Privacy Policy

1. Scope

This Privacy Policy explains how the img2threejs image-to-Three.js converter processes information. Agent generation requires sign-in and a paid credit purchase. Registration does not include free credits or free generations.

2. Information We Process

Depending on how you use the service, we may process:

• Uploaded content: one primary PNG or JPEG image and, if you choose, up to two additional reference images.
• Generation data: instructions created by the service, AI model responses, generated model specifications, TypeScript output, and quality or validation results.
• Agent mode waitlist: the email address and language preference you submit when you ask to be notified about Agent mode availability.
• Technical data: IP address, request time, browser and device information, requested URL, response status, security events, and limited error diagnostics.
• Communications: information you include when contacting the public support address.

Do not upload confidential information, government identifiers, financial or health records, biometric data, private images of another person, or other content that would cause harm if disclosed.

3. Agent Mode Waitlist

If you voluntarily join the Agent mode waitlist, we store the email address and language preference you submit. We use that information only to manage the waitlist and notify you when Agent mode is available. Submitting the form does not create an account or subscribe you to unrelated marketing.

To ask us to remove your waitlist record, contact support@img2threejs.com from the same email address. We retain the record until Agent mode notifications are complete, you request deletion, or the waitlist is discontinued.

4. How Image Generation Works

When you select Generate, uploaded images and related generation data are processed by img2threejs and the third-party AI providers needed to fulfill the request. We may change the specific technology and providers for availability, quality, security, or compliance reasons.

The images and generation data are processed to analyze visible structure, produce a procedural model specification, validate the result, and return a browser preview and downloadable code. The browser renders the returned specification; the AI provider does not receive code from your local projects unless you upload it as part of an image.

5. Purposes of Processing

We process information as needed to:

• Provide, validate, secure, and troubleshoot the requested conversion.
• Prevent abuse, enforce rate limits, and maintain service reliability.
• Respond to support, privacy, or legal requests.
• Comply with law and protect users, the service, and the public.

Where applicable law requires a legal basis, the basis may be performance of the service you request, our legitimate interests in operating and securing the service, compliance with legal obligations, or consent where specifically requested.

6. Storage and Retention

Submitted Agent references and results may be retained with account generation history. Images selected before submission may remain in this browser to preserve your work during sign-in and payment. This is not a promise of zero storage or immediate deletion.

Uploaded images, generation data, and necessary operational records may be processed or retained by us and our third-party providers for as long as reasonably needed to provide the service, maintain security, troubleshoot problems, prevent abuse, and meet legal obligations. Third-party providers may also process data under their contracts, configurations, and privacy policies.

We will update this policy with specific retention periods when the production hosting and provider configuration is finalized. Until then, do not upload material that requires a guaranteed deletion schedule.

7. Service Providers and Disclosure

Information may be disclosed only as needed to:

• Third-party AI providers needed to fulfill generation requests.
• Infrastructure providers that supply hosting, content delivery, analytics, security, logging, and monitoring.
• Professional advisers, authorities, or other parties when required by law or reasonably necessary to address fraud, abuse, security, or legal claims.
• A successor in a merger, acquisition, financing, reorganization, or sale, subject to appropriate notice and legal safeguards.

We do not sell uploaded images or personal information. We do not use uploaded images for advertising. Third-party providers process data under their own terms and privacy policies.

8. Analytics, Cookies, and Local Storage

We may use privacy-oriented third-party analytics services to understand aggregate traffic, usage, and site performance. These services may process limited request, browser, and device data to produce aggregated metrics.

The site uses cookies and browser storage for sign-in, security, preferences and restoring selected images. First-party operational events record flow steps, safe error categories, price/credit context and random operation identifiers, linked internally to your signed-in account when available. These event payloads do not contain image contents, filenames, card details, tokens or email addresses. Operational funnel events are eligible for deletion after 90 days and are removed in bounded cleanup batches during subsequent collection. Payment and account records have separate retention needs. Third-party analytics do not receive this internal account association. Where required, non-essential technologies require consent.

9. International Transfers

Third-party providers needed to operate the service may process information in countries other than yours. Where required, transfers will rely on an appropriate legal mechanism. Do not use the service if your content cannot lawfully be transferred to the providers needed to process it.

10. Security

We use measures such as HTTPS transport, server-side credential handling, file-type and size validation, structured-output validation, and rate limiting. No internet service or AI provider can guarantee absolute security. You remain responsible for removing sensitive information before uploading.

11. Your Choices and Rights

You may decide not to generate, remove a selected image before submission, or stop using the service. Depending on your location, you may have rights to request access, correction, deletion, restriction, portability, or objection, and to complain to a data-protection authority.

Send a request to the contact address below with enough detail to identify the relevant request, such as the approximate date, time, and technical context. Because the converter does not currently associate uploads with an account, we may be unable to locate or verify a particular request. We may ask for reasonable identity verification and may retain information when legally required.

12. Children

The service is not directed to children under 13 or under the minimum digital-consent age in their jurisdiction. A person under the age of legal majority should use the service only with permission and supervision from a parent or legal guardian. Do not upload images of children unless you have a lawful basis and all required permissions.

13. Changes

We may update this policy when the product, providers, retention configuration, or legal requirements change. The updated date identifies the current version. Material changes will be presented through the site or another reasonable notice method before they take effect where required.

14. Contact

Privacy and data-rights questions may be sent to support@img2threejs.com.

For other contact information, see the Support page.

Google Analytics tags and collection may be served through our domain using Google's tag gateway. Only Google's fixed collection destination is used. The gateway transiently forwards the trusted network address and region for Google's normal processing, without forwarding account cookies or authorization headers or logging these requests. Supported Do Not Track and Global Privacy Control signals stop gateway collection.