Privacy policy

1. What data we process

Depending on how you use AV3D Studio, we process:

• Account data: your email, your name, your company and country if you give them, your password (stored as a hash, never in plain text), your language, the date of your last login and the date you last accepted the Terms and conditions and this policy. If you log in with Google, also your Google account identifier, your name and the address of your profile picture.
• Your projects and files: the scenes and their details (client, event, venue and date, if you enter them), versions with their author, thumbnails, and the 3D models, drawings and images you upload.
• Your report details, if you fill them in under Profile: company, logo, contact person, job title, phone, email, website and address.
• Collaboration: the people you give access to a project and, while you work at the same time, your name, your cursor and your selection, which are shared live with them and not stored.
• Marketplace: what you publish and, with each publication, a copy of your name and email at that moment, the date, the version of the declaration you accepted and the IP address you published from.
• Payments: your plan, the status of your subscription, your orders and your payments. Card details are handled by Stripe and we never see them; from Stripe we receive your name, email, billing address and, if you buy as a business, your VAT number, to issue the invoice.
• Security logs: the IP address and browser of each session, and a log of important actions (logins, plan and account changes, publications) with their IP and browser.
• Messages you send us from the contact page or the manufacturers page: your name, your email, the message and, if you are a manufacturer, your company, its website and the kind of equipment. They reach us by email and are not stored in the application.
• Website visit statistics, only if you accept them in the cookie notice: the page visited, the country (derived from the connection, through Cloudflare), the domain of the website you came from, the device type and a random session identifier. In these statistics we do not store the IP address and we do not count visits by administrators.

2. Why we use it and on what legal basis

• To provide the service: your account, your projects, collaboration and the marketplace. Legal basis: the contract you accept with the Terms and conditions.
• To charge paid plans, issue invoices and meet accounting and tax obligations. Legal basis: the contract and legal obligations.
• To protect the service and the accounts (security logs). Legal basis: our legitimate interest in security.
• To tell you about important changes to the service and your subscription. Legal basis: the contract and our legitimate interest in keeping you informed.
• To answer the messages you send us. Legal basis: your consent, which you give by sending them.
• For website visit statistics, only if you accept them in the cookie notice. Legal basis: your consent, which you can withdraw at any time from “Cookie preferences” at the bottom of the website.

The emails we send you are service emails: welcome, notices about your subscription and its payments, invoices, project invitations, marketplace replies, and the acknowledgment of and reply to your messages.

3. Who else sees your data

We only share data with the providers we need for AV3D Studio to work:

• OVH (OVH SAS, Roubaix, France), the hosting provider: the server and the database are in France, inside the European Union;
• Cloudflare, which serves and protects the website and stores the files you upload (Cloudflare R2);
• Stripe, for payments and VAT calculation (card details are handled by Stripe under its own privacy policy);
• Resend, to send emails;
• Google, if you log in with your Google account;
• our invoicing system (CRM), which issues the invoices with the details of each payment.

When you type the venue of an event, that text is sent from our server to Google Maps Platform or, if it is not set up, to Photon (OpenStreetMap) to suggest addresses. Only what you type in that field reaches them.

If you share a project, the people you give access to see its content. If you publish in the marketplace, other users see what you publish and your name as the author.

We do not sell your data or hand it over to third parties for advertising.

Some of these providers are in the United States or may process data outside the European Economic Area. In those cases the transfer relies on the safeguards provided by the General Data Protection Regulation, such as the European Commission’s standard contractual clauses or the EU-US Data Privacy Framework.

4. How long we keep it

• Your account, projects and files: while you have the account. If we delete it, they are removed, except what we must keep by law, such as invoices and payment records, for the periods set by the regulations.
• Visit statistics: 400 days.
• Contact messages: as long as needed to deal with them.
• Security logs: as long as needed to protect the service and handle possible claims.

5. Your rights

You can access, rectify or erase your data, restrict or object to its processing and ask for its portability by writing to us through the contact page. We will answer within the legal deadline. You can change your name, company and country yourself under Profile.

If you gave us your consent for something, you can withdraw it at any time.

If you believe we have not handled your request properly, you can complain to the Spanish Data Protection Agency (www.aepd.es).

6. Security

We apply reasonable technical and organizational measures: passwords are stored as hashes, connections are encrypted, the keys for external services are stored encrypted and access to the admin panel is limited by role. No system is infallible; if a security breach affected you, we would tell you.

7. Minors

AV3D Studio is a professional tool and is not aimed at children under 14. If we find an account of a minor without authorization, we will delete it.

8. Changes to this policy

If we change this policy, we will update the date of the last review and, if the change is significant, we will let you know. What is stored in your browser is explained in the Cookie policy.