accounting requirements, after which we delete or anonymize them. You may request deletion as described below.
5. Your choices and rights
- Access and correction: you can view and update your account and profile information in the Service.
- Disconnecting a shop: you can disconnect a connected marketplace shop at any time, which revokes our ongoing access to that shop's data.
- Deletion: you may request deletion of your account and associated data by emailing support@ravlok.com. We will honor deletion requests, subject to records we must retain for legal, tax, or dispute-resolution reasons.
- Buyer data requests: if a buyer asks to access or delete the personal information we hold about their order, or if your marketplace transmits such a request to us, we will act on it and delete the relevant buyer information, subject to the same legal-retention limits.
Depending on where you live, you may have additional rights under applicable privacy laws (for example, U.S. state privacy laws). To exercise any such right, contact support@ravlok.com. We will not discriminate against you for exercising your rights.
6. Security
We use reasonable technical and organizational measures to protect information, including encryption of marketplace access tokens at rest, restricted access to production data, and secure handling of payment data through Stripe (we do not store full card numbers). No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
7. Children
The Service is intended for businesses and adults. It is not directed to children, and we do not knowingly collect personal information from children.
8. International users and data location
The Service is operated from the United States, and information is processed and stored in the United States. If you access the Service from outside the United States, you understand that your information will be processed in the United States.
9. Third-party services
Connecting a marketplace (such as Etsy) and paying through Stripe means those third parties also process data under their own terms and privacy policies. This Policy covers only Ravlok's own practices. Ravlok is an independent service and is not endorsed by, affiliated with, or certified by any marketplace unless expressly stated.
10. Changes to this Policy
We may update this Policy from time to time. When we do, we will revise the "Last updated" date above and, where appropriate, notify you. Your continued use of the Service after an update means you accept the revised Policy.
11. Contact
Questions or requests regarding this Policy or your data:
ARCAOR LLC
Email: support@ravlok.com
PO Box 205, Sedalia, MO 65302, United States