Privacy Policy

1. Introduction

People Can Dream Sebastian Kotarski ("we", "our", or "us") respects your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

2. Information We Collect

2.1 Information You Provide

• Account Information: Email address, password (hashed)
• Product Images: Photos you upload for 3D model generation
• Product Data: Product names, dimensions, and metadata
• Payment Information: Processed by our payment provider (Stripe) - we do not store full credit card details

2.2 Automatically Collected Information

• Usage Data: Pages visited, features used, time spent
• Device Information: Browser type, operating system, device type
• Analytics Data: AR viewer interactions, QR code scans, model views
• IP Address: For security and rate limiting
• Cookies: Authentication tokens, session data, preferences

3. How We Use Your Information

We use collected information to:

• Provide and maintain the Service
• Process your images and generate 3D models
• Manage your account and authentication
• Process payments and billing
• Send service updates and important notifications
• Provide customer support
• Analyze usage patterns to improve the Service
• Detect and prevent fraud or abuse
• Comply with legal obligations

4. Data Storage and Security

Storage: Your data is stored on secure servers provided by Supabase (PostgreSQL database) and cloud storage providers. Images and 3D models are stored in encrypted cloud storage.

Security Measures: We implement industry-standard security measures including encryption in transit (HTTPS/TLS), encrypted storage, secure authentication, and regular security audits.

Data Retention: We retain your data for as long as your account is active. After account deletion, data is permanently removed within 30 days.

5. Data Sharing and Disclosure

We do NOT sell your personal information. We may share data with:

• Service Providers: Supabase (database), Replicate/Modal (AI processing), Vercel (hosting), Stripe (payments)
• Legal Requirements: If required by law or to protect our rights
• Business Transfers: In case of merger, acquisition, or sale of assets

6. Cookies and Tracking

We use cookies and similar technologies for:

• Essential Cookies: Authentication and session management
• Analytics Cookies: Understanding how users interact with AR features
• Preference Cookies: Language selection, UI preferences

You can control cookies through your browser settings, but some features may not work properly without essential cookies.

7. Your Rights

Depending on your location, you may have the right to:

• Access: Request a copy of your personal data
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your account and data
• Export: Download your generated models
• Opt-out: Unsubscribe from marketing communications

To exercise these rights, please contact us.

8. Third-Party Services

Our Service integrates with third-party services:

• Supabase: Database and authentication
• Replicate/Modal: AI model processing
• Stripe: Payment processing
• Vercel: Hosting and CDN

These services have their own privacy policies. We recommend reviewing them.

9. International Data Transfers

Your data may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy.

10. Children's Privacy

Our Service is not intended for users under 18 years of age. We do not knowingly collect information from children. If you believe we have collected information from a child, please contact us immediately.

11. California Privacy Rights (CCPA)

California residents have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information is collected, to delete personal information, and to opt-out of the sale of personal information. We do not sell personal information.

12. GDPR Compliance (EU Users)

If you are in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR), including rights to access, rectification, erasure, restriction of processing, data portability, and objection. Our lawful basis for processing is your consent and contractual necessity.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. You are advised to review this Privacy Policy periodically.

14. Data Controller Information

Under GDPR and Polish data protection laws, the data controller is:

15. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data protection rights, please contact us.