Privacy policy

The controller of your data is 3DLiving.app. You can write to it at 3dlivingapp@gmail.com. The owner's details are at the end of the legal notice.

This policy explains what personal data we process when you use 3DLiving.app, why, on what legal basis, who we share it with and how you can exercise your rights.

• Account: your email address and your password (encrypted). If you log in with Google, we receive your email address and your name from Google.
• Profile: name, phone number and language, if you choose to add them to your account.
• Projects: the designs you save (vehicle, measurements, items placed and budget).
• Community: your public alias, which is created automatically (it is not taken from your email or name) and you can change in My account, and for each public project its name, an image of the design, the design with its budget and the date. Anyone can see them, including people without an account. Your email, name and contact details are not published. The "likes" you give are linked to your account; the Community only shows how many each project has. Your comments are published with your alias on the project page until you delete them or the team removes them. If you report content, we keep the report (what, the reason and your account) to review it; it is not shown to anyone else.
• Subscription: your plan and its status. Payments are handled by Stripe: we do not receive or store your card details.
• Poty (AI assistant): the questions you ask it, the project data sent to it to answer you and the assistant's monthly usage.
• Modelling requests: what you ask us to add to the catalogue (what it is, brand, link, measurements, where it goes and your comment), together with your plan, the project and vehicle you had open and the language of the app. The item we model is added to the catalogue for all users; your data is not published.
• Forms: in the contact form, your name, email address, subject and message; in the professionals form, your name, email address, profile type and area.
• Workshop (Pro plan): the details of your workshop that you fill in under “My workshop” (trade name, company name, tax ID, address, phone, email, website and logo), your prices and your own line items, and the name and contact details of the clients you make a project for. When you send a quote to a client, a copy is stored with the design, the quote, your workshop details and, if you entered it, the client’s name (section 6).
• Public profile and quote requests (CU-79): if you have the Pro plan and activate your profile under “My workshop”, its content (name, description, specialities, area, an approximate point on the map and, if you enter them, website, phone and link to your Google listing) is published on the map of workshops, visible to anyone, for as long as it is activated and approved and your Pro plan is current. If you ask workshops for quotes, we hand the workshop or workshops you choose a copy of your design with its materials list (no prices), your name, your email, your phone if you enter it and your message; only they receive it (section 6).
• Technical data: the logs generated by the servers when you use the Service (IP address, date and page requested), needed for it to work and for its security. When you log in, sign up or reset your password, the Cloudflare CAPTCHA analyses technical signals from your browser to check that you are not a robot.
• Visit statistics: which pages are visited, which website people come from, the country and the type of device and browser. They are collected by Vercel Web Analytics without cookies and in aggregate: it does not identify anyone or follow a person between visits, and the page address is sent without parameters that could contain your account data.

We do not use advertising tools or build commercial profiles.

• To give you access to the Service, save your projects and manage your subscription. Legal basis: performance of the contract you accept when you sign up or subscribe.
• To answer your questions with Poty. Legal basis: performance of the contract (it is a feature of the plans that include it).
• To handle your modelling requests and email you when they are published or cannot be done. Legal basis: performance of the contract (it is a feature of the Service).
• To reply to your messages and your enquiry about the Pro plan. Legal basis: your consent, which you give when you send the form.
• To store your prices and workshop details and publish the quotes you send to your clients. Legal basis: performance of the contract (it is a feature of the Pro plan).
• To publish a workshop’s profile on the map (only if the Pro user activates it) and to hand your quote request to the workshop you choose. Legal basis: performance of the contract (it is a feature of the Service and of the Pro plan) and, for the quote request, your express consent, which you give by ticking the box before sending it.
• To publish your public projects in the Community with your alias. On the Free plan, saved projects are always public; on Premium and Pro you can hide each one. Legal basis: performance of the contract (it is a feature of the Service and a condition of the Free plan, which you accept in the terms of use, section 7).
• To review reports about Community projects and hide those that break the rules or the law. Legal basis: our legitimate interest and compliance with legal obligations.
• To keep the Service secure, prevent abuse and fix problems. Legal basis: our legitimate interest.
• To know which pages are used and how people reach the website, with aggregate statistics, in order to improve the Service. Legal basis: our legitimate interest.
• To comply with legal obligations, such as tax obligations on payments. Legal basis: compliance with a legal obligation.

