Privacy Policy

Introduction

Automatic3D ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our text-to-3D generation service at automatic3d.com (the "Service").

By using Automatic3D, you agree to the collection and use of information in accordance with this policy. If you do not agree with our practices, please do not use the Service.

Information We Collect

Account Information

When you create an account, we collect:

• Email address
• Name (if provided via Google OAuth)
• Profile picture (if provided via Google OAuth)
• Google account identifier (for authentication)

Usage Data

When you use our service, we collect:

• Text prompts you submit for 3D model generation
• Reference images you upload for image-to-3D generation
• Generated view images (temporarily during processing)
• Generated 3D models (stored according to your plan's retention period)
• Thumbnail images of your models
• Generation timestamps and usage counts

Technical Data

We automatically collect certain technical information when you visit our site:

• IP address (used for security, rate limiting, and fraud prevention)
• Browser type and version
• Device type and operating system
• Pages visited and navigation patterns
• Referring URLs and traffic sources
• Timestamps of visits and interactions

IP addresses are also stored in referral records for fraud prevention purposes.

Payment Information

Payment processing is handled by Stripe. We do not store your credit card details. We receive from Stripe:

• Stripe customer ID
• Billing history and invoice records
• Payment method type (e.g., "Visa ending in 4242")

Communications

If you contact us via our contact form or email, we collect the content of your message, your email address, and any other information you choose to provide. We use this information to respond to your inquiry and improve our Service.

How We Use Your Information

We use the collected information to:

• Provide and maintain our 3D generation service
• Process your text prompts and reference images to generate 3D models
• Store your models for your plan's retention period
• Process payments and track usage for billing
• Send transactional emails (magic links, receipts, account notifications)
• Send marketing communications (with your consent)
• Improve our AI models and service quality
• Detect and prevent fraud, abuse, and security incidents
• Comply with legal obligations
• Analyze usage trends and optimize user experience
• Measure advertising effectiveness

AI-Generated Content

How Generation Works

When you submit a text prompt or upload a reference image, your input is processed by our AI infrastructure partners to generate concept images and 3D models. Your prompts, reference images, and generated view images are transmitted to these partners solely for the purpose of generating your requested content.

Content Ownership

You retain ownership of the 3D models generated from your prompts on paid tiers. Free tier content is licensed under CC BY 4.0 as described in our Terms of Service. We make no claims regarding intellectual property clearance of AI-generated content. See our Terms of Service for full details on your responsibilities.

Service Improvement

Your prompts and generated content may be used to improve our service quality and AI systems. Specifically, we may use this data for:

• Debugging technical issues and improving reliability
• Analyzing generation quality and identifying areas for improvement
• Ensuring compliance with our Acceptable Use policy
• Providing customer support

What we do NOT do:

• We do not sell your prompts or generated content to third parties
• We do not use your paid tier content in marketing without your explicit consent
• We do not share your prompts or models with other users (except free tier content that may appear in our public gallery)
• We do not use your content to train third-party AI models

Free Tier Note

Free tier model previews may be temporarily stored for up to 7 days for quality assurance and abuse prevention. Featured models selected for our public gallery may be retained indefinitely. Free tier content is licensed under CC BY 4.0 — see our Terms of Service for details.

Opt Out

If you wish to opt out of having your data used for service improvement, please contact us at privacy@automatic3d.com. Note that we reserve the right to review content for security, compliance, and support purposes regardless of opt-out status.

Third-Party Services

We use the following third-party services to provide our product:

Data Retention

We retain different types of data for different periods:

• Account data: Retained until you delete your account
• Free tier models: Up to 7 days (temporary storage for quality assurance)
• Creator tier models: 30 days, then automatically deleted
• Pro tier models: 90 days, then automatically deleted
• Prompts: Stored with model records for your generation history
• Billing records: 7 years (for tax and legal compliance)
• Email logs: 1 year
• Analytics data: 14 months (Google Analytics default)
• Support communications: 3 years
• Security logs: 90 days

Cookies & Tracking Technologies

Essential Cookies

We use essential cookies for authentication (storing your session token) and cookie consent preferences. These cookies are necessary for the site to function and cannot be disabled.

