Privacy Policy

Scope & Quick Summary

• Applies to: Visitors, customers, collaborators, and administrators using any 3D Model Studio web property, API, or desktop integration.
• Processing model files: Most 3D operations are handled client-side. Temporary uploads only occur when you explicitly generate a share link or enable optional cloud features.
• Major principles: Minimal collection, transparent processing, strong encryption, and user-controlled retention.

Information We Collect

We collect only the data required to operate the platform and troubleshoot issues:

• Account & Billing Data: Email, name, password hash, authentication tokens, subscription tier, billing address, and payment status (handled via PCI-compliant processors).
• Operational Telemetry: Pseudonymized device information, browser version, feature usage events, crash logs, and performance metrics used to improve rendering quality and stability.
• Customer Support Records: Messages, attachments, and in-product feedback you choose to provide to our support team.
• 3D Content: Model files, textures, annotations, and measurement data you upload when creating shareable viewers, inspection reports, or collaboration sessions.

How We Use Your Information

• Service Delivery: Authenticate users, maintain saved workspaces, generate share links, produce inspection reports, and manage subscription entitlements.
• Product Improvement: Analyze anonymized usage trends to tune rendering performance, optimize asset pipelines, and prioritize roadmap features.
• Security & Abuse Prevention: Detect suspicious logins, enforce rate limits, and investigate fraud or unauthorized access.
• Communications: Send transactional emails (password resets, billing updates) and, with consent, product tips or release notes.

Legal Bases & Consent

• Contractual necessity: Processing required to provide subscription features, viewer embeds, and inspection reports.
• Legitimate interests: Improving platform reliability, safeguarding accounts, and preventing abuse while respecting your privacy expectations.
• Consent: Optional marketing emails, beta programs, and analytics cookies outside of strictly necessary categories.
• Legal compliance: Responding to lawful requests and maintaining purchase records for tax and accounting obligations.

3D File Handling & Retention

• Client-Side Default: Viewer, converter, and inspector workflows run locally in your browser or desktop app; no files are uploaded by default.
• Temporary Uploads: When you create a share link or collaborative review, encrypted copies are stored in regional data centers until the link expires, you delete it manually, or 30 days pass—whichever occurs first.
• Confidentiality: We never sell, mine, or reuse your models. Access is restricted to a minimal set of accredited engineers under strict audit controls for troubleshooting purposes only.
• Automated Deletion: Expired shares, revoked collaborations, and closed accounts trigger automatic deletion jobs across primary and backup systems within 30 days.

Cookies, Analytics & Third Parties

• Essential cookies: Maintain session authentication and store viewer preferences. These are required for the platform to function.
• Analytics: We use privacy-centric analytics (GA4 and self-hosted telemetry) with IP anonymization and data retention caps.
• Payment processing: Stripe and Paddle handle billing in compliance with PCI DSS; we do not store raw card data.
• Infrastructure: Encrypted hosting via Microsoft Azure and Cloudflare CDN for global delivery. All subprocessors are vetted and listed in our Data Processing Agreement (DPA).

Data Retention

• Account data: Stored while your subscription or free account remains active and for up to 24 months after cancellation to support reactivation and legal recordkeeping.
• Telemetry logs: Retained for 12 months in aggregated form for performance tuning, then anonymized or deleted.
• Support tickets: Retained for 24 months to resolve ongoing issues and train staff, unless you request earlier deletion.
• Marketing preferences: Maintained until you unsubscribe or request removal.

Your Privacy Rights

• Access & Portability: Request a copy of the personal data we hold about you.
• Rectification: Update or correct incomplete or inaccurate information.
• Deletion: Close your account and request deletion of associated data, subject to legal retention obligations.
• Restriction & Objection: Limit certain processing or opt out of marketing communications at any time.
• Regulatory rights: EU/UK residents may lodge complaints with their supervisory authority; California residents may exercise CCPA/CPRA rights including data access and deletion.

International Transfers

We store data in the United States and European Union. When transferring data across borders, we rely on Standard Contractual Clauses and supplementary safeguards aligned with GDPR, UK GDPR, and other applicable regulations.

Security Measures

We apply strong encryption in transit (TLS 1.2+) and at rest, role-based access controls, automated vulnerability scanning, and annual penetration testing. Despite these measures, no internet service can guarantee absolute security, so please use unique passwords and enable multi-factor authentication.

Children’s Privacy

3D Model Studio is not directed to children under 16, and we do not knowingly collect personal data from minors. Parents or guardians who believe a child has provided personal data should contact us to request deletion.

Policy Updates

We may revise this policy to reflect new features, legal requirements, or security practices. We will post updates here and, when material changes occur, notify registered users via email or in-app messaging.

Contact & Data Requests

Email connect@3dmodelstudio.com for questions, data requests, or to execute your privacy rights.