• Account, profile and project data, for as long as you have the account.
• Public projects are shown in the Community for as long as they are public: they stop being shown if you hide or delete them or delete your account, and their image is deleted when you hide or delete them. Copies that other users saved as a starting point for their own designs are theirs.
• A workshop’s client data, for as long as the project exists. Copies of quotes (the last 50 versions of each), for as long as the workshop has the account: if it is deleted, its links are deactivated and the copies deleted.
• Form messages, for as long as needed to deal with them.
• Quote requests, for as long as the account of the person who sent them and that of the workshop that received them exist; the workshop can delete them earlier. The public profile, for as long as it is activated and your Pro plan is current: you can deactivate or delete it whenever you want.
• Modelling requests, for as long as you have the account. If you delete it, they are kept without any data that identifies you, only as a record of what was requested.
• Billing data, for the periods required by law.
• Technical logs, for a limited time, for security only.

If you ask us to delete your account, we will delete your personal data. Your projects will also be deleted if you say so in your request.

We do not sell your data. The following providers process it on behalf of 3DLiving.app, only to provide the Service:

• Supabase: database, login and images of public projects.
• Vercel: hosting of the website and its functions, and visit statistics.
• Stripe: payments and subscriptions.
• Anthropic: Poty's artificial intelligence model.
• Cloudflare: CAPTCHA (Turnstile) for login and sign-up, to prevent automated access.
• Google: login with Google (if you choose it) and email, through which the forms reach us.

In addition, when you view a map of workshops, your browser requests the map images directly from OpenStreetMap (OpenStreetMap Foundation, United Kingdom), which receives your IP address and your browser’s technical data under its own privacy policy. We do not send it any data of yours.

Some of these providers may process data outside the European Economic Area, for example in the United States. In those cases, the transfer is covered by the safeguards provided for in the GDPR, such as the EU-US Data Privacy Framework or the European Commission's standard contractual clauses.

We may also disclose data to the authorities when required by law.

When a workshop on the Pro plan stores the details of one of its clients or sends them a quote, the workshop is the controller of that data. 3DLiving.app processes it as a processor, on behalf of the workshop and only to provide it with the Service (Article 28 GDPR; the terms of that processing are in the terms of sale, section 8).

Only the name and contact details entered by the workshop are stored about the client. The quote is sent as a link that anyone who has it can open without an account. It shows the design, the quote and the workshop details and, at most, the client’s name; never their contact details. The link code is random, cannot be guessed and does not reach our servers or the visit statistics. The link works until the workshop deactivates it or deletes its account.

If you are a workshop’s client and want to exercise your rights over that data, contact the workshop, whose details appear on the quote. If you write to us, we will pass your request on.

Quote requests. When you ask a workshop for a quote, the workshop you choose is the controller of the contact details we hand to it (name, email, phone and message) and uses them only to reply to your request. 3DLiving.app processes them only to hand them over and keeps them as explained in section 4. You tick a consent box before sending. To exercise your rights against a workshop, contact it; if you write to us, we will pass your request on.

You can exercise your rights of access, rectification, erasure, objection, restriction of processing and portability, and withdraw your consent at any time, by writing to 3dlivingapp@gmail.com. Say which right you want to exercise and the email address of your account.

If you believe we have not handled your request properly, you can lodge a complaint with the Spanish Data Protection Agency (www.aepd.es) or with the data protection authority of your country.

The Service is not intended for children under 14. If you are under 14, do not sign up or send us personal data.

We apply technical and organisational measures to protect your data: encrypted connections, encrypted passwords and access to each piece of data limited to those who need it. Each user can only change their own projects; of other users' projects, they only see the public ones in the Community.

We may update this policy when the Service or the law changes. The version in force is the one published on this page, with the last-updated date shown above.