Analytics Cookies (Optional)

We use Google Analytics to understand how visitors use our site. This helps us improve our service. Google Analytics collects data about:

• Page views and navigation patterns
• Traffic sources and referrers
• Device type, browser, and screen resolution
• General location (country/city level)
• Time spent on pages

Analytics cookies are only loaded if you accept them in our cookie banner. You can also opt out using the Google Analytics Opt-out Browser Add-on.

Advertising Cookies (Optional)

We use Meta Pixel (Facebook Pixel) for advertising and retargeting purposes. This service tracks your activity on our site and uses it to:

• Show you relevant ads on Facebook and Instagram
• Measure the effectiveness of our advertising campaigns
• Build custom audiences for retargeting
• Track conversions and user actions (signups, purchases)

Data Collected by Meta Pixel: Page views, button clicks, form submissions, device information, IP address, browser type, and browsing behavior on our site.

Third Party: Meta Platforms, Inc. See Meta's Privacy Policy for how they use this data.

Opt Out: You can disable Meta Pixel tracking by:

• Rejecting advertising cookies in our cookie banner
• Visiting our Do Not Sell or Share page
• Managing your preferences in Facebook Ad Settings: facebook.com/ads/preferences
• Using browser privacy settings or ad blockers

Managing Your Preferences

You can change your cookie preferences at any time by clearing your browser cookies and revisiting our site, which will show the cookie banner again. Essential cookies cannot be disabled as they are required for the site to function.

Do Not Track

Some browsers send a "Do Not Track" (DNT) signal. There is no industry standard for how websites should respond to DNT signals, so we do not currently respond to them. However, you can control tracking through our cookie consent banner and your browser settings.

Your Rights

Depending on your location, you may have the right to:

• Access: Request a copy of your personal data
• Correction: Update inaccurate information
• Deletion: Delete your account and associated data
• Export: Download your models before they expire
• Objection: Object to certain processing activities
• Restriction: Request restricted processing of your data
• Portability: Receive your data in a portable format
• Withdraw Consent: Withdraw consent for optional processing at any time

To exercise these rights, contact us at privacy@automatic3d.com. We will respond within 30 days (or sooner where required by applicable law).

For EEA, UK, and Swiss Users

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, the following additional provisions apply under the General Data Protection Regulation (GDPR) and equivalent legislation:

Data Controller

Automatic3D is the data controller for your personal data. You can contact our data controller at privacy@automatic3d.com.

Legal Basis for Processing

We process your personal data under the following legal bases:

• Contract Performance: Processing necessary to provide the Service you requested (account management, generating 3D models, processing payments)
• Legitimate Interests: Service improvement, fraud prevention, security, and analytics (where not overridden by your rights)
• Consent: Optional cookies (analytics, advertising), marketing communications
• Legal Obligation: Tax record keeping, responding to legal requests

Your GDPR Rights

In addition to the rights listed above, you have the right to:

• Lodge a complaint with your local data protection authority
• Object to processing based on legitimate interests
• Not be subject to decisions based solely on automated processing that produce legal effects

International Data Transfers

Your data is transferred to and processed in the United States. We rely on Standard Contractual Clauses (SCCs) approved by the European Commission, and/or other appropriate safeguards, to ensure adequate protection of your data when transferred outside the EEA/UK/Switzerland.

Data Protection Officer

For GDPR-related inquiries, you can reach our data protection point of contact at privacy@automatic3d.com.

Retention

We retain your personal data only as long as necessary for the purposes described in the Data Retention section above, or as required by law. When data is no longer needed, it is securely deleted or anonymized.

