AIto3D.ai
Prompts, reference images, and 3D files are processed to generate, preview, convert, compress, measure, or export your requested output.
Privacy at AIto3D.ai
Privacy Policy
This Privacy Policy explains how AIto3D.ai collects, uses, discloses, protects, and retains information when you use our AI 3D model generator, browser-based 3D tools, website, account, subscription, and support services.
We generally receive billing status and transaction records, not your complete payment card number or card security code.
We do not sell personal information or use it for cross-context behavioral advertising. We honor legally required privacy preference signals.
Who this policy applies to
This Privacy Policy applies to AIto3D.ai websites, account and subscription features, AI-powered text-to-3D, image-to-3D and multiple-images-to-3D services, online 3D preview and export features, and related utilities such as 3D conversion, GLB compression, volume calculation, image rendering, and model-to-video conversion (collectively, the “Services”).
For data protection purposes, AIto3D.ai is the controller of personal information processed to operate the Services, manage accounts, communicate with users, maintain security, and comply with law. When a payment provider processes card or payment credentials under its own terms, that provider may act as an independent controller for that processing.
This policy does not apply to third-party websites, software, game engines, 3D marketplaces, AI services, payment providers, or other services that have their own privacy notices.
Important for uploaded content
Only upload prompts, images, photos, sketches, 3D files, textures, and other content that you have the right and authority to use. Avoid uploading government IDs, financial documents, medical records, precise location data, children’s personal information, or other sensitive personal data.
Information we collect
The information we collect depends on how you use AIto3D.ai. We collect information you provide, information generated when you use the Services, and limited information from service providers.
| Category | Examples | Why we need it |
|---|---|---|
| Account and contact information | Email address, account identifier, display name, password or authentication tokens, preferred language, country or region, and support contact details. | Create and secure your account, sign you in, manage credits and subscriptions, and respond to requests. |
| Prompts and uploaded references | Text prompts, negative prompts, uploaded images, photos, sketches, concept art, multiple reference views, textures, source 3D files, filenames, and generation settings. | Generate or process the 3D model or other output you request, troubleshoot failures, and provide previews and downloads. |
| Generated and processed assets | Generated meshes, textures, materials, previews, renders, converted files, compressed files, measurements, exports, generation status, and output metadata. | Deliver results, maintain your project history where available, allow downloads, and improve reliability. |
| Transaction and subscription information | Plan, credit balance, purchase amount, currency, payment status, invoice or transaction identifier, billing country, tax information, refund or cancellation status, and limited card details such as brand and last four digits when provided by the payment processor. | Complete purchases, manage recurring subscriptions, calculate taxes, prevent fraud, provide receipts, and resolve payment disputes. |
| Device, log, and usage information | IP address, browser and device type, operating system, referring page, pages viewed, timestamps, session identifiers, feature interactions, errors, performance logs, approximate location derived from IP, and security events. | Operate the website, diagnose problems, understand feature usage, protect accounts, detect abuse, and improve performance. |
| Cookies and similar technologies | Authentication cookies, security tokens, language and consent preferences, analytics identifiers, and other browser storage used by enabled features. | Keep you signed in, remember settings, measure performance, prevent fraud, and—where permitted—understand use of the Services. |
| Communications | Support emails, feedback, survey responses, dispute information, legal notices, and records of communications with us. | Provide customer support, investigate complaints, improve the Services, and maintain appropriate business records. |
Information from third parties
We may receive limited information from authentication providers, payment processors, fraud-prevention services, analytics providers, hosting providers, and AI or 3D processing providers. We may also receive information when another user refers you, shares a project with you, or contacts us about content or activity involving you.
