Privacy policy

We collect personal information in three ways: information you provide to us directly, information we collect automatically when you use the Site, and information we receive from third parties.

Information you provide. When you contact us, request a quote or RFQ, submit engineering files, create an account, apply for a job, subscribe to updates, or otherwise communicate with us, you may provide:

• Identifiers and contact details— name, business email address, phone number, mailing or shipping address, employer, and job title.
• Project and commercial information— descriptions of your part or program, quantities, timelines, purchase orders, and billing or payment details.
• Engineering and technical data— CAD models, drawings, specifications, photographs, and related files you upload or send to us, which may include your or your customers’ proprietary or export-controlled information.
• Recruitment information— for job applicants, your resume, work history, education, certifications, eligibility to work, and any information you include in your application or interviews.
• Communications— the content of emails, forms, and other messages you send us, and our records of those interactions.

Information we collect automatically. When you visit the Site, we and our service providers may automatically collect:

• Device and connection data— IP address, browser type and language, operating system, and device identifiers.
• Usage data— pages viewed, links clicked, referring and exit pages, dates and times of visits, and similar diagnostic data.
• Cookies and similar technologies— as described in Section 2.

Information from third parties. We may receive business contact information and professional details from referrals, event registrations, publicly available sources, professional networking platforms, and business information providers, which we use to evaluate and pursue legitimate business opportunities.

We and our hosting and infrastructure providers use cookies, server logs, and similar technologies to operate the Site, keep it secure, remember your preferences, and understand how it is used.

• Strictly necessary cookies and logs— required to deliver the Site, balance load, prevent abuse, and maintain security. These cannot be switched off through our Site.
• Functional cookies— remember choices you make to improve your experience.
• Analytics and performance cookies— such as Google Analytics, which help us measure traffic, understand how the Site is used, and improve our content.
• Marketing cookies— such as those set by HubSpot, which support our forms, communications, and customer-relationship and marketing activities, and help us understand the effectiveness of our outreach.

When you first visit the Site, we present a cookie consent banner (powered by CookieYes) that lets you accept, reject, or customize non-essential cookies. You can change your choices at any time by reopening the cookie settings from the banner or the link in our footer. In regions that require prior consent (such as the EEA and UK), non-essential cookies are not set until you consent.

You can also control or delete cookies through your browser settings, and you can set most browsers to refuse cookies or alert you when one is set. If you disable certain cookies, parts of the Site may not function properly. We honor recognized opt-out preference signals, including the Global Privacy Control (GPC), where required by law.

You can opt out of Google Analytics across all websites by installing Google’s opt-out browser add-on.

We use the information we collect to:

• Respond to your inquiries, prepare quotes, and process RFQs;
• Provide, perform, and improve our manufacturing, engineering, and file-hosting Services;
• Process orders, fulfill contracts, arrange shipping, and handle billing and payment;
• Communicate with you about projects, orders, support, and, where permitted, relevant updates or offers;
• Evaluate job applications and manage recruiting;
• Measure and analyze how the Site is used and improve our content and outreach, including through Google Analytics and HubSpot;
• Operate, secure, monitor, and improve the Site and our systems, and prevent fraud or misuse;
• Comply with legal, regulatory, contractual, export-control, and quality-system obligations; and
• Establish, exercise, or defend legal claims.

We will not use your personal information for materially different, unrelated, or incompatible purposes without providing you notice.

Where the EU or UK General Data Protection Regulation (GDPR) applies, we process personal information only where we have a legal basis to do so:

• Contract— to take steps at your request before entering into a contract and to perform a contract with you or your organization.
• Legitimate interests— to operate, secure, and grow our business, respond to inquiries, and protect our rights, provided those interests are not overridden by your interests and rights.
• Legal obligation— to comply with applicable laws, including export-control and tax obligations.
• Consent— where we rely on consent (for example, certain communications), which you may withdraw at any time.

We do not sell your personal information for money. We disclose personal information as described below, and we use the cookies and analytics and marketing technologies described in Section 2:

• Service providers and processors— companies that host our Site and data, or that provide IT, security, communications, shipping, payment processing, and professional services, and that are bound to use the information only to perform services for us.
• Analytics and marketing providers— such as Google (Google Analytics) and HubSpot, which help us understand how the Site is used and manage our communications and customer relationships. These providers may set their own cookies and process data under their own privacy policies.
• Affiliates— entities under common ownership with us, consistent with this Policy.
• Professional advisors and authorities— lawyers, auditors, regulators, and government bodies where required by law, subpoena, or legal process, or to protect our rights, safety, and property.
• Business transfers— in connection with a merger, acquisition, financing, or sale of assets, subject to appropriate safeguards.
• With your direction— when you ask us to share information with a third party, such as a customer or partner on your program.