For California Residents

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):

Categories of Personal Information Collected

• Identifiers: Name, email address, IP address, Google account ID
• Commercial Information: Purchase history, subscription tier, billing records
• Internet Activity: Browsing history on our site, search queries, interactions
• Geolocation: General location derived from IP address (country/city level)
• Professional Information: Only if voluntarily provided
• Inferences: Usage patterns, preferences derived from activity

Sources of Personal Information

• Directly from you (account creation, prompts, reference images, contact forms)
• Automatically collected (technical data, usage logs)
• Third-party services (Google OAuth, Stripe)

Business Purposes for Collection

• Providing and maintaining the Service
• Processing payments and managing subscriptions
• Fraud prevention and security
• Service improvement and analytics
• Advertising and marketing
• Legal compliance

Third Parties We Share Data With

• AI processing partners (for generation)
• Stripe (for payments)
• AWS (for storage)
• Google (for authentication and analytics)
• Meta (for advertising, when consent is given)
• Resend (for email delivery)
• Sentry (for error monitoring)
• Cloudflare (for CAPTCHA verification)

Cross-Context Behavioral Advertising

When you consent to advertising cookies, we share certain data with Meta through the Meta Pixel. Under the CCPA, this may constitute a "sale" or "share" of personal information for cross-context behavioral advertising purposes. The categories of personal information shared include: identifiers, internet activity, and device information. You have the right to opt out of this sharing. Visit our Do Not Sell or Share My Personal Information page to exercise this right.

Your California Rights

• Right to Know: Request information about the categories and specific pieces of personal information we have collected about you
• Right to Delete: Request deletion of your personal information
• Right to Correct: Request correction of inaccurate personal information
• Right to Opt Out: Opt out of the "sale" or "sharing" of your personal information
• Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights
• Right to Limit: Limit the use of sensitive personal information (if applicable)

How to Exercise Your Rights

To exercise your California privacy rights, you may:

• Email us at privacy@automatic3d.com
• Visit our Do Not Sell or Share page to opt out of advertising data sharing
• Delete your account through your account settings

We will verify your identity before processing your request. We will respond within 45 days, with the possibility of a 45-day extension for complex requests.

Authorized Agents

You may designate an authorized agent to submit requests on your behalf. We may require the agent to provide proof of authorization (such as a signed written permission or power of attorney), and we may still verify your identity directly.

Sensitive Personal Information

We do not collect categories of information defined as "sensitive personal information" under the CCPA, except for account login credentials (email and authentication tokens), which are used only for providing the Service.

Security

We implement appropriate technical and organizational security measures to protect your data:

• All data transmitted over TLS/HTTPS encryption
• Sensitive data encrypted at rest
• Passwords are never stored (we use OAuth and magic links for authentication)
• API keys and secrets stored securely using environment-based secret management
• Role-based access controls for internal systems
• Cloud infrastructure with enterprise-grade security (AWS)
• Regular security audits and updates

Data Breach Notification

In the event of a data breach that affects your personal information, we will:

• Notify affected users via email within 72 hours of becoming aware of the breach (or as required by applicable law)
• Notify relevant supervisory authorities where required by law
• Provide details about the nature of the breach, the data affected, and steps we are taking to address it
• Recommend actions you can take to protect yourself

Children's Privacy

Our service is not intended for children under 13 (or under 16 in certain EEA countries). We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at privacy@automatic3d.com and we will promptly delete such information.

Account Deletion

You can delete your account at any time through your account settings page. When you delete your account:

• Your account profile and personal information are permanently deleted
• Your generated models and associated files are deleted from our storage
• Your generation history and prompts are deleted
• Active subscriptions are cancelled

Account deletion is processed within 30 days. During this period, your account is deactivated and inaccessible.

What is retained after deletion:

• Billing records are retained for 7 years for tax and legal compliance
• Anonymized analytics data may be retained
• Certain anonymized fraud prevention records (with personal identifiers removed) may be retained for up to 1 year after account deletion
• Free tier content previously selected for our public gallery may remain published

You can also request account deletion by emailing support@automatic3d.com.

Marketing Communications

During subscription setup, you may be presented with an option to receive marketing communications. This defaults to opted-in. You can change this preference at any time in your account settings or by clicking unsubscribe in any marketing email.

Marketing emails may include product updates, new features, tips, promotions, and other information about our Service. We send marketing emails through Resend.

Note: Even if you opt out of marketing emails, we will still send you transactional emails necessary for the operation of your account (e.g., magic links, payment receipts, account notifications, and security alerts).

Changes to This Policy

We may update this Privacy Policy from time to time. For material changes, we will provide at least 14 days' notice before the changes take effect, via email or prominent notice on the Service.

We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. Your continued use of the Service after changes take effect constitutes acceptance of the updated policy.