Privacy Policy

When you create an account we collect your email address, display name, and authentication credentials (or a Google sign-in identifier if you choose connected login). Passwords are stored as one-way cryptographic hashes; we cannot retrieve your original password.

Where a paid service is available, payment details are handled by the payment provider identified during checkout; Neyvo3D does not store your full payment-card number. When you contact support, we keep the ticket contents and any attachments you choose to send.

When you use Neyvo3D, our systems may record IP address, browser and device information, language, timestamps, authentication events, generation status, error diagnostics, and security events. We use this information to deliver the service, prevent abuse, troubleshoot failures, and protect accounts and infrastructure.

We do not build advertising profiles from this information or sell it to data brokers.

Photos you submit for generation are processed to create your 3D models. For a successful generation, we retain the submitted generation photos during the 14-calendar-day quality-review request period. If you open a quality review within that period, we retain the photos as review evidence until the review is finally closed. We delete the photos within 24 hours after the request period ends without a review. Photos covered by a timely review enter scheduled deletion as soon as the review is finally closed and are processed within the next 24-hour scheduling window. Photos for technical failures, cancelled requests, invalid files, and content-policy failures may be kept briefly for up to 24 hours for technical retry or failure handling, and then enter scheduled deletion.

On public pages — including the homepage upload and the free GLB Viewer — selected files stay in your browser. A photo you choose on the homepage is kept only in your browser's local storage until you create an account and explicitly submit it; the GLB Viewer processes files entirely on your device and uploads nothing.

We use the information we collect to operate the service: authenticating you, processing generation requests, maintaining your model library, delivering notifications, and responding to support requests. We also process limited information where necessary for our legitimate interests in security, fraud prevention, reliability, and product improvement, and where required to comply with law.

We use aggregated, de-identified usage information to improve generation quality and product reliability. We do not sell your personal information, and we do not use your product photos or models to advertise other products.

Models generated with trial Credits remain accessible for 30 calendar days from successful generation. Paid models remain accessible for 365 calendar days from successful generation. Access ends at the applicable deadline; it is not extended by login, viewing, or download. Paid model files may remain inaccessible for up to 30 additional days solely for physical deletion processing and retrying failed storage deletions.

Generation photos follow the separate quality-review schedule described above and are not kept for the full model-retention period. Deleting a model or account earlier starts permanent deletion of the associated files immediately.

Two features are intentionally local-first. The homepage upload keeps your selected photo as a browser-local draft until you register and submit it; clearing your browser storage removes it. The free GLB Viewer opens files directly in your browser using local processing — the file contents are never transmitted to our servers.

We work with a limited set of providers for cloud hosting and object storage, authentication, email delivery, error monitoring, and specialized AI-assisted 3D processing. Where payment is available, the identified payment provider receives the information required to process the transaction. Email providers receive message and recipient details; 3D processing providers receive the product images and technical parameters required to produce a result. Each provider receives only the data required to perform its function and is subject to contractual confidentiality and data-protection obligations.

Providers may change as the service evolves. We remain responsible for selecting and overseeing providers used on our behalf.

We use a small set of strictly necessary cookies and browser storage to keep you signed in, remember your language preference, and preserve browser-local drafts such as the homepage upload. We do not use third-party advertising or cross-site tracking cookies.

We protect data in transit with TLS encryption and at rest with provider-managed encryption. Access to production data is limited to authorized personnel under least-privilege controls. Destructive operations such as model deletion use access-controlled storage deletion procedures, and failed scheduled deletions are recorded and retried.

No method of transmission or storage is perfectly secure; if we become aware of a breach affecting your data, we will notify you and the relevant authorities as required by law.

Our infrastructure may process data in regions other than your own. Where we transfer personal data across borders, we rely on appropriate safeguards such as standard contractual clauses.

Depending on your location, including the EEA, United Kingdom, Switzerland, California, and other jurisdictions with privacy laws, you may have rights to access, correct, export, restrict, or delete your personal information; object to or withdraw consent for certain processing; and complain to your local data-protection authority. We do not discriminate against users for exercising privacy rights.

You can permanently delete your account from Account settings after re-authentication. This cancels active renewal, deletes authentication credentials, uploads, models, support content, and other account data, and de-identifies limited transaction records that we must retain for accounting, fraud prevention, dispute handling, or legal compliance. You may also contact support at support@neyvo3d.com. Operational messages such as billing receipts continue only while needed to complete an active transaction or legal obligation.

Account deletion is irreversible. Before deleting the account, we remove files from active object storage. Authentication credentials and active sessions are revoked immediately after deletion completes.

We may retain minimal, de-identified transaction and deletion records where required for accounting, security, dispute handling, or legal claims. These records are separated from login credentials and are not used to recreate your account. Residual copies in encrypted backups expire under our normal backup rotation.

Neyvo3D is a business tool and is not directed at children. You must be at least 18 years old, or the age of majority in your jurisdiction, to create an account. If we learn that we have collected data from a child, we will delete it.

Neyvo3D is the controller of personal information processed for this service unless another entity is identified in a written agreement. If we change this policy in a material way, we will post the updated version here and, where appropriate, notify you in the app or by email before it takes effect. The date at the top shows the current version.

Privacy questions and rights requests can be submitted through the in-app Support page or sent to support@neyvo3d.com. We may ask for reasonable verification before fulfilling a request.