Privacy Policy

Last updated 23 October 2026

This policy explains what personal information 3dSummon collects, why, who it's shared with, and your rights. We collect only what we need to run the service. We don't sell your information, don't show ads, and don't use your pictures or models to train AI.

1. Who is responsible for your information

3dSummon. Contact us at 3dsummon.support@gmail.com. We are the “controller” of your personal information under UK data protection law (the UK GDPR and the Data Protection Act 2018) and, for visitors in the EU, the EU GDPR.

2. What we collect

• Account details: your email address, and if you sign in with Google, the name and email Google shares with us. Passwords are stored only in scrambled (hashed) form by our sign-in provider.
• What you create: the pictures and text prompts you give us, the models made from them, and the settings you chose.
• Usage and credits: your plan, credit balance and a record of what credits were used for, and which showcase models you liked.
• Payments: handled by Stripe. We receive your Stripe customer number, what you bought and whether the payment went through, but never your full card details.
• Technical information: our hosting providers keep short-lived logs (such as IP addresses and browser type) to keep the service secure and working.

3. Why we use it (and our legal basis)

• To provide the service you signed up for (making and storing your models, managing your plan and credits, taking payments): necessary for our contract with you.
• To keep it secure and working (preventing fraud and abuse, fixing problems): our legitimate interests.
• To keep financial records as tax law requires: a legal obligation.
• To email you about your account (receipts, renewals, important changes). We'll only send marketing emails if you've agreed to them, and you can opt out at any time.

4. Who we share it with

Only with the companies that run parts of 3dSummon for us, under contracts that require them to protect it and use it only to provide their service:

• Supabase: accounts, sign-in and our database (stored in the EU, Ireland).
• Vercel: hosts the website.
• Modal: the computers that make your models, which also store your pictures and models (USA).
• Stripe: payments and billing.
• Google: only if you choose to sign in with Google.

Some of these process information outside the UK and EU, mainly in the USA. Where they do, it is protected by the safeguards UK and EU law require, such as the UK–US Data Bridge, the EU–US Data Privacy Framework or standard contractual clauses. We may also share information if the law requires it, or to protect people from fraud or harm.

5. How long we keep it

• Account details, pictures and models: for as long as your account is open. Ask us to delete any of them at any time.
• When you close your account, we delete your pictures, models and account details within 30 days.
• Payment and credit records: 6 years, as UK tax law requires.
• Technical logs: a short time, normally days to weeks.

6. Your rights

You can ask us to give you a copy of your information, correct it, delete it, limit how we use it, object to how we use it, or send it to you in a portable format. Email 3dsummon.support@gmail.com; we'll reply within a month. If you're unhappy with how we handle your information, you can complain to the Information Commissioner's Office (ico.org.uk) or, in the EU, your local data protection authority. Please contact us first so we can try to help.

7. Cookies

We only use cookies that are needed for the site to work: they keep you signed in. Your browser also remembers a few display preferences on your device. We don't use advertising or tracking cookies, so there's nothing to opt out of. If we ever add optional cookies, we'll ask first.

8. Children

3dSummon isn't meant for children under 13, and we don't knowingly collect their information. If you think a child has given us information, email us and we'll delete it.

9. Security

Your information is sent over encrypted connections, access to it is restricted, and payments are handled by Stripe, which is certified to the highest card-industry security standard (PCI DSS Level 1).

10. Changes to this policy

If we change this policy in an important way, we'll tell you by email or on the site. The date at the top shows when it was last updated.