Layered Lumens 3D — Privacy & User Data Governance

📦 OrderStack - Custom Order Batch Exporter

Direct URL: https://layeredlumens3d.uk/privacy-orderstack.html

Single Purpose Statement

OrderStack is a single-purpose productivity utility built to extract customer orders, un-truncated customer customization notes, and line-item details from authorized seller dashboards and batch export them to CSV or Google Sheets.

User Data Handled

Data Category	Elements	Purpose & Storage
Seller Dashboard Orders	Buyer names, shipping addresses, order IDs, SKUs, quantities, prices, fees, un-truncated custom notes.	Processed in temporary browser RAM only during user-initiated exports. Never sent to Layered Lumens 3D servers.
Preferences & Presets	Export preset (Standard, ShipStation, YunExpress, Accounting), column visibility.	Stored locally on your device via chrome.storage.local.
Google OAuth (Optional)	OAuth 2.0 access token (scopes: spreadsheets, drive.file).	Used strictly when the user clicks "Sync to Google Sheets" to write rows directly to their personal Google Drive account.
Licensing & Billing	Trial timestamps and ExtensionPay customer ID.	Managed securely via ExtensionPay (Stripe). We never handle or see payment card data.
Telemetry	Anonymized feature clicks and version numbers.	Sent via PostHog for crash monitoring. Zero PII or order records are ever included.

Third Parties With Whom Data Is Shared

• Google LLC (Google Sheets & Google Drive): Only upon explicit user command, data is transmitted directly from the browser to Google's official API. Governed by Google's Privacy Policy.
• ExtensionPay / Stripe, Inc.: For secure checkout and subscription license verification.
• PostHog, Inc.: For anonymized error and operational telemetry.
• Cloudflare, Inc.: For edge CDN asset delivery.

Permissions Justification

• activeTab: Temporary access to read the visible seller page DOM upon user click.
• storage: Caches user presets, column configurations, and trial quota counts locally.
• scripting: Executes the order extraction parser on active store tabs.
• identity: Facilitates optional Google OAuth login for Google Sheets sync.
• Downloads: OrderStack does not request the privileged downloads permission; CSV exports are generated and downloaded via standard client-side Blob links.

View Full Standalone OrderStack Privacy Policy →

📊 MarginScan - Amazon FBA Profit & VAT Calculator

Direct URL: https://layeredlumens3d.uk/privacy-marginscan.html

User Data Handled

• User Contact Information (PII): Email address voluntarily entered in the 7-day Pro trial activation modal. Handled via MailerLite under strict GDPR DPA. Never sold.
• Amazon Product Metadata: Price, category, dimensions, weight (read in local volatile memory on active Amazon tabs; never stored externally).
• User Fee Presets: Stored locally on device via chrome.storage.local.
• Billing & Licensing: ExtensionPay (Stripe) for subscription status verification.
• Reliability Telemetry: Anonymized error logging via PostHog (zero PII).

Third Parties With Whom Data Is Shared

• MailerLite, Inc.: Email delivery and trial status communications.
• ExtensionPay / Stripe, Inc.: Subscription checkout and licensing verification.
• PostHog, Inc.: Anonymized crash telemetry.
• Cloudflare, Inc.: Global edge security and API routing.

Permissions Justification

• activeTab: Reads product attributes on active Amazon listings.
• storage: Persists user ROI thresholds, shipping costs, and trial tokens locally.
• scripting: Renders the calculator overlay into Amazon pages.
• Downloads: MarginScan does not request the privileged downloads permission.

View Full Standalone MarginScan Privacy Policy →

🛡️ PortalPilot — Enterprise FortiPortal Assistant

Direct URL: https://layeredlumens3d.uk/privacy-portalpilot.html

Zero-trust, on-device assistant for FortiPortal firewall policy validation. Does not transmit network topologies, credentials, or traffic logs to any external server.

View Full Standalone PortalPilot Privacy Policy →

🌐 Master Fleet Data Governance & User Rights

Data Retention & User Deletion

Because our extensions process data locally and do not store customer records on cloud databases, you retain total data sovereignty. You can delete all stored preferences, trial tokens, and credentials immediately by clearing your browser's extension data or uninstalling the extension.

Security & Encryption

All external communication (e.g. Google OAuth, Stripe billing, Cloudflare CDN) is protected using TLS 1.3 encryption.

Contact & Regulatory Inquiries

For inquiries regarding UK GDPR, California Consumer Privacy Act (CCPA), or Google API Services User Data Policies, please contact:

Layered Lumens 3D
Email: support@layeredlumens3d.uk
Website: https://layeredlumens3d.uk