Privacy Policy

1. Information we collect

We collect only what we need to run the Service. This may include:

• Account details: such as your name, email address, and company name when you register or update your profile.
• Support inquiries: information you send when you contact us (for example via our support form or email), including your message content and contact details.
• Uploaded content: 3D model files (e.g. GLB), related assets, thumbnails we generate for your dashboard, and metadata associated with your projects (such as titles, timestamps, and sharing settings).
• Technical data: limited logs and diagnostics needed to operate and secure the Service (for example IP address, browser type, and error logs), where applicable.

2. How we use your data

We process personal data on lawful bases under UK GDPR (such as performance of a contract, legitimate interests in running a secure B2B platform, and compliance with law). We use data to:

• Provide the Service: authenticate you, host and display your models, generate thumbnails, and enable features you choose (including guest links).
• Process payments: subscription and billing are handled by our payment provider (Stripe). We receive limited billing-related information from Stripe as needed to manage your subscription; we do not store full card details on our own servers.
• Host data and applications: account and project data are stored and processed using infrastructure including Supabase (and associated cloud providers) for database, authentication, and storage as described in our architecture.
• Communicate with you: respond to support requests, send service-related notices, and (where permitted) information about the Service.
• Security and improvement: monitor abuse, debug issues, and improve reliability and performance of the platform.

3. Cookies & tracking

We use essential cookies and similar technologies required for the Service to function, including authentication and session management (for example to keep you signed in securely). We do not use non-essential tracking cookies for advertising on the core authenticated product experience; if we introduce optional analytics or marketing cookies in future, we will update this policy and, where required, seek your consent before setting them.

4. Data sharing

We never sell your personal data. We only share data with third parties where necessary to provide the Service, and under appropriate safeguards:

• Infrastructure and service providers (for example cloud hosting, database, email delivery, and payment processing) who process data on our instructions.
• Professional advisers or authorities where required by law or to protect our rights and users' safety.

Where data is transferred outside the UK, we ensure appropriate safeguards (such as UK adequacy decisions or standard contractual clauses) as required by applicable law.

5. Your rights (UK GDPR)

Subject to applicable law, you have the right to:

• Access the personal data we hold about you.
• Rectify inaccurate or incomplete data.
• Erase your data in certain circumstances ("right to be forgotten").
• Restrict or object to processing in certain situations.
• Data portability where processing is based on consent or contract and is carried out by automated means.
• Lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.

To exercise these rights, contact us using the details below. We may need to verify your identity before fulfilling a request.

6. Retention

We retain personal data only for as long as necessary to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements. Project files and account data may be deleted when you close your account or when no longer needed, subject to backup and legal retention requirements.

7. Contact us

For privacy-related questions or requests (including access or deletion), contact us at support@cbuilt7.com.