Privacy Policy

Last updated: 4 August 2026 · Data controller: [COMPANY]

1. What we collect

• Account — name, email address and profile picture, as provided by Google or GitHub when you sign in. We never receive your password.
• Content — the images you upload or the descriptions you type, and the 3D models produced from them.
• Usage — generation records (time, settings, result size) used for quotas and billing.

We do not use tracking cookies or third-party analytics. The only cookie we set is the session cookie that keeps you signed in.

2. Why we process it

• To run the service you asked for — performance of a contract.
• To enforce quotas and prevent abuse — legitimate interest.
• To bill paid plans and keep tax records — legal obligation.

We do not sell your data and we do not use your content to train models.

3. Who else processes it

• Vercel — application hosting.
• Neon — database (account and generation records).
• Cloudflare R2 — file storage for your images and models.
• Cloudflare Workers AI — text-to-image step, only if you use it.
• RunPod — GPU compute; your source image is sent there to produce the model.
• Paddle — payments and invoicing as merchant of record; they receive your billing details, we do not store card data.

Some of these providers operate outside your country, including in the United States. Transfers rely on the providers' standard contractual clauses.

4. How long we keep it

• Models and files — until you delete them. Deleting a model removes its files from storage.
• Generation records — kept after deletion, without the files, for quota accounting and billing history.
• Account — until you ask us to delete it. Contact us and we will remove your account and remaining files.

5. Your rights

Depending on where you live you may have the right to access, correct, export or erase your personal data, and to object to processing. Write to us at support@polygrium.com and we will respond within the period the law requires. You may also complain to your local data protection authority.

6. Security

Traffic is encrypted in transit. Model files are served through short-lived signed links rather than public URLs, so a link cannot be shared indefinitely. No system is perfectly secure; we do not claim otherwise.

7. Children

The service is not intended for children under 16.

8. Contact

support@polygrium.com