Privacy Policy

Last updated: September 30, 2026

Shapiko builds and hosts 3D product configurators for manufacturers. This policy explains what information we collect on shapiko.com and through the configurators we host, how we use it, and the choices you have. Shapiko is operated by Paul Vu, c/o Flux Coworking, 258 Ho Nghinh, An Hai, Da Nang 550000, Vietnam. Contact: paul@shapiko.com.

Information we collect

Manufacturers (our customers): your email, company name and website; the files, links and notes you send us (for example price lists and catalogs); your answers, revision requests and messages; and the website domains where your configurator runs.
Website chat: the email you give before chatting, your name if you provide it, your messages, the page you were on and your approximate country (from our hosting provider).
Buyers using a configurator we host for a manufacturer: the details you submit in a quote request (for example name, email or phone, ZIP code, message and the product configuration). We process this on behalf of that manufacturer, and their privacy notice also applies.
Technical data: IP addresses, used only for security and to limit abuse (rate-limit records are deleted within a day), and standard server logs kept by our hosting provider.

We use one cookie, a session cookie that keeps you signed in. The chat widget stores a chat token in your browser so you can continue a conversation. We use no advertising cookies and no third-party analytics.

How we use information

To build, host and improve your configurator, and to answer your questions.
To send service emails: sign-in links, "your draft is ready" notices, and quote requests from your buyers.
To keep the service secure and prevent spam and abuse.
To reply to you about Shapiko. Our emails always include a way to opt out; reply "unsubscribe" and we stop.

Artificial intelligence

We use AI models from Anthropic (Claude) to build configurators from the materials you send us, and to power the chat assistant on our website, which is labeled as AI. Your materials are processed by our AI provider only to deliver the service.

Who we share information with

We do not sell personal information, and we do not share it for cross-context behavioral advertising. We share it only with the providers that run the service for us:

Cloudflare: hosting, storage and transactional email.
Whop: payments and subscriptions.
Google (Gmail): email correspondence.
Anthropic: AI processing, as described above.

We may also disclose information when the law requires it.

How long we keep information

We keep account and project data while you are a customer, and for up to 12 months after you cancel, unless you ask us to delete it sooner. Chat transcripts are kept for up to 12 months. Quote requests submitted through a manufacturer's configurator are kept for that manufacturer until they delete them or cancel.

Your choices and rights

You can ask us to access, correct or delete your personal information, or to stop contacting you, by emailing paul@shapiko.com. We reply within 30 days. California residents have the right to know, delete and correct their personal information, and the right not to be discriminated against for using these rights. We do not sell or share personal information as those terms are defined under California law.

Security

All traffic uses HTTPS. Sign-in links and session tokens are stored only in hashed form, and access to customer data is limited to operating the service. No system is perfectly secure, but we work to protect your information.

International processing

We are based in Vietnam. Our providers process data in the United States and other countries. Our database is hosted in North America.

Children

Shapiko is a business service, not directed to children under 13, and we do not knowingly collect their information.

Changes

If we change this policy, we will post the new version here with a new date. If a change is significant, we will tell customers by email.