Privacy Policy

1. Scope of This Policy

This Privacy Policy explains how Img to STL ("Img to STL," "we," "us," or "our") collects, uses, discloses, and retains information when you visit or use our website, create an account, upload reference images, generate 3D models, download STL files, purchase credits or subscriptions, or contact support (collectively, the "Service").

The Service uses artificial intelligence to reconstruct a 3D object from one or more reference images. Images and generated files may contain personal information depending on what you choose to upload. Please do not upload information that you do not have the right to use or that you do not want processed as described in this Policy.

2. Information We Collect

Information you provide

• Account and authentication information. Your name, email address, authentication credentials, and related account details. Passwords are stored in hashed form. If you use a third-party sign-in method, we may receive identifiers and profile information authorized by that provider.
• Uploaded content. The reference images you submit, file names, file types, file sizes, selected quality level, and other settings needed to generate a model.
• Generated content and task information. Generated STL files, file URLs and metadata, generation status, provider request identifiers, error details, and related task history.
• Billing and subscription information. The plan or credit pack selected, price, currency, transaction and subscription identifiers, payment status, invoice information, and credit activity. Payment card and bank account details are processed by the payment provider shown at checkout; we do not store complete payment card numbers on our servers.
• Support communications. Messages, attachments, and other information you provide when submitting a support request or otherwise contacting us.

Information collected automatically

When you use the Service, we and our service providers may automatically collect technical and activity information, such as your IP address, browser and device type, operating system, referring page, pages or features used, approximate location derived from IP address, timestamps, error logs, and security events.

We also use cookies and similar storage technologies to maintain sessions, remember necessary preferences, protect the Service, and keep you signed in. If optional analytics or support tools are enabled, they may also collect usage information as described when those tools are presented.

3. How We Use Information

We use information to:

• create and secure your account;
• accept images, submit generation tasks, provide interactive previews, and make generated STL files available for download;
• display task, payment, subscription, and credit history;
• process payments and administer subscriptions and purchased credits;
• restore credits when a generation task is recorded as failed;
• diagnose errors, prevent duplicate or abusive requests, and protect users and the Service;
• provide customer support and respond to requests;
• maintain, analyze, and improve the reliability and usability of the Service;
• comply with legal obligations and enforce our Terms of Service; and
• send essential account, billing, security, and service communications.

Where applicable law requires a legal basis, we process information as necessary to perform our contract with you, comply with law, protect our legitimate interests in operating and securing the Service, or based on your consent. You may withdraw consent for consent-based processing, but this does not affect processing already completed.

4. AI Processing and File Lifecycle

Img to STL uses Fal.ai and the Rodin V2.5 model to process uploaded images and generate 3D files. To perform a generation request, we transmit your selected images, generation settings, and related technical identifiers to Fal.ai.

Our current integration configures:

• uploaded input files to expire from Fal.ai storage after 7 days; and
• generated files to expire from Fal.ai storage after 30 days.

These periods describe the file lifecycle requested by our integration. Fal.ai may retain limited logs, backups, security records, or other information as permitted by its agreements and legal obligations. For general information about Fal.ai's practices, see the Fal.ai Privacy Policy.

Task records, transaction records, file metadata, and provider identifiers may remain in your Img to STL account after a provider-hosted file expires. A saved download URL may stop working when its underlying file has expired. You should promptly download and securely store any STL file you want to keep.

We do not use your uploaded images or generated STL files for behavioral advertising. We do not manually review them as a routine part of generation, but authorized personnel may access limited content when reasonably necessary to resolve a support request, investigate abuse or a security issue, or comply with law.

5. How We Disclose Information

We may disclose information to the following categories of recipients when reasonably necessary:

• AI generation providers, including Fal.ai, to upload images and generate models;
• payment providers presented at checkout, to process purchases, renewals, cancellations, refunds when applicable, and fraud checks;
• authentication, hosting, database, storage, email, analytics, and support providers that help operate the Service, when those providers are enabled;
• professional advisers, such as legal, accounting, insurance, and security advisers;
• authorities or other parties when required by law or reasonably necessary to protect rights, safety, and the integrity of the Service; and
• a successor or transaction counterparty in connection with a merger, financing, reorganization, or sale of all or part of the business, subject to appropriate protections.

We may also disclose information at your direction or with your consent. We do not sell your personal information for money. We do not share uploaded images or generated STL files for cross-context behavioral advertising.

6. Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Policy, including providing the Service, maintaining transaction and credit records, resolving disputes, enforcing agreements, and meeting tax, accounting, security, and other legal obligations.

Retention depends on the type of information:

• provider-hosted inputs and outputs follow the file lifecycle described in Section 4;
• account and task history is generally retained while your account is active and for a reasonable period afterward;
• billing, subscription, credit, fraud-prevention, and legal records may be kept for longer periods required by law; and
• backup copies may remain for a limited period until overwritten through normal backup processes.

We may retain aggregated or de-identified information that can no longer reasonably identify you.

7. Cookies and Your Choices

Essential cookies and local storage are required for sign-in, security, language or interface preferences, and core functionality. You can configure your browser to block or delete cookies, but doing so may prevent parts of the Service from working.

If we enable optional analytics or marketing technologies that require consent in your location, we will provide an appropriate choice. You can also use browser controls or recognized privacy signals where applicable.

8. International Data Transfers

Our providers may process information in countries other than the country where you live. Those countries may have different data protection laws. Where required, we use contractual or other lawful safeguards for restricted transfers and require service providers to protect information consistent with their role.

9. Security

We use reasonable administrative, technical, and organizational safeguards designed to protect information, including access controls and encrypted transmission where supported. No online service or storage system is completely secure, and we cannot guarantee absolute security. You are responsible for using a strong, unique password and keeping your account credentials confidential.

10. Your Privacy Rights

Depending on where you live, you may have the right to:

• request access to or a portable copy of your personal information;
• correct inaccurate information;
• request deletion of information;
• restrict or object to certain processing;
• withdraw consent for consent-based processing;
• opt out of certain sales, sharing, or targeted advertising where applicable;
• appeal a decision about a privacy request; and
• lodge a complaint with your local data protection authority.

You may update certain account information through the Service. To exercise another right, use the Support channel provided in the Service and clearly identify your privacy request. We may ask for information needed to verify your identity and protect your account. Authorized agents may submit requests where permitted by law, subject to verification. We will not discriminate against you for exercising a valid privacy right.

These rights are not absolute. We may retain or continue processing information when permitted or required by law, including to complete transactions, maintain security and fraud-prevention records, protect legal claims, or comply with financial recordkeeping obligations.

11. Children's Privacy

The Service is not directed to children under 18, and we do not knowingly collect personal information from children under 18. If you believe a child has provided information to the Service, please contact us through Support so that we can investigate and take appropriate action.

12. Third-Party Links and Services

The Service may link to third-party websites or services. Their privacy practices are governed by their own notices, not this Policy. We encourage you to review those notices before providing information directly to a third party.

13. Changes to This Policy

We may update this Privacy Policy as the Service, providers, or legal requirements change. We will revise the "Last updated" date and, when required, provide additional notice through the Service or by email. If a change requires consent, we will request it before applying the change as required by law.

14. Contact Us

If you have a question, complaint, or privacy request, contact us at support@imgtostl.org or through the Support channel available in the Service. Please do not include payment card numbers, passwords, government identifiers, or other sensitive information in a support message.