Privacy Policy

1. Scope

This Privacy Policy explains how FigureLab3D and its operator collect, use, disclose, retain, and protect personal information when you visit the site, upload an image, generate a 3D preview, place an order, receive a digital file or print, or contact support.

2. Information we collect

• Account and contact data: name, email address, login information, verification status, and private guest-order tokens.
• Customer content: uploaded photos and reference images, cutouts, prompts, instructions, support messages, and generated GLB, STL, 3MF, previews, and production files.
• Visual characteristics: face, body, pose, shape, and other visible features analyzed to create the requested model. We do not use these features to identify or authenticate a person.
• Order and payment data: products, options, prices, transaction status, shipping information, fulfillment status, and payment-provider identifiers. Full payment-card details are handled by the payment provider rather than stored by us.
• Technical and usage data: IP address, browser and device information, cookies, attribution data, page activity, error logs, and security events.

3. How we use information

We process information to provide previews and orders; analyze and transform images at your direction; prepare printable geometry; take payment; fulfill and ship products; provide private downloads and support; secure and troubleshoot the service; prevent fraud and prohibited use; maintain business and tax records; improve service reliability; and comply with legal obligations.

Where applicable, our legal bases include performing a contract, taking steps you request before a contract, your consent or direction, compliance with law, and legitimate interests such as security, support, and service improvement that do not override your rights.

5. When information is shared

We may share only the information reasonably necessary with providers that support hosting, storage, authentication, email, analytics, payment processing, fraud prevention, customer support, printing, fulfillment, and shipping. These providers process information for the contracted purpose and are subject to their own legal and security obligations.

We may also disclose information when you direct us to, during a business transaction, to protect the service or a person, to investigate abuse or rights complaints, or when required by valid legal process. We do not intentionally send uploaded images or generated files to advertising or website-analytics providers.

6. Customer-image retention

We minimize retention of customer-supplied images. The browser's original full-resolution upload is not retained by the preview workflow; processed reference images used by the generator follow these default schedules:

• Successful preview with no order: 7 days.
• Failed or canceled preview: 14 days.
• Unpaid or abandoned order: 14 days.
• Paid digital-model order: 90 days after payment.
• Paid physical-print order: through fulfillment, subject to a 180-day pre-shipping ceiling, then 90 days after shipping.

Cleanup runs daily, so deletion may occur within approximately 24 hours after a deadline. A documented support, chargeback, safety, or legal issue may extend retention for the period reasonably necessary to resolve it.

Generated models, production files, transaction records, and communications may be kept longer for downloads, fulfillment, accounting, fraud prevention, warranties, disputes, or legal compliance. Backups may retain encrypted copies until normal backup rotation completes. Contact us to request deletion; we will delete or de-identify information unless continued retention is required or permitted by law.

7. Your choices and rights

Depending on where you live, you may have rights to access, correct, delete, restrict, object to, or receive a portable copy of personal information, withdraw consent, or appeal a decision about a request. You may also opt out of marketing communications and manage non-essential cookies.

Submit a request to [email protected]. We may verify your identity and authority before acting. You may also complain to the privacy regulator where you live.

8. Security and private access

We use reasonable administrative, technical, and physical safeguards, including access controls, private order links, account authorization checks, transport encryption in production, limited administrator access, and image-deletion automation. No storage or transmission system can be guaranteed completely secure. Keep account credentials and guest-order links private and notify us promptly of suspected unauthorized access.

9. Cookies, analytics, and external services

We use necessary cookies for sessions, authentication, security, and order continuity. If analytics or advertising measurement is configured, providers such as Google may receive device, browser, page, and conversion information according to their policies. Payment and authentication providers, including Stripe or Google when enabled, process information under their own privacy notices.

10. Children and images of minors

The service is not directed to children under 13, and they may not create an account or submit personal information. An adult ordering a model depicting a minor must be the minor's parent or legal guardian or have verifiable permission from one. Contact us if you believe a child submitted information without authorization.

11. International processing and policy changes

Information may be processed where we or our service providers operate. Where required, we use appropriate safeguards for cross-border transfers. We may update this Policy as the service or law changes; the updated date and policy version will appear above, and material changes will be presented for acceptance when required.

12. Contact

For a privacy question or request, email [email protected]. Please do not send additional sensitive images or identity documents unless we specifically request them through a secure method.