Privacy Policy
Who we are
Cliff AI, Inc. ("Cliff") runs a marketplace for parts and custom parts made by machine shops. This policy says what we collect, why, who we share it with and what you can ask of us. Questions go to shops@cliff.ai.
What we collect
From shops: the shop's name, owner, email, phone, city and what it writes about itself; its machines, materials, rates, rules and past jobs; its orders, messages and notes; its Stripe account's id and whether it can take payments.
From buyers: the name, company, city, email and shipping address given for an order; the order's parts, files, drawings and messages; your card's brand and last four digits and Stripe's ids for them (your card number goes to Stripe, never to us).
From everyone: the address and time of each request to our site, which we keep in our logs, and for export-controlled orders a record of every view and download. We set one cookie, to keep you signed in. We use no advertising or analytics trackers.
Why we use it
To run orders: show shops their orders and files, price parts, hold and charge cards, send the emails and texts an order needs, and keep the record of each order. To keep the service safe and working: sign-in, preventing abuse, fixing faults. To meet our legal duties, such as tax and export rules.
Who we share it with
The shop you order from gets your order, its files and the name and address the parts go to. A shop's name, city, profile and its record of answering orders are shown to buyers.
Our service providers, only to provide their part of the service: Stripe (payments), Amazon Web Services (hosting, storage and backups), Google (sending email), and, when a buyer sends a native CAD file, Autodesk (turning it into a 3D view). Our pages load fonts from Google Fonts and the 3D viewer from jsDelivr, which see your address when your browser fetches them.
Others when the law requires it, or to protect people or our rights. We do not sell personal information, and we do not share it for advertising.
How long we keep it
Orders, their files and their records are kept as long as the account is open and then as long as we need them for taxes, disputes and the law (usually up to 7 years). Backups are kept on the same terms. You can ask us to delete anything we are not required to keep.
Your choices
You can ask to see, correct or delete your information, or ask what we hold about you, by writing to shops@cliff.ai. We answer within 30 days. We will not treat you differently for asking.
Security
Our site is served only over encrypted connections. Sessions and sign-in links are stored as one-way hashes, each shop sees only its own orders, and staff access is limited. No system is perfectly secure; if a breach affects your information, we will tell you as the law requires.
Children
Cliff is a service for businesses and is not meant for anyone under 16.
Changes
We may change this policy and will post the new version here, dated; this one is 2026-11-01. If a change is significant, we will email the people it affects.
Contact
Cliff AI, Inc., [business address]. shops@cliff.ai.