Privacy Policy

1. Scope

This Privacy Policy applies when you use the 3DBAE website, applications, APIs, published viewers, support channels, and related services (the “Service”). It does not govern a customer's own website or how that customer uses an embedded 3DBAE experience.

2. Information we process

Account and workspace information

We process your name, email address, authentication records, account preferences, workspace membership, invitations, and collaboration roles. If you use password authentication, we store a secure password hash rather than the readable password.

Projects and content

We process the files and instructions you choose to submit, including 3D models, images, textures, video, audio, prompts, generated outputs, scene and Canvas documents, comments, project settings, and version history. Content can include metadata embedded in uploaded files.

Usage, device, and security data

We process technical information needed to operate and protect the Service, such as browser and device data, IP address, request and error logs, session and authentication events, feature usage, storage consumption, generation jobs, and credit-ledger activity.

Billing information

We process purchase identifiers, plan and add-on selections, billing status, currency, tax and refund facts, and limited transaction metadata. Checkout and complete payment-card details are handled by an authorized payment processor; 3DBAE does not store complete card numbers.

Support communications

When you contact us, we process the message, contact details, and any files or diagnostic information you choose to provide.

3. Why we use information

• Provide, personalize, and maintain the Service.
• Authenticate users and enforce workspace permissions.
• Process files, AI requests, publications, embeds, and exports.
• Meter storage and credits, complete purchases, and prevent fraud.
• Diagnose failures, secure accounts, and improve reliability.
• Respond to support requests and important service notices.
• Meet legal, tax, accounting, and regulatory obligations.

Where consent is required, such as for optional marketing or non-essential cookies, you may withdraw that consent. We may also process information to perform our contract with you, comply with law, and pursue legitimate interests such as security and service improvement, subject to applicable privacy law.

4. AI and connected assistants

When you request an AI feature, 3DBAE sends the inputs and settings needed to produce that result to configured model infrastructure. Inputs may include prompts, reference media, and a bounded snapshot of the project state relevant to the request. Do not submit sensitive personal information that is unnecessary for your work.

If you authorize a connected assistant, it receives only the scopes shown on the consent screen and acts within the permissions of your authenticated account. Project content is treated as user data, not as authority to access another account, billing controls, or 3DBAE infrastructure. You can revoke a connection from your account or the connected application.

5. Sharing and public content

Projects are private unless you share or publish them. A public viewer link or embed makes the published scene and the files required to render it available to people who can reach that link. Restricted links require an authorized account. If you enable cloning, viewers can copy or export the published model through supported product controls. Review sharing settings before publishing.

Workspace members can access content according to their assigned role. Comments, invitations, and shared assets may identify the people who created or received them.

6. When information is disclosed

We may disclose information only as needed:

• To infrastructure, storage, email, analytics, payment, support, and model-processing service providers operating under contractual obligations.
• To workspace collaborators and viewers you choose to authorize.
• To comply with law or a valid legal process, or to protect users, the Service, and the public from harm.
• In a corporate transaction, subject to appropriate confidentiality and notice where required.

We do not sell your personal information.

7. Retention and deletion

We retain account and project information while your account is active and as needed to provide the Service. You can delete projects or request account deletion. Deletion removes active content through our operational process; limited copies may remain temporarily in backups, security records, and legally required financial or audit records. We retain each category only for as long as needed for its stated purpose, dispute resolution, security, or applicable law.

8. Security

We use access controls, scoped authorization, encryption in transit, credential hashing, signed asset access, logging, and other technical and organizational measures appropriate to the Service. No online system is risk-free, so you should use a unique password, protect access tokens, review collaborators, and report suspected compromise promptly.

9. International processing

The Service may process information in countries other than your own. Where required, we use contractual and other lawful safeguards for cross-border transfers. Local data-protection rights continue to apply as provided by law.

10. Your choices and rights

Depending on your location, you may have rights to access, correct, delete, restrict, object to, or obtain a portable copy of personal information, and to withdraw consent or complain to a regulator. You can update common account details in the Service. For other requests, email connect@3dbae.com. We may verify your identity and may retain information where an exception or legal obligation applies.

11. Cookies

3DBAE uses essential cookies and similar storage for authentication, security, preferences, and core functionality. Optional analytics or marketing technologies are used only where configured and, when required, after consent. Browser controls can remove cookies, but blocking essential storage may prevent account features from working.

12. Age requirement

The Service is intended for people who are at least 18 years old or the age of legal majority where they live. We do not knowingly offer accounts to children. Contact us if you believe a child submitted personal information without appropriate authorization.

13. Changes and contact

We may update this policy as the Service or law changes. We will post the revised effective date and provide additional notice for material changes when required. Questions and privacy requests can be sent to connect@3dbae.com.