Some files and technical data you provide are subject to U.S. export control laws, including the International Traffic in Arms Regulations (ITAR) and the Export Administration Regulations (EAR). We handle such information under our export-compliance program and our quality management system.

Access to export-controlled technical data is restricted to authorized personnel, and we may decline to receive, store, or process information that we cannot lawfully handle. You are responsible for properly identifying export-controlled information before sending it to us and for ensuring you are authorized to disclose it.

We maintain administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, use, alteration, and disclosure. Our cybersecurity program is aligned with CMMC Level II and DFARS 252.204-7012 requirements, and our facility and quality controls are maintained under our AS9100D-certified quality management system.

No method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security. If we become aware of a security incident affecting your personal information, we will notify you and the appropriate authorities as required by applicable law.

We retain personal and project information for as long as necessary to fulfill the purposes described in this Policy, including providing our Services, maintaining business records, and complying with our legal, contractual, and quality-system obligations. Aerospace and defense build records are typically retained for at least ten (10) years, and some records may be retained longer where required by contract or law.

When information is no longer required, we securely delete, destroy, or de-identify it in accordance with our retention schedule and applicable export-control requirements.

We are based in the United States and process information here. If you access the Site or provide information from outside the United States, you understand that your information will be transferred to, stored, and processed in the United States, where data-protection laws may differ from those in your country.

Where we transfer personal information from the EEA, UK, or Switzerland, we rely on appropriate safeguards, such as Standard Contractual Clauses, where required by applicable law.

Subject to applicable law and verification of your identity, you may have the right to:

• Access the personal information we hold about you and request a copy;
• Correct inaccurate or incomplete information;
• Delete personal information, subject to legal and recordkeeping exceptions;
• Opt out of certain processing, and withdraw consent where processing is based on consent;
• Receive your information in a portable format, where applicable; and
• Be free from unlawful discrimination for exercising your rights.

To exercise these rights, contact us at privacy@americanadditive.com. We may need to verify your identity before responding, and we will respond within the timeframes required by applicable law. You may use an authorized agent to submit a request on your behalf where the law permits, subject to proof of authorization.

Please note that much of the information we hold is business-to-business contact and project information, or records we are required to retain for legal, contractual, or export-control reasons, which may limit our ability to delete it.

Depending on your state of residence (for example, California, Virginia, Colorado, Connecticut, Utah, and other states with comprehensive privacy laws), you may have additional rights, including the rights to know, access, correct, delete, and obtain a portable copy of your personal information, and to opt out of the sale or sharing of personal information and of certain targeted advertising and profiling.

We do not sell personal information for money. Our use of analytics and marketing cookies (such as Google Analytics and HubSpot) may be considered “sharing” or “targeted advertising” under some state privacy laws; you can opt out at any time through our cookie consent banner, by using the Global Privacy Control (GPC) signal, or by contacting us. We do not knowingly use or disclose sensitive personal information for purposes that would require an opt-out under these laws.

California residents may also request information about disclosures for direct-marketing purposes under California’s “Shine the Light” law. We will not discriminate or retaliate against you for exercising any of these rights. Where required, you may appeal a decision regarding your request by contacting us at privacy@americanadditive.com.

If you are in the EEA, UK, or Switzerland, you have the rights described in Section 10 above, and you may also object to or request restriction of certain processing. You have the right to lodge a complaint with your local data-protection supervisory authority. We encourage you to contact us first so we can address your concerns.

Our Site and Services are intended for businesses and professionals and are not directed to children. We do not knowingly collect personal information from children under 16 (or under 13 as defined by the Children’s Online Privacy Protection Act). If you believe a child has provided us personal information, please contact us and we will delete it.

The Site may contain links to third-party websites, platforms, or services that we do not operate or control. This Policy does not apply to those third parties, and we are not responsible for their privacy practices. We encourage you to review the privacy policies of any third-party services you use.

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above and, where appropriate or required, provide additional notice. Your continued use of the Site or Services after the updated Policy becomes effective constitutes your acceptance of the changes.

If you have questions, concerns, or requests regarding this Policy or our privacy practices, contact us at: