Privacy Policy

• Account information: your email address and, when supplied by you or an authentication provider, your name and profile image. We use passwordless one-time codes and Google sign-in and do not store a password for these methods.
• Generation and project information: text prompts, configuration, uploaded reference images or 3D assets, conversations, scene or composer projects, generated models, previews, and other outputs needed to provide the feature you request.
• Catalogue and sharing activity: models you publish, visibility choices, favorites, downloads, public links, edits, and related model metadata.
• Payment and billing information: subscription, credit-pack, transaction, and billing-status data supplied by Stripe. We store provider customer and transaction identifiers but do not store complete card numbers or security codes.
• Communications: support, privacy, takedown, feedback, and other messages you send us.

• Essential session data: cookies or comparable browser storage needed to authenticate you, maintain security, remember necessary state, and operate the Service.
• Request and security logs: IP address, request URL, timestamp, response status, browser or user-agent information, and security events recorded by our hosting, storage, and delivery infrastructure.
• Error diagnostics: when the frontend encounters a technical failure, Better Stack may receive the error message and stack trace together with the affected page URL, browser and operating-system details, approximate network information, and diagnostic identifiers needed to investigate frontend errors.

In this soft-launch configuration, Better Stack is used for frontend error diagnostics; optional product analytics and replay features are not part of this policy baseline.

Google may provide account identity details when you choose Google sign-in. Stripe provides payment, subscription, dispute, and refund status. Public model sources may provide model files, previews, titles, descriptions, tags, provenance URLs, and licensing metadata for catalogue discovery and rights-management purposes.

We use information to:

• create and secure accounts, authenticate users, and provide requested features;
• process prompts and assets, operate AI generation, store outputs, and deliver downloads;
• publish or share content according to the visibility choice you make;
• process payments, subscriptions, credits, refunds, disputes, and billing support;
• detect abuse, enforce our Terms, protect rights, investigate failures, and improve reliability and safety;
• administer promotional eligibility and limits using account, IP-address, and browser or user-agent information;
• respond to support, privacy, legal, and takedown requests;
• comply with law and establish, exercise, or defend legal claims.

Depending on where you live, these uses may rely on performance of our agreement with you, legitimate interests in operating and securing the Service, your consent, and compliance with legal obligations.

We do not sell your personal information. We share information only where needed for the purposes described here, including with:

• Authentication and communications providers, including Google and Twilio SendGrid, to sign users in and deliver transactional messages.
• Payment providers, including Stripe, to process purchases and manage subscriptions, refunds, and payment risk.
• Hosting, delivery, and storage providers, including Render and Cloudflare, including R2 object storage, to run and protect the Service and store 3D assets and previews.
• AI and generation providers, including fal.ai, Anthropic, World Labs, and the model providers made available through the Service. Relevant prompts, uploaded inputs, configuration, and outputs are transmitted when needed to perform the action you request.
• Error-monitoring providers, including Better Stack, to diagnose and resolve technical failures.
• Professional advisers and authorities where reasonably necessary to comply with law, protect users or rights, respond to valid process, or complete a business reorganization or transfer subject to appropriate safeguards.

Models, metadata, profile details, or projects you make public can be viewed, copied, or indexed by others and by search engines. Content shared through an unlisted link can be accessed by anyone who receives that link. Do not publish personal, confidential, or third-party material unless you have the right to do so.

Removing public content does not guarantee removal of copies, caches, downloads, or search results already held by others. Catalogue items originating from public sources can retain provenance and rights-management metadata after removal from public discovery.

We retain account information while an account is active; project, generation, and model data while needed to provide the Service or according to your visibility choices; billing records for legal, accounting, fraud, and dispute purposes; and security or diagnostic records for a reasonable operational period.

You may request account and personal-data deletion at [email protected]. We aim to delete or anonymize eligible personal information within 30 days after verifying the request. We may retain limited information where required for legal, security, fraud, billing, dispute, or rights-protection purposes. Backups and third-party caches can take additional time to expire.

Depending on your location, you may have rights to access, correct, delete, restrict, or object to processing of your personal information; request a portable copy; withdraw consent where processing relies on consent; or complain to a data-protection authority.

Send a request to [email protected]. We may ask for information needed to verify your identity and authority. You can also manage subscription cancellation through the Stripe billing portal and control essential cookies through your browser, although blocking them may prevent authentication or core features from working.

We use measures designed to protect information, including HTTPS encryption in transit, access controls, provider credentials, authentication safeguards, and operational monitoring. No transmission or storage method is completely secure, so we cannot promise absolute security.

3D Magic and its providers may process information in the United States and other countries where privacy laws differ from those where you live. Where required, transfers are made using contractual or other legally recognized safeguards.

The Service is intended only for people who are at least 18 years old. We do not knowingly collect personal information from children. If you believe a child has supplied personal information, contact [email protected] so we can investigate and remove it where appropriate.

We may update this policy as the Service, providers, or legal requirements change. We will change the date shown on the policy and provide additional notice where a material change requires it.

Questions, privacy requests, and concerns can be sent to [email protected]. This first public policy is governed by the laws of the State of Delaware, United States, subject to any mandatory rights that apply where you live.