Privacy Policy

Last updated: March 2026

This Privacy Policy describes how todo3ds (“we”, “us”, or “our”) collects, uses, and protects your personal information when you use our website and marketplace (the “Service”). By using the Service, you consent to the practices described in this policy.

1. Information We Collect

1.1 Account Information

When you create an account, we collect your email address, display name, and authentication credentials. If you sign up using Google, we receive your name, email address, and profile picture from Google.

1.2 Seller Information

If you register as a seller, we collect additional information required by Stripe for payment processing, which may include your legal name, address, date of birth, tax identification number, and bank account details. This information is collected and stored by Stripe, not directly by todo3ds.

1.3 Usage Data

We automatically collect information about how you interact with the Service, including pages visited, search queries, products viewed, timestamps, browser type, device information, IP address, and referring URLs.

1.4 Payment Data

Payment information (credit card numbers, billing addresses) is collected and processed directly by Stripe. We do not store your full credit card number on our servers. We receive transaction confirmations, amounts, and order details from Stripe to fulfill your purchases.

1.5 Uploaded Content

If you are a seller, we store the files and images you upload to list your products on the marketplace. This includes 3D model files, preview images, and product descriptions.

2. How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve the Service
  • Process purchases and deliver digital products
  • Create and manage your account
  • Process seller payouts through Stripe
  • Send transactional emails (purchase confirmations, download links, account notifications)
  • Detect and prevent fraud, abuse, and security issues
  • Analyze usage patterns to improve user experience
  • Enforce our Terms of Service
  • Comply with legal obligations

3. Third-Party Services

We use the following third-party services that may process your data:

We do not sell your personal information to third parties. We only share data with the services listed above as necessary to operate the Service.

4. Data Retention

We retain your account information and transaction history for as long as your account is active or as needed to provide you the Service. If you delete your account, we will delete your personal data within 30 days, except for information we are legally required to retain (such as transaction records for tax and accounting purposes, which may be retained for up to 7 years).

5. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

  • Access — Request a copy of the personal data we hold about you.
  • Correction — Request correction of inaccurate or incomplete data.
  • Deletion — Request deletion of your personal data, subject to legal retention requirements.
  • Export — Request a portable copy of your data in a machine-readable format.
  • Objection — Object to the processing of your data for certain purposes.
  • Restriction — Request that we restrict the processing of your data in certain circumstances.

To exercise any of these rights, please contact us at info@todo3ds.com. We will respond to your request within 30 days.

6. Cookies & Tracking

We use essential cookies to keep you signed in and maintain your session. We may also use analytics cookies to understand how visitors use the Service. You can configure your browser to refuse cookies, but this may affect your ability to use certain features of the Service.

We do not use cookies for targeted advertising. Third-party services we integrate (such as Firebase and Stripe) may set their own cookies as necessary for their functionality.

7. Data Security

We implement industry-standard security measures to protect your personal data, including encryption in transit (TLS/SSL), secure authentication, and access controls. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

8. Children's Privacy

The Service is not directed to children under 18. We do not knowingly collect personal information from children. If we become aware that we have collected personal data from a child under 18, we will take steps to delete that information promptly. If you believe we may have collected information from a child, please contact us at info@todo3ds.com.

9. International Data Transfers

Your data may be processed and stored in countries other than your own. By using the Service, you consent to the transfer of your information to countries that may have different data protection laws than your jurisdiction. We take steps to ensure that your data receives an adequate level of protection wherever it is processed.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we make changes, we will update the “Last updated” date at the top of this page. For material changes, we may notify you via email or a prominent notice on the Service. Your continued use of the Service after any changes constitutes your acceptance of the updated policy.

11. Contact Us

If you have any questions about this Privacy Policy or how we handle your data, please contact us at info@todo3ds.com.