01 Introduction
3DParty ("we", "us", or "our") operates the 3DParty platform, including our website, web application, and related services (collectively, the "Service"). We are committed to protecting your personal information and your right to privacy.
This Privacy Policy explains what information we collect, why we collect it, how we use and share it, and the choices you have regarding your data when you use our Service.
By accessing or using our Service, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree, please discontinue use of the Service.
02 Information We Collect
Information you provide to us
- Account information: name, email address, username, and password when you register.
- Profile data: optional biography, avatar image, and social links.
- Content you upload: 3D model files (GLB, OBJ, FBX), reference images used for AI generation, and associated metadata such as names, tags, and descriptions.
- Payment information: billing name and address. Card details are processed by our payment processor (Stripe) and are never stored on our servers.
- Communications: messages you send to our support team or community channels.
Information collected automatically
- Log data: IP address, browser type and version, operating system, referring URL, pages visited, and timestamps.
- Usage data: features used, generation prompts submitted, models viewed, and session duration.
- Device data: device type, screen resolution, and WebGL/GPU capability flags (used to optimise the 3D rendering experience).
- Cookies and similar technologies: see Section 5.
AI Generation Data
When you use our AI generation tools, we additionally collect and process:
- Text prompts: the text descriptions you submit to generate 3D models.
- Reference images: images you upload as input for image-to-3D generation.
- Generation outputs: the resulting 3D model files, preview images, and associated metadata.
- Generation parameters: settings such as style, quality level, and format preferences.
Your prompts and reference images are processed by our AI pipeline to produce outputs and are retained only as necessary to provide the Service. We do not use your prompts or reference images to train third-party AI models without your consent.
03 How We Use Your Data
We use the information we collect to:
- Provide, maintain, and improve the Service and its 3D generation and editing features.
- Process AI model generation requests and store the resulting assets in your account.
- Process payments and manage your subscription plan.
- Send transactional emails (e.g. generation completed, receipt, password reset).
- Send periodic product announcements and updates (you can opt out at any time).
- Detect and prevent fraudulent or unauthorised activity.
- Moderate content for compliance with our Acceptable Use Policy and applicable law, including automated and manual review of prompts, reference images, and generated outputs.
- Comply with applicable laws and legal obligations.
- Analyse aggregated, anonymised usage patterns to improve our AI models and user experience.
We process your data on the legal bases of: contract performance (to provide the Service), legitimate interests (fraud prevention, content moderation, analytics), and consent (marketing communications).
04 Data Sharing
We do not sell, rent, or trade your personal information. We may share your data with:
- Service providers: Supabase (database and authentication), Cloudflare R2 (file and asset storage), Stripe (payments), Vercel (hosting), and analytics services — all bound by data processing agreements.
- AI pipeline providers: prompts and reference images may be processed by third-party AI inference APIs (including Tencent Hunyuan and other model providers). We select providers that offer contractual privacy protections. Your prompts and images are sent to these providers solely to generate your requested output and are not used to train their models.
- Law enforcement: when required by a valid legal process, court order, or applicable law, including to respond to DMCA takedown notices, copyright infringement claims, and reports of illegal content.
- Business transfers: in connection with a merger, acquisition, or sale of assets, your data may be transferred subject to the same privacy protections.
Public gallery content (models you mark as public) is visible to all visitors and may appear in search results.
05 Cookies & Tracking
We use the following categories of cookies and local storage:
- Strictly necessary: authentication tokens and session state required for the Service to function.
- Performance: anonymised analytics to understand page load times and feature usage.
- Preference: user interface settings such as theme and viewport state.
You can manage cookie preferences through our Cookie Policy page or your browser settings. Disabling strictly necessary cookies will impair Service functionality.
06 Data Retention
We retain your personal data for as long as your account is active or as necessary to provide the Service. Specifically:
- Account data: kept until you delete your account, plus 30 days to allow recovery.
- 3D assets and generation history: retained per your plan's storage quota; purged 60 days after account deletion.
- Payment records: retained for 7 years as required by financial regulations.
- Log data: retained for up to 90 days for security and debugging purposes.
07 Your Rights
Depending on your location, you may have the following rights:
- Access: request a copy of the personal data we hold about you.
- Correction: ask us to correct inaccurate or incomplete data.
- Deletion: request that we delete your personal data ("right to be forgotten").
- Portability: receive your data in a structured, machine-readable format.
- Objection / Restriction: object to or restrict certain processing activities.
- Withdraw consent: where processing is based on consent, withdraw it at any time.
To exercise any of these rights, email us at privacy@3dparty.ai. We will respond within 30 days.
GDPR & CCPA Specifics
GDPR (EU/EEA residents): You have the right to lodge a complaint with a supervisory authority in your country. Our legal basis for processing includes: (a) performance of contract, (b) legitimate interests, (c) consent, and (d) legal obligation. We conduct Data Protection Impact Assessments for high-risk processing activities.
CCPA (California residents): You have the right to know what personal information we collect, to request deletion, to opt out of the sale of your data (we do not sell your data), and to not be discriminated against for exercising your rights. We collect the categories of information listed in Section 2. For CCPA purposes: we do not sell personal information; we may share data with service providers for business purposes as described in Section 4.
08 Data Security
We implement industry-standard security measures including TLS encryption in transit, AES-256 encryption at rest, access controls, and regular security reviews. However, no method of transmission or storage is 100% secure. You are responsible for keeping your account credentials confidential.
Automated Decision-Making & Content Moderation
We use automated systems to moderate content and detect policy violations. This includes:
- Safety filters: automated screening of prompts and reference images for prohibited content before AI generation.
- Content moderation: automated and manual review of generated outputs and uploaded models for compliance with our Acceptable Use Policy.
- Fraud detection: automated monitoring for suspicious account activity, credit abuse, or unauthorised access.
Automated decisions that significantly affect you (such as account suspension) are subject to human review upon request. You may appeal any moderation decision by contacting safety@3dparty.ai.
Data Breach Notification
In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify you and the relevant supervisory authority within 72 hours of becoming aware of the breach, in accordance with applicable data protection laws.
09 Children's Privacy
Our Service is not directed at children under 13 (or 16 in the EU). We do not knowingly collect personal data from children. If you believe a child has provided us personal information, contact us immediately and we will delete it.
10 International Transfers
Your data may be transferred to and processed in countries other than your country of residence. Where we transfer data outside the EEA, we use appropriate safeguards (Standard Contractual Clauses, adequacy decisions, or other lawful mechanisms).
11 Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes via email or a prominent in-app notice at least 14 days before the change takes effect. Your continued use of the Service after changes constitutes acceptance of the updated policy.
12 Contact
For privacy-related questions or to exercise your rights, contact us at: