Legal
Privacy Policy
Checked · effective from this date
HI3D.cc is operated by NorthBright Labs LLC, a Wyoming limited liability company (“we”, “us”), which is responsible for the personal data described here. This policy explains what we collect, why, who processes it for us, how long we keep it and how to have it deleted. Contact: hello@hi3d.cc.
What we collect
- Account: your email address. If you sign in with Google, also the name and profile picture Google shares.
- Content: the photos and text you submit, the concept images you choose, and the models generated for you. Photos are re-encoded when you upload them, which removes their metadata (such as the location where a phone photo was taken).
- Billing: handled by Stripe. We receive your customer record, plan, invoices and any company name and tax ID you enter; we never receive your full card number.
- Usage: your credit balance and history, the runs you start and their results, and technical logs of requests and errors.
- Visits: page views, referring site, country and device type through Vercel Web Analytics, which is aggregated and uses no cookies, and page speed measurements. When a visit comes from an AI assistant such as ChatGPT, we record the assistant's name and the page it landed on, and nothing that identifies you.
How we use it
- To run the Service: generate, store and deliver your models, keep your credit balance, and send the emails you need (sign-in codes, “your model is ready”, receipts).
- To take payments and keep the records tax law requires.
- To prevent abuse, such as repeated free sign-ups or attacks on the Service.
- To understand, in aggregate, which pages people use and how long runs take, so we can improve them.
If you're in the EU or UK, our legal bases are: performing our contract with you (running the Service and billing), our legitimate interests (security, abuse prevention, aggregate measurement), and legal obligations (tax records).
We don't sell or share your personal data for advertising, we don't show ads, and we don't use your photos, prompts or models to train AI models.
Who processes it for us
| Provider | What for |
|---|---|
| Vercel | Hosting the website and running its server code |
| Supabase | Database and sign-in (accounts, credit balances, job records) |
| Cloudflare | Private file storage for your photos and models |
| Stripe | Payments, invoices, billing portal and tax details you enter at checkout |
| Resend | Sending sign-in codes and emails about your models and account |
| Our AI inference provider | Generating models and concept images from the photo or text you submit |
| Sign-in, only if you choose Continue with Google |
These providers process data on our behalf under their own security commitments. Most are based in the United States, so your data may be processed there; where the law requires, transfers are covered by standard contractual clauses.
How long we keep it
- Uploaded photos and chosen concept images: deleted 30 days after the run.
- Models and their files: until you delete them from your library, or delete your account.
- Shared models: if you turn on a model's share link, anyone with the link sees that model and its name (never your email, other models or files). The page isn't indexed by search engines, and turning the link off ends access straight away.
- Job records and credit history: while your account exists.
- When you delete your account (Account, then Delete account, or by asking us): your models, files and account data are deleted straight away. We keep a one-way fingerprint of your email address (a SHA-256 hash, which can't be turned back into the address) so the free sign-up credits can't be claimed twice, and the billing records below.
- Backups: an encrypted copy of our database (not of your files) is made every day and kept for 30 days in private storage, so we can recover from an outage. Anything you delete is gone from backups once the copies made before the deletion expire, within 30 days.
- Billing records: as long as tax law requires, usually up to seven years.
Your rights
You can delete any model from your library, or your whole account and everything in it, yourself at any time from the workspace. You can also ask for a copy of your data, a correction, a copy of your models, or for us to do the deleting: email hello@hi3d.cc from your account email and we'll respond within 30 days. Depending on where you live (for example the EU, UK or California), you may also have the right to object to or restrict processing and to complain to your data protection authority. We don't sell personal information as defined by California law.
Cookies and storage in your browser
We use only what the Service needs: cookies that keep you signed in, and your browser's session storage to remember a purchase you started while signing in. We don't use advertising or cross-site tracking cookies.
Security
Your photos and models are kept in private storage and delivered through links that expire after an hour. Connections are encrypted. Access to production systems is limited to the people who run the Service. No system is perfectly secure, and we'll tell affected users promptly if a breach puts their data at risk.
Children
The Service isn't for anyone under 16, and we don't knowingly collect their data. If you think a child has given us data, tell us and we'll delete it.
Changes
We'll update this policy when our practices change and show the date at the top; for material changes we'll also tell account holders by email. See also the terms of service.