Privacy Policy

1. Overview

General Information

The following gives a simple overview of what happens to your personal information when you visit our website or use the Frame3D API service. Personal data is all data with which you can be personally identified.

2. What we process (summary)

• Account data (e.g., email address, name) when you sign in.
• Usage and billing-related data (e.g., API key prefix, credit balance, usage entries).
• Technical data (e.g., IP address, request logs) required to operate and secure the service.
• Content you send to the API (3D model files or URLs) for processing.

3. Service operation and processors

Website and dashboard hosting

Our website (docs and account management) is hosted by a third-party hosting provider. During access, typical server logs may be processed (e.g., IP address, user agent, timestamps) to operate and secure the website.

API hosting (Google Cloud)

The Frame3D API backend is hosted on Google Cloud. Depending on your use of the API, Google Cloud may process technical logs (including IP addresses) necessary for operation, security, and abuse prevention. Legal basis: Art. 6 (1) (b) GDPR (performance of contract) and Art. 6 (1) (f) GDPR (legitimate interests in secure and reliable operation).

4. Account, authentication, payments

Registration and Login (Supabase Auth)

To provide accounts and Google sign-in, we use Supabase (Supabase Inc.). When you sign in using Google, we receive identifiers such as your email address and (if provided by Google) your name. Legal basis: Art. 6 (1) (b) GDPR (performance of contract).

API keys and usage/billing records

When you create API keys, we store data required to operate the service (e.g., key prefix and a secure representation of the key, plus timestamps). We also store usage entries and your credit balance to provide billing and abuse protection. Legal basis: Art. 6 (1) (b) GDPR and Art. 6 (1) (f) GDPR.

Payments (Stripe)

We use Stripe to process payments and manage billing. When you buy credits, payment information is processed by Stripe. We do not store full payment card data. Legal basis: Art. 6 (1) (b) GDPR.

Processing of User Files (3D Models)

As part of using the Frame3D API, you upload 3D models. These files are processed exclusively for the purpose of automated processing (rendering/conversion) on our servers (Google Cloud). Storage duration: Uploaded files and resulting output files are not intended to be stored permanently. They are deleted after processing or after a short technical retention period (e.g., caching or retries) where needed to operate the service. Legal basis: Art. 6 (1) (b) GDPR.

5. Data retention

We keep personal data only as long as necessary for the purposes described above, including legal retention obligations (e.g., for accounting) where applicable.

6. Your rights

Under the GDPR, you have rights including access, rectification, erasure, restriction of processing, data portability, and objection. You also have the right to lodge a complaint with a supervisory authority.