Last updated July 10, 2026

This Privacy Notice for Exastellar Industries ('we', 'us', or 'our'), describes how and why we might access, collect, store, use, and/or share ('process') your personal information when you use our services ('Services'), including when you:

• Visit our website at https://trueshapenest.com, or any website of ours that links to this Privacy Notice
• Engage with us in other related ways, including by email

Questions or concerns? Reading this Privacy Notice will help you understand your privacy rights and choices. We are responsible for making decisions about how your personal information is processed. If you do not agree with our policies and practices, please do not use our Services. If you still have any questions or concerns, please contact us at [email protected].

The short version: TrueShapeNest runs entirely online. Your designs, settings and exported files are processed and stored locally on your device - they are never transmitted to us. There is no account, no registration and no upload.

What personal information do we process? We only receive personal information you choose to send us, such as your email address and message contents when you contact us. Our hosting provider may automatically record standard technical logs (such as IP address and device type) to serve and secure the website.

Do we process any sensitive personal information? We do not process sensitive personal information.

Do we collect any information from third parties? We do not collect any information from third parties.

How do we keep your information safe? The overwhelming majority of your data never reaches us at all. For the little that does (emails, server logs), we have adequate organisational and technical processes in place. However, no electronic transmission over the internet or information storage technology can be guaranteed to be 100% secure.

What are your rights? Depending on where you are located geographically, the applicable privacy law may mean you have certain rights regarding your personal information.

How do you exercise your rights? The easiest way is to contact us at [email protected]. We will consider and act upon any request in accordance with applicable data protection laws.

In Short: We collect personal information that you voluntarily provide to us, such as when you contact us by email.

There is no registration or account system on the Services. The personal information we may collect is limited to:

• Your email address and the contents of your message, when you choose to contact us.

Sensitive Information. We do not process sensitive information.

All personal information that you provide to us must be true, complete, and accurate, and you must notify us of any changes to such personal information.

In Short: Standard technical information - such as your Internet Protocol (IP) address and device characteristics - may be collected automatically by our hosting infrastructure when you visit the Site.

The Services are delivered as a static web application. Our hosting and content-delivery providers may automatically record log and device data (such as IP address, device type, operating system, referring URLs and access timestamps) when you access the Site. This information does not reveal your specific identity and is needed to maintain the security and operation of the Services.

Your shapes, arrays, nested layouts, exported files and setup preferences are processed entirely online and stored, where applicable, in local storage on your device. This data is never transmitted to us and we have no access to it. Clearing the site's stored data on your device removes it.

In Short: We process the limited information we receive to operate and secure the Site, respond to you, and comply with law.

• To deliver and facilitate delivery of the Services.
• To respond to your inquiries when you contact us.
• To maintain the security and operation of the Services.
• To comply with our legal obligations.
• To save or protect an individual's vital interest, such as to prevent harm.

In Short: We only process your personal information when we believe it is necessary and we have a valid legal reason (i.e. legal basis) to do so under applicable law.

If you are located in the EU or UK, this section applies to you. The General Data Protection Regulation (GDPR) and UK GDPR require us to explain the valid legal bases we rely on in order to process your personal information:

• Consent. We may process your information if you have given us permission to use your personal information for a specific purpose. You can withdraw your consent at any time.
• Performance of a Contract. We may process your personal information when we believe it is necessary to provide the Services you have requested.
• Legitimate Interests. We may process your information when it is reasonably necessary to operate and secure the Services, where your interests and fundamental rights do not outweigh those interests.
• Legal Obligations. We may process your information where necessary for compliance with our legal obligations.
• Vital Interests. We may process your information where necessary to protect your vital interests or the vital interests of a third party.

If you are located in Canada, we may process your information with your express or implied consent, which you can withdraw at any time, or in the exceptional cases permitted by applicable law.

In Short: We may share the limited information described above in the specific situations described in this section.

• Service Providers. We may share technical data with hosting, content-delivery and security providers who serve the website on our behalf.
• Analytics and Advertising. We may in the future use analytics services or display advertising on the Site. Any such technologies and the choices available to you will be described in an updated version of this Privacy Notice before they are introduced.
• Business Transfers. We may share or transfer information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.

In Short: We are not responsible for the safety of any information that you share with third parties that we may link to.

The Services may link to third-party websites. We do not make any guarantee regarding such third parties, and we will not be liable for any loss or damage caused by the use of such third-party websites. Any data collected by third parties is not covered by this Privacy Notice. You should review the policies of such third parties and contact them directly to respond to your questions.

In Short: The application uses local storage on your device for your own settings; we do not currently use tracking cookies.

The Services use local storage on your device to save your setup (units, material, tools, output preferences) on your device so it is there when you return. This data stays on your device and is not a tracking technology.

If we introduce analytics or advertising cookies in the future, this Privacy Notice will be updated first and, where required by law, your consent will be requested.

In Short: We keep the limited information we receive for as long as necessary to fulfil the purposes outlined in this Privacy Notice unless otherwise required by law.

