Privacy Policy

1. Scope and responsible operator

This notice covers the Modzi3D website, account area, creative studio, and support channels. Modzi3D is the product name. The service is operated by TwinMinds Web LLC, 30 N Gould St #54819, Sheridan, WY 82801, USA. Corporate contact: [email protected]. Telephone: +1 312 940 6318. Privacy questions can be sent to [email protected].

This notice describes account, billing, image-to-3D generation and file-conversion services. Features marked unavailable in the studio cannot currently be submitted.

2. Information you provide

Account features use your email address, a display name if supplied, a provider-issued user identifier, and verification status. Email/password authentication is handled by the configured authentication provider. Google sign-in, when enabled, provides the identity information you authorize; Modzi3D does not receive your Google password.

The studio processes reference images, generation settings, model files, task identifiers, and error information when you submit a generation. Do not upload material you are not entitled to share, or unnecessary sensitive information. Selecting and cropping an image prepares it locally. Confirming generation uploads the input to private storage and sends it to the selected generation provider.

Support messages may include contact details, ticket content, relevant model identifiers, and attachments you choose to provide. Never send passwords, full card numbers, or secret API keys to support.

3. How information is used

Account data supports sign-in, email verification, account preferences, access controls, and abuse prevention. Generation data is needed to accept a request, return its status and output, and display the model in your library. Billing records support purchased credits, subscriptions, receipts, and transaction reconciliation for confirmed purchases.

Support and security information is used to investigate a problem, respond to a request, and protect the service. Where privacy law requires a lawful basis, the relevant basis depends on the activity: fulfilling a requested service, meeting a legal obligation, a justified security or service interest, or consent for an optional activity. Account and service emails are separate from optional marketing.

4. Service providers and data sharing

Google Analytics 4 is enabled by default on public pages unless you have saved a refusal. No automatic cookie banner is displayed. Use Cookie settings in the footer to disable or enable Analytics. We do not send account details, uploaded files, prompts, or URL query strings to analytics. Analytics and advertising have independent preferences. Advertising is off until you accept it in Cookie settings. When enabled, Meta Pixel measures page visits, confirmed registrations and purchases, and model-generation actions. Meta receives technical browser data and event information such as page URL, purchase value and currency. We do not provide email addresses, prompts, uploaded files or private asset URLs to the Pixel. Google advertising tags run only when configured and consented to. You can withdraw optional tracking consent in Cookie settings. Meta privacy information: https://www.facebook.com/privacy/policy/

Google Analytics may use _ga and _ga_* cookies to distinguish visits. Their lifetime depends on the Google Analytics configuration. Google receives technical and visit data while Analytics is enabled. See the Google privacy policy: https://policies.google.com/privacy

Modzi3D uses fal.ai for Base image-to-3D and Tripo for Pro image-to-3D. Stripe processes payments, Supabase Auth handles authentication, and Brevo sends account emails. Cloudways hosts the application and MariaDB records; Cloudflare R2 stores private input and output files. A generation sends the selected input to the provider needed to process that request.

Payment card entry occurs on Stripe’s hosted checkout. Modzi3D stores payment references and billing status, not complete card details. For processing-location or transfer information, contact [email protected]. We may also disclose information when legally required or necessary to address a documented security issue.

5. Storage, retention, and deletion

Account settings, support tickets, generation metadata, and administrative records use server-side storage when those features are connected. Session cookies support authentication. Browser preferences may remember an interface choice; they are not a source of account balances or access privileges.

Source files, outputs, account records, logs and backups may have different retention needs. No fixed automatic deletion interval is stated here; contact [email protected] for retention details or a deletion request. A deletion request may require identity verification and may exclude records that must be retained for legal, accounting, fraud-prevention, or dispute purposes. Contact [email protected] to request deletion or retention details.

6. Your privacy choices

Depending on applicable law and your circumstances, you may be entitled to request access, correction, deletion, portability, restriction, or objection to certain processing, or to withdraw consent for a consent-based activity. Write from your account email and describe the request. We may ask for proportionate verification before sharing or changing account data.

You may also contact the relevant supervisory authority where applicable. The rights and response rules that apply depend on jurisdiction; this policy does not reduce mandatory protections.

7. One-time trial and device verification

The public studio currently requires a paid plan and credits. If a free trial is introduced and you request it, the configured Fingerprint service analyzes browser and device signals to help recognize repeat trial use. This may include browser characteristics, network information, and technical signals described by that provider. Verification is initiated only after you choose the trial and agree to the device-verification notice. It is not used here for advertising.

The application validates the identification event on the server and stores hashed account-email and provider-issued device identifiers with the trial task reference. These records prevent another free submission through a different account or the same account on a different device. They are retained for the duration of the one-time trial program, subject to applicable deletion obligations and justified fraud-prevention needs. Device recognition is probabilistic and cannot identify every physical computer with certainty. Contact [email protected] for questions or a review.

A free result is displayed through limited rendered previews. Original model files are protected by account ownership and confirmed paid-plan checks. A preview that is visible on screen can still be captured as a screenshot.

8. Security, international processing, and updates

Authentication, role checks, and ownership checks are enforced server-side. No online service can promise absolute security. Report a suspected vulnerability to [email protected] without exposing other users’ data.

Providers may process information in countries different from yours. Contact [email protected] for information about processing locations and applicable transfer arrangements. If a material change affects this notice, we will publish an updated version and provide additional notice when required. This page was updated on September 28, 2026 to reflect the connected services.