Privacy Policy

1. Introduction

ImageTo3D ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

2. Information We Collect

2.1 Information You Provide

• Account Information: When you sign in with Google, we receive your name, email address, and profile picture.
• Uploaded Content: Images you upload for 3D model generation.
• Payment Information: Payment details are processed securely by our payment provider (Stripe) and are not stored on our servers.

2.2 Automatically Collected Information

• Usage Data: Information about how you interact with the Service, including generation history.
• Device Information: Browser type, operating system, and device identifiers.
• Log Data: IP address, access times, and pages viewed.

3. How We Use Your Information

We use your information to:

• Provide and maintain the Service
• Process your uploaded images and generate 3D models
• Process payments and manage your account
• Communicate with you about your account or the Service
• Improve and optimize the Service
• Detect and prevent fraud or abuse
• Comply with legal obligations

4. Data Storage and Security

Storage: Your data is stored on secure servers provided by Amazon Web Services (AWS). Uploaded images and generated models are stored in encrypted S3 buckets.

Retention: We retain your uploaded images and generated models for as long as your account is active. You can delete your generations at any time through the dashboard.

Security: We implement industry-standard security measures including encryption in transit (HTTPS) and at rest, secure authentication, and regular security assessments.

5. Data Sharing and Disclosure

We do not sell your personal information. We may share your information with:

• Service Providers: Third-party services that help us operate (cloud hosting, payment processing).
• Legal Requirements: When required by law, court order, or government request.
• Business Transfers: In connection with a merger, acquisition, or sale of assets.
• With Your Consent: When you explicitly authorize us to share information.

6. Your Rights

Depending on your location, you may have the following rights:

• Access: Request access to your personal data.
• Correction: Request correction of inaccurate data.
• Deletion: Request deletion of your data (subject to legal retention requirements).
• Portability: Request a copy of your data in a portable format.
• Objection: Object to certain processing of your data.
• Withdraw Consent: Withdraw consent where processing is based on consent.

To exercise these rights, please contact us at [email protected].

7. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your data in accordance with applicable laws, including standard contractual clauses where required.

8. Cookies and Tracking

We use essential cookies for authentication and session management. We do not use third-party tracking or advertising cookies. Your browser settings allow you to control cookie preferences.

9. Children's Privacy

The Service is not intended for users under 16 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

10. Third-Party Services

We use the following third-party services:

• Google OAuth: For user authentication
• Amazon Web Services: For cloud hosting and storage
• Stripe: For payment processing

These services have their own privacy policies that govern their use of your data.

11. GDPR Compliance (European Users)

For users in the European Economic Area (EEA), we process your data based on the following legal bases:

• Contract: Processing necessary to provide the Service you requested.
• Legitimate Interest: Processing for fraud prevention and service improvement.
• Consent: Where you have given explicit consent.
• Legal Obligation: Processing required by law.

12. CCPA Compliance (California Users)

California residents have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, the right to delete your information, and the right to opt-out of the sale of personal information. We do not sell personal information.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date.

14. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us at:

Email: [email protected]