Email correspondence is retained for as long as needed to handle your inquiry and for our records. Server logs are retained per our hosting providers' standard rotation. Your application data never reaches us, so there is nothing for us to retain or delete - it lives on your device under your control.

In Short: We aim to protect your personal information through a system of organisational and technical security measures - and by design, almost none of it ever reaches us.

We have implemented appropriate and reasonable technical and organisational security measures designed to protect the security of any personal information we process. However, no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure, so we cannot promise or guarantee that hackers, cybercriminals, or other unauthorised third parties will not be able to defeat our security. Transmission of personal information to and from our Services is at your own risk.

In Short: We do not knowingly collect data from or market to children under 18 years of age.

We do not knowingly collect, solicit data from, or market to children under 18 years of age. The parts you design with the Services are cut on dangerous machinery, and the Services are intended for users who are at least 18 years old. If you become aware of any data we may have collected from children under age 18, please contact us at [email protected].

In Short: Depending on your state of residence in the US or in some regions, such as the European Economic Area (EEA), United Kingdom (UK), Switzerland, and Canada, you have rights that allow you greater access to and control over your personal information.

In some regions (like the EEA, UK, Switzerland, and Canada), you have certain rights under applicable data protection laws. These may include the right (i) to request access and obtain a copy of your personal information, (ii) to request rectification or erasure; (iii) to restrict the processing of your personal information; (iv) if applicable, to data portability; and (v) not to be subject to automated decision-making. You can make such a request by contacting us using the details in the section 'HOW CAN YOU CONTACT US ABOUT THIS NOTICE?' below.

If you are located in the EEA or UK and you believe we are unlawfully processing your personal information, you have the right to complain to your Member State data protection authority or UK data protection authority. If you are located in Switzerland, you may contact the Federal Data Protection and Information Commissioner.

Withdrawing your consent: If we are relying on your consent to process your personal information, you have the right to withdraw your consent at any time by contacting us. This will not affect the lawfulness of the processing before its withdrawal.

Note that because the Services have no accounts, there is no account data for us to review, change or delete - your application data is stored only on your own device.

A Do-Not-Track ('DNT') feature you can activate to signal your privacy preference. At this stage, no uniform technology standard for recognising and implementing DNT signals has been finalised. As we do not currently track visitors, DNT signals make no practical difference on the Services today. California law requires us to let you know how we respond to Do-Not-Track signals: because there currently is no standard, we do not respond to them at this time.

In Short: If you are a resident of a US state with a comprehensive privacy law, you may have the right to request access to and receive details about the personal information we maintain about you, correct inaccuracies, get a copy of, or delete your personal information.

We have not collected the categories of personal information enumerated by those laws (identifiers, customer records, protected classifications, commercial information, biometric information, internet activity profiles, geolocation data, sensory data, professional information, education information, inferences, or sensitive personal information) in the past twelve (12) months, other than technical server logs described above and correspondence you send us.

We have not sold or shared any personal information to third parties for a business or commercial purpose in the preceding twelve (12) months.

Your rights may include: the right to know whether we are processing your personal data, to access it, to correct inaccuracies, to request deletion, to obtain a copy, to non-discrimination for exercising your rights, and to opt out of processing for targeted advertising, sale, or profiling. To exercise these rights, email us at [email protected]. If we decline to take action regarding your request, you may appeal our decision by emailing us; if your appeal is denied, you may submit a complaint to your state attorney general.

California 'Shine The Light' Law: California residents may request from us, once a year and free of charge, information about categories of personal information (if any) we disclosed to third parties for direct marketing purposes. We do not disclose personal information to third parties for direct marketing purposes.

In Short: You may have additional rights based on the country you reside in.

Australia and New Zealand: We collect and process your personal information under the obligations and conditions set by Australia's Privacy Act 1988 and New Zealand's Privacy Act 2020. At any time, you have the right to request access to or correction of your personal information by contacting us. If you believe we are unlawfully processing your personal information, you have the right to submit a complaint to the Office of the Australian Information Commissioner or the Office of New Zealand Privacy Commissioner.

Republic of South Africa: At any time, you have the right to request access to or correction of your personal information by contacting us. If you are unsatisfied with the manner in which we address any complaint, you can contact The Information Regulator (South Africa): [email protected].

In Short: Yes, we will update this notice as necessary to stay compliant with relevant laws.

We may update this Privacy Notice from time to time. The updated version will be indicated by an updated 'Last updated' date at the top of this Privacy Notice. We encourage you to review this Privacy Notice frequently to be informed of how we are protecting your information.

If you have questions or comments about this notice, you may email us at [email protected] or contact us by post at:

Exastellar Industries NO.35A, JALAN PSK 6 PUSAT PERDAGANGAN SERI KEMBANGAN SERI KEMBANGAN, SELANGOR 43300 Malaysia

Based on the applicable laws of your country or state of residence in the US, you may have the right to request access to the personal information we collect from you, details about how we have processed it, correct inaccuracies, or delete your personal information. To make such a request, email us at [email protected]. Your application data (designs, settings, exported files) is stored only on your device - you can review or delete it yourself at any time through the application or by clearing the site's stored data on your device.