Privacy Policy
The short version
- We collect what we need to run your account, make your items and take payments: your Google email and name, the photos you upload, what you make, and payment records.
- We never see or store your full card number. Stripe handles it.
- We don't sell your personal data, and we don't use it for advertising.
- You can ask us for a copy of your data, or to correct or delete it, at [email protected].
This summary helps you read the policy; it doesn't replace it.
- 1. Who we are
- 2. What we collect
- 3. How we use it
- 4. Who we share it with
- 5. Cookies and browser storage
- 6. How long we keep it
- 7. Your rights
- 8