Privacy Policy

1. Information We Collect

1.1 Account Information

When you register, we collect your email address, nickname, and password (stored as a secure hash). You may optionally provide a display name.

1.2 Uploaded Content

Images, video, and scan files you upload for 3D generation are stored on our cloud infrastructure (Amazon S3-compatible storage). These files are used solely to provide the 3D reconstruction service.

1.3 Usage Data

We automatically collect information about how you use the platform, including:

• Pages visited and features used
• 3D generation requests and settings
• Storage usage and credit transactions
• IP address, browser type, and device information
• Timestamps of account activity

1.4 Payment Information

We do not store your payment card details. All payment processing is handled by KG Inicis via PortOne. We receive only transaction confirmation and metadata (amount, credits purchased, payment ID).

2. How We Use Your Information

We use the information we collect to:

• Provide, operate, and improve the MyGen3D platform
• Process 3D generation requests and deliver results
• Manage your account, credits, and storage
• Process credit purchases and issue receipts
• Send transactional emails (account verification, payment receipts, generation status)
• Detect and prevent fraud, abuse, and security threats
• Respond to support requests and inquiries
• Comply with legal obligations

3. Information Sharing

3.1 Service Providers

We share data with trusted third-party providers who assist in operating the platform:

• KG Inicis / PortOne — payment processing
• Cloud storage provider — file storage (S3-compatible)
• GPU/CPU compute servers — 3D reconstruction processing
• Email service provider — transactional email delivery

3.2 Legal Requirements

We may disclose your information if required by law, court order, or to protect the rights and safety of our users or the public.

4. Cookies & Tracking

4.1 Authentication Cookies

We use a JWT-based authentication cookie (g3d_token) to keep you logged in. This cookie is HttpOnly and expires after 7 days.

4.2 Essential Cookies Only

We do not use advertising cookies or third-party tracking pixels. We use only essential cookies required for platform functionality.

4.3 Payment Cookies

Our payment provider (KG Inicis / PortOne) may set cookies during the payment process for fraud prevention and tracking. These are governed by the provider's own privacy policy.

5. Data Storage & Security

5.1 Storage Location

User data and uploaded files are stored on servers located in Europe (Finland) via Hetzner Cloud and associated S3-compatible storage.

5.2 Security Measures

• Passwords hashed using bcrypt
• All connections encrypted via HTTPS (TLS 1.2+)
• JWT tokens for stateless authentication
• Database access restricted to backend services only
• File uploads stored with private access controls

5.3 Data Retention

Your account data is retained as long as your account is active. Uploaded files and generated 3D models are retained for a minimum of 12 months after creation. You may delete your data at any time by contacting us or using the delete function in My Page.

6. Your Rights

Depending on your location, you may have the following rights:

• Access — request a copy of the personal data we hold about you
• Correction — request correction of inaccurate data
• Deletion — request deletion of your account and associated data
• Portability — receive your data in a structured, machine-readable format
• Objection — object to processing of your data in certain circumstances
• Withdrawal of consent — withdraw consent at any time where processing is based on consent

7. Children's Privacy

MyGen3D is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal data, please contact us immediately at mygen3d@gmail.com and we will delete the information.

8. Third-Party Services

Our platform integrates with the following third-party services. Each has its own privacy policy:

• PortOne — portone.io · KG Inicis — inicis.com
• Google Fonts — fonts loaded from Google's CDN; subject to Google's privacy policy
• jsDelivr CDN — JavaScript libraries served via CDN

We are not responsible for the privacy practices of third-party services. We encourage you to review their policies.

9. International Data Transfers

MyGen3D operates globally. Your data may be processed in countries outside your own, including the European Union. We ensure appropriate safeguards are in place for such transfers, in compliance with applicable data protection laws including GDPR.

Payment processing by KG Inicis / PortOne is performed under their respective compliance frameworks.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be notified via email or a prominent notice on the platform at least 14 days before taking effect. Continued use of the platform after changes constitutes acceptance of the updated policy.

11. Contact

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us: