Privacy & Cookie Policy

1. Information We Collect

Forge3D is committed to protecting your privacy. We collect the following information when you register or interact with the Service:

• Account Credentials: Email address, display name, and avatar profile photos provided through email registration or OAuth providers (Google, GitHub).
• Project Assets: Reference images, character sketches, text prompts, and sibling isolation data uploaded to our secure private storage buckets.
• Usage Metrics: Logs of mesh generation requests, elapsed seconds, credits spent, and browser session metrics necessary to diagnose pipeline errors.

2. How We Use Your Data

We use the gathered information to:

• Authenticate your identity and manage your cloud session;
• Execute GPU-based image segmentation and 3D mesh generation pipelines;
• Manage your credit balance, process account modifications, and email transaction updates (waitlist status, payments);
• Improve prompt-completion models and fine-tune image pre-processing settings.

We do not sell, rent, or trade your personal data or uploaded character designs to any third parties for advertising purposes.

3. Data Storage & Security

All account data, project metadata, and credit logs are safely stored in our secure, encrypted PostgreSQL database powered by Supabase. Physical asset files (images, GLB meshes) are housed in private Supabase Storage Buckets protected by strict Row-Level Security (RLS) policies. Only you (the owner) can request temporary signed URLs to read or download your files.

4. Third-Party Service Providers

To provide generative pipelines and payments, we share specific payloads with trusted API partners under strict security mandates:

• Google Cloud Vertex AI: To run generative image-segmentation and prompts. No uploaded photos are retained by Google to train their baseline models.
• Tripo3D Platform: To reconstruct 3D meshes from your reference assets.
• Tencent Hunyuan3D API: To generate high-fidelity 3D geometries and models from isolated character sketches.
• Resend: To deliver waitlist updates and system onboarding emails.

5. Your Rights & Account Deletion

You retain complete control over your data. Under the GDPR and CCPA, you have the right to request access to your data, restrict its processing, or delete it permanently.

You can request the hard-deletion of your account at any time from your Account Settings page. When you click "Delete Account", the Service immediately and permanently purges your profile, all uploaded reference images, and generated 3D meshes from both our databases and cloud storage buckets.

6. Cookie Usage

Forge3D utilizes secure session cookies solely for authentication and CSRF protection. We do not place third-party tracking or advertising cookies on our web application.