How and why we use information
We use personal information only for specified business and legal purposes. Where the GDPR, UK GDPR, or similar law applies, our legal bases generally include performance of a contract, legitimate interests, consent, and compliance with legal obligations.
| Purpose | What we do | Typical legal basis |
|---|---|---|
| Provide the Services | Create accounts; accept prompts and files; generate, host, preview, convert, compress, measure, render, and export 3D assets; calculate and deduct credits; and restore credits for eligible failed generations. | Contract; steps requested before entering a contract. |
| Payments and subscriptions | Process purchases, renewals, tax, invoicing, cancellations, refunds, chargebacks, and account entitlements. | Contract; legal obligation; legitimate interests in payment administration and fraud prevention. |
| Security and abuse prevention | Authenticate users, detect compromised accounts, prevent card testing, spam, malware, prohibited content, scraping, denial-of-service activity, and other misuse. | Legitimate interests; legal obligation; protection of rights and safety. |
| Support and communications | Respond to requests, provide service notices, confirm transactions, handle complaints, and send account or policy updates. | Contract; legitimate interests; legal obligation. |
| Service analytics and improvement | Measure reliability, latency, conversion, feature use, error rates, and user experience; test improvements; and create aggregated or de-identified statistics. | Legitimate interests; consent where required for non-essential analytics. |
| Marketing | Send product news or offers where permitted, manage preferences, and measure communications. We do not use uploaded private 3D content for third-party advertising. | Consent where required; legitimate interests for limited existing-customer communications where law permits. |
| Legal and compliance | Comply with tax, accounting, consumer protection, sanctions, court, regulatory, and law-enforcement requirements; establish or defend legal claims. | Legal obligation; legitimate interests; public interest where applicable. |
How prompts, uploads, and 3D files are processed
To deliver an AI generation or 3D utility, we may transmit your prompt, uploaded reference, source model, selected settings, and related technical metadata to cloud infrastructure and specialized AI or 3D processing providers. These providers process the content to perform the task, return results, maintain security, and troubleshoot service errors.
- Generation inputs. Text prompts, images, photos, sketches, multiple views, and generation settings may be processed to infer geometry, textures, materials, depth, shape, and other requested attributes.
- 3D utility inputs. Uploaded GLB, glTF, OBJ, FBX, STL, PLY, USDZ, 3MF, textures, or related files may be processed to preview, convert, compress, measure, render, or export the file.
- Quality and safety review. Automated systems and, in limited cases, authorized personnel may inspect content or technical logs when necessary to investigate failed jobs, abuse, security incidents, legal complaints, or support requests.
- Private content. We do not make your prompts, uploads, or generated assets public unless you intentionally use a sharing or public-gallery feature that clearly indicates publication.
- Model training. We do not use private prompts, uploaded reference files, or generated assets to train our own general-purpose public AI models unless we first provide separate notice and obtain any consent required by law. Third-party AI providers process content under their own agreements with us and may have separate retention or abuse-monitoring terms.
Do not rely on AIto3D.ai as secure storage for your only copy.
Keep a separate copy of important prompts, source files, textures, and generated models. Outputs may be removed when an account closes, a plan changes, storage limits apply, or retention is no longer necessary.
Cookies, browser storage, and analytics
AIto3D.ai may use cookies, local storage, IndexedDB, pixels, and similar technologies. Strictly necessary technologies support authentication, account security, credit calculations, language selection, payment flow, upload preparation, session continuity, and fraud prevention.
We may also use analytics or performance technologies to understand page use and improve reliability. Where consent is required, non-essential technologies are disabled until you make a choice through the cookie or privacy controls. You may change browser settings to block or delete cookies, but doing so can prevent sign-in, uploads, downloads, purchases, or other features from working correctly.
We do not use personal information for cross-context behavioral advertising. Where applicable law requires it, we recognize supported browser-based privacy preference signals, including Global Privacy Control, as a request to opt out of sale or sharing.
How we disclose information
We do not sell personal information. We disclose information only as needed for the purposes described in this policy, including to the following categories of recipients:
- Cloud, storage, CDN, and security providers that host the website, files, databases, logs, and generated assets or protect the Services from attacks.
- AI and 3D processing providers that perform generation, texture, geometry, conversion, compression, rendering, measurement, or related computing tasks.
- Authentication, email, analytics, and customer-support providers that help us sign users in, communicate, measure performance, and respond to requests.
- Payment, tax, fraud-prevention, and financial providers that process transactions, subscriptions, refunds, taxes, and disputes.
- Professional advisers such as lawyers, auditors, accountants, insurers, and consultants under appropriate confidentiality duties.
- Authorities and other parties for legal reasons where disclosure is required by law or reasonably necessary to protect users, the public, AIto3D.ai, or another person’s rights, property, safety, or security.
- Corporate transaction parties in connection with a financing, merger, acquisition, restructuring, sale of assets, or similar event, subject to appropriate safeguards.
- Other recipients at your direction, such as when you publish, share, export, or send a model to an integrated third-party service.
We may use and disclose aggregated or de-identified information that cannot reasonably be linked to an individual, and we take reasonable steps not to re-identify it.
Payments, subscriptions, and fraud prevention
Purchases and recurring subscriptions are processed by third-party payment providers. Payment forms may be hosted or secured by those providers. AIto3D.ai generally does not receive or store your complete card number, bank account credentials, or card security code.
We may receive transaction metadata such as your plan, amount, currency, billing country, payment status, invoice or transaction identifier, tax status, payment method type, and limited payment method details. We use this information to activate credits or paid features, manage renewals and cancellations, send receipts, handle refunds and disputes, calculate tax, prevent fraud, and maintain legally required records.
Payment providers may collect and use information under their own privacy policies, including for identity verification, sanctions screening, risk analysis, fraud prevention, regulatory compliance, and payment network requirements. Your bank, card network, digital wallet, or payment method may also process information independently.
How long we keep information
We retain information only for as long as reasonably necessary for the purpose for which it was collected, including to provide the Services, maintain security and continuity, resolve disputes, enforce agreements, and comply with legal, tax, accounting, and payment obligations.
- Account information is generally retained while your account is active and for a limited period after closure for security, dispute, backup, and legal purposes.
- Prompts, uploads, generated assets, and processed 3D files may be retained while available in your account or while needed to complete a job, permit download, investigate a failure, address abuse, or meet contractual and legal requirements. Temporary processing copies may be deleted sooner.
- Transaction, invoice, tax, refund, and dispute records may be kept for the period required by financial, tax, accounting, anti-fraud, and payment network rules.
- Security logs and technical records are retained for periods appropriate to detect attacks, investigate incidents, protect accounts, and maintain service reliability.
- Support and legal records are retained while a request, complaint, or claim is open and for a reasonable period afterward.
Retention periods may be extended when data is subject to a legal hold, active dispute, fraud investigation, safety issue, or mandatory preservation request. When retention is no longer necessary, we delete, anonymize, or securely isolate the information in accordance with our operational processes.
International data transfers
AIto3D.ai is available internationally, and our service providers may process information in the United States and other countries that may have different data protection laws from your country. This is often necessary to provide global cloud hosting, AI generation, 3D processing, support, security, and payment services.
Where required for transfers from the European Economic Area, United Kingdom, or Switzerland, we use recognized legal mechanisms such as adequacy decisions, contractual safeguards—including applicable Standard Contractual Clauses—or other lawful transfer mechanisms. You may contact us for information about safeguards relevant to your personal data.
Your privacy rights and choices
Depending on your location and subject to legal exceptions, you may have rights concerning your personal information. We may need to verify your identity before completing a request. You may use an authorized agent where applicable, but we may request proof of authorization and direct verification.
Access and knowRequest information about the categories, sources, purposes, recipients, and specific pieces of personal information we process.
CorrectAsk us to correct inaccurate personal information associated with your account.
DeleteAsk us to delete personal information, subject to legal, security, transactional, and other permitted exceptions.
PortabilityReceive certain information in a structured, commonly used, machine-readable format where required.
Object or restrictObject to or request restriction of certain processing based on legitimate interests or direct marketing.
Withdraw consentWithdraw consent at any time where consent is the legal basis, without affecting earlier lawful processing.
Opt outOpt out of sale, targeted advertising, or certain profiling where those rights apply. AIto3D.ai does not currently sell personal information or use it for cross-context behavioral advertising.
Appeal and complainAppeal a denied request where applicable and complain to your local data protection or privacy authority.
To exercise a privacy right, email [email protected] with the subject “Privacy Request.” Please describe your request and the account email involved. We will respond within the period required by applicable law.
We will not discriminate against you for exercising a privacy right. However, deleting or restricting information necessary to provide the Services may prevent us from maintaining your account, projects, downloads, subscription, or credit balance.
California and other U.S. state privacy notices
This section supplements the rest of the Privacy Policy for residents of California and other U.S. states with comprehensive privacy laws. The categories of personal information collected, sources, purposes, and recipients are described in Sections 2, 3, and 6 above.
Sale, sharing, targeted advertising, and sensitive information
AIto3D.ai does not sell personal information for money and does not share personal information for cross-context behavioral advertising. We do not use sensitive personal information to infer characteristics about you. If our practices materially change, we will update this notice and provide any legally required opt-out controls before the new practice begins.
California categories
Depending on your use, we may collect identifiers; customer records information; commercial information; internet or electronic network activity; approximate geolocation; audio, electronic, visual, or similar information contained in user-submitted content; professional information you choose to include; and inferences related to service preferences or fraud risk. We do not intentionally collect protected classification characteristics, precise geolocation, government identifiers, account credentials combined with passwords, health data, or biometric identifiers for identification purposes.
Global Privacy Control
Where required, we treat a recognized Global Privacy Control signal as a request to opt out of sale or sharing for the browser or device sending the signal. Because we do not currently sell or share personal information for cross-context behavioral advertising, the signal does not change our current practices.
California “Shine the Light”
We do not disclose personal information to third parties for their own direct marketing purposes as described by California’s “Shine the Light” law.
Children’s privacy
The Services are designed for a general and professional audience and are not directed to children under 13. We do not knowingly collect personal information from children under 13. In the EEA, United Kingdom, or other regions with a higher digital-consent age, a minor may use the Services only where permitted by law and with any required consent from a parent or legal guardian.
If you believe a child has provided personal information to AIto3D.ai without appropriate authorization, contact us at [email protected]. We will review the report and take appropriate action, which may include deleting the information and closing the account.
How we protect information
We use administrative, technical, and organizational measures designed to protect information against unauthorized access, alteration, disclosure, loss, misuse, or destruction. Measures may include encrypted transmission, access controls, authentication safeguards, logging, monitoring, rate limits, vendor review, backups, and incident response procedures.
No internet service, cloud platform, AI provider, payment system, or storage method can guarantee absolute security. You are responsible for maintaining the confidentiality of your login credentials, using a unique password, securing your email account, and notifying us promptly if you suspect unauthorized access.
Changes to this Privacy Policy
We may update this Privacy Policy to reflect changes in the Services, vendors, technology, laws, or business practices. We will post the revised policy at this URL and update the “Last updated” date. When changes are material, we may provide additional notice through the Services, account email, or another appropriate method before the change takes effect where required by law.
Contact AIto3D.ai
Questions, complaints, or privacy requests
Contact us about this Privacy Policy, your personal information, an account deletion request, an uploaded-content concern, or a privacy complaint. Please include enough information for us to understand the request, but do not send passwords, complete payment card numbers, government IDs, or other highly sensitive information by email.
Residents of the EEA, United Kingdom, or Switzerland may also lodge a complaint with the data protection authority in the country where they live, work, or believe a violation occurred. We encourage you to contact us first so we can try to resolve the concern directly.