Privacy Policy

1. What we collect

• Account data: email address and authentication identifiers (managed by Supabase Auth).
• Business details: the legal name, type of business, country, website or online store and phone number of the business behind an account, and its tax or registration number and address if given. We use them to check the business before its account opens, and keep them with the account.
• Content: 3D models, designs, thumbnails and configurations you upload or create.
• Usage and billing: credit spend, plan, and payment status. Payments are processed by PayPal: card and bank details never touch our servers.
• Technical logs: request metadata used for security, rate limiting and debugging.
• Ring builder activity: when someone uses a ring builder (on a merchant’s store or ours), the browser reports what they view, choose, try on and add to cart, with a per-tab identifier that is discarded when the tab closes, and whether the device is a phone, tablet or desktop (read from the screen size and pointer, never a device ID). Merchants see this as totals in their analytics.
• Asset delivery measurements: when a 3D viewer or ring builder runs (including embedded in a merchant’s own store), the browser reports how many bytes of 3D files it downloaded, a per-tab identifier that is discarded when the tab closes, an approximate country from our CDN, and the origin of the page the viewer is embedded in. This tells merchants and us what delivering those files costs. We do not store IP addresses, finer location, or any identifier that persists across visits, and we honour Do Not Track and Global Privacy Control: with either enabled, nothing is recorded.

2. Camera & AR try-on

Before try-on uses your camera or a photo, it asks you to agree. Your agreement lasts until you close the browser tab. “See it on a model” uses no camera and no photo.

When you agree, software in your browser finds the position of the part of you the piece is worn on (your hand and wrist for rings and bracelets, your ears for earrings, your neck and shoulders for necklaces and pendants) so the jewelry is drawn in the right place. Your video, any photo you choose and those positions are processed only on your device. They are not sent to us or to the store, not stored, not shared, and not used to identify or recognise you. They are discarded continuously while try-on runs and completely when you close it. If you save or share a try-on picture, it goes only where you choose, using your device.

We do receive usage information about try-on: that it was opened, which mode was used, which part of the body it was for, whether a hand, face or body was found, and error types such as “camera blocked”, with a random identifier for the browser tab and the kind of device (phone, tablet or desktop). It contains no images and no positions. If you type your ring size, it is kept for your browser session and saved with a design you choose to save.

The tracking software is served from our own website. If that download fails, your browser fetches it from Google or jsDelivr instead, which see your IP address as with any download, but nothing from your camera. On our own website, the try-on screen is masked from Microsoft Clarity, and Clarity does not start while try-on is open.

Retention and destruction. The positions of your hand, face or body that try-on detects exist only in your browser’s memory while try-on is open. They are replaced many times a second and destroyed completely when you close try-on; nothing is kept after that, and neither we nor the store ever receive or store them, so no copy exists to keep or destroy later. In Illinois, Texas and Washington, try-on also asks for your written consent before it uses the camera or a photo.

3. How we use data

To operate the Service: render and store your designs, serve your embeds, meter credits, prevent abuse and provide support. We do not sell personal data, and we do not use your designs to train models.

4. Sharing

Data is shared only with the services that run the product, each bound by its own data protection terms. 3D assets are stored on our own NAS. Content you publish as an embed or share link is visible to anyone with access to that page or link.

• Vercel: hosting of the website and the app.
• Supabase: the database and sign-in.
• PayPal: payments for plans, credit packs and services, and the checkout a store connects for its own shoppers.
• Stripe: the records of any payment taken before we moved to PayPal.
• Resend (or our mail server): the emails the product sends.
• Sentry: error reports, so we can fix what breaks.
• Microsoft Clarity and Google Tag Manager: how people use our website and app. Never inside embeds on a merchant’s store.
• Upstash: rate limits, which see the address a request comes from.
• Anthropic: the messages typed into the AI ring concierge.
• Google Gemini: the render sent to make an AI lifestyle shot.
• Our partner diamond feed: diamond searches made in a ring builder. It receives no personal data.
• Shopify: only when a merchant connects their store, for that store’s products and orders.

5. Retention & deletion

Your content stays until you delete it or close your account. Deleting a project removes it from the dashboard immediately and from backups on their rotation schedule. An account owner or admin can download a full export of the account’s data at any time from Settings → Your data, and the owner can ask there for the account to be deleted; we confirm by email before anything is deleted.

6. Security

All traffic is encrypted in transit (TLS, HSTS). Tenant data is isolated with row-level security at the database layer. API keys are stored only as SHA-256 hashes. Access to production systems is restricted and audited.

7. Contact

For privacy requests (access, export, deletion), use Settings → Your data in your dashboard, or email us at info@3djewelrydesigner.com.