Privacy Policy

Who we are

Kairo3D ("we", "us") runs the website kairo3d.com, where you can turn images and text prompts into 3D models using third-party AI models. This policy explains what personal data we handle when you use the site, why we need it, who else receives it, and the choices you have.

If you have a question about your data, email us at support@kairo3d.com.

The short version

• We collect what we need to run your account, generate your models, take payments and keep the service safe.
• To generate a model, your image or text prompt is sent to fal.ai and, depending on the engine, to the company that makes that model.
• Your uploads and generated models are stored on Cloudflare and are private to your account.
• We don't sell your personal data, and we don't use your uploads, prompts or models to train AI models.
• You can ask us to give you a copy of your data or to delete it at any time.

What we collect

Account information

• Your email address, and your name and profile picture if you provide them. If you sign in with Google, Google shares these with us.
• Your password, if you sign up with email. We store only a secure hash of it, never the password itself.
• Sign-in sessions, including the IP address and browser information recorded when you sign in.

What you upload and create

• Images you upload for image-to-3D (JPG, PNG or WebP).
• Text prompts you write for text-to-3D.
• Generation details: the engine you picked, your settings, the status of each task and the credits it used.
• Generated 3D models (GLB files) and preview images made from them.

Please only upload images you have the right to use, and avoid images that show other people's personal information (such as faces, documents or addresses) unless you have their permission.

Credits and payments

• Your credit balance and credit history, your orders and your subscription status.
• Payments are handled by payment processors (Stripe, Creem, Alipay or WeChat Pay, depending on what is offered at checkout). They send us the order reference, amount, currency, payment status and the email address linked to the payment. We never see or store your full card number.

Support messages

• Messages and attachments you send us through support tickets or by email.

Technical data

• IP address, browser and device type, and server logs. We use these for security, abuse prevention (such as rate limits) and fixing problems.

Cookies and similar storage

• Essential cookies keep you signed in, remember your language and remember your cookie choice. The site doesn't work properly without them.
• Your browser may also store simple preferences locally, such as light or dark theme.
• Analytics: if we turn on analytics (Google Analytics or Plausible), it records how the site is used, such as pages visited, referring site, device type and approximate location. Google Analytics can use cookies; Plausible does not use cookies.
• Advertising: if we turn on Google AdSense, Google may use cookies to show and measure ads.
• If we show a cookie banner, Google Analytics cookies and AdSense are only used after you accept, and you can change your choice later from the banner.

Free browser tools

The GLB to STL converter and the STL viewer run entirely in your browser. Files you open in them are not uploaded to us. The same is true when you convert a model you have already generated to STL, OBJ or PLY.

How we use your data

• To create your account, sign you in and keep your account secure.
• To run your generations: send your input to the engine you chose, store the result and show it in My creations.
• To charge credits, process purchases and subscriptions, and return credits automatically when a generation fails.
• To answer support requests and send service emails, such as email verification or password reset.
• To prevent fraud and abuse and to enforce our Terms of Service.
• To understand, in aggregate, how the site is used so we can improve it.
• To meet our legal, tax and accounting obligations.

Where the law requires a legal basis (for example under the GDPR), we rely on: performing our contract with you (running the service you signed up for), our legitimate interests (security, fraud prevention and improving the service), your consent (optional analytics and advertising cookies, where consent is required) and legal obligations (such as keeping payment records).

We do not sell your personal data. We do not use your uploads, prompts or generated models to train AI models.

Who receives your data

We share data only with the service providers we need to run Kairo3D, and only what each one needs:

• fal.ai runs the AI engines. It receives your input image (as a link to the uploaded file) or your text prompt, together with the generation settings, and returns the 3D model.
• Model makers. Depending on the engine you pick, fal.ai may pass your input to the company that makes the model so it can run the generation: Tripo AI (Tripo H3.1), Hyper3D / Deemos (Rodin) or Tencent (Hunyuan 3D). TRELLIS and TRELLIS 2 (Microsoft) and Pixal3D (TencentARC) are open-source models served through fal.ai.
• Cloudflare hosts the website and our database, and stores your uploaded images and generated models (Cloudflare R2).
• Payment processors (Stripe, Creem, Alipay or WeChat Pay) process your payment details directly when you buy credits or a plan.
• Google, if you choose to sign in with Google.
• Our email delivery provider (Resend) sends account and service emails.
• Analytics and advertising providers (Google Analytics, Plausible, Google AdSense), only if we turn them on, as described above.

Each of these providers handles data under its own terms and privacy policy. We may also disclose data if the law requires it, to protect the rights and safety of our users or of Kairo3D, or as part of a merger or sale of the business, in which case this policy continues to apply to your data.

International transfers

Our providers operate in several countries, including the United States, and may process your data outside the country where you live. Where the law requires it, we rely on appropriate safeguards for these transfers, such as the standard contractual clauses offered by our providers.

How long we keep your data

• Your creations: generated models, together with the input images and prompts used to make them, are kept with each task until you delete them or close your account.
• Your account: kept while your account is open. When you ask us to close it, we delete your account, uploads and creations within 30 days, except the records described below.
• Payment and order records: kept for as long as tax and accounting law requires, even after your account is closed.
• Logs and security data: kept for a limited time and then deleted.
• Support messages: kept for as long as we need them to help you and to keep a record of the request.

Deleted data can remain in our providers' backups for a short time before it is overwritten. Copies held by fal.ai or a model maker while running a generation are governed by their own retention policies.

Your rights

Depending on where you live, you may have the right to:

• see the personal data we hold about you and get a copy of it (export);
• correct data that is wrong;
• have your data deleted or your account closed;
• object to or restrict certain uses of your data, and withdraw consent you have given;
• complain to your local data protection authority.

You can download your models from My creations at any time. For anything else, including deleting your account or getting a full export of your data, email support@kairo3d.com from the email address on your account. We may need to confirm your identity first, and we will reply within 30 days.

Security

We protect your data with encryption in transit (HTTPS), access controls and private file storage. No online service is perfectly secure, so please use a strong password and tell us straight away if you notice anything suspicious on your account.

Children

Kairo3D is not meant for children under 13, and we don't knowingly collect their personal data. If you are under 18, or under the age of digital consent where you live, you need permission from a parent or guardian to use the service. If you believe a child has given us personal data, email us and we will delete it.

Changes to this policy

We may update this policy when the service or the law changes. We will change the date at the top of this page, and for significant changes we will also let you know by email or on the site before they take effect.

Contact

Questions or requests about your privacy: support@kairo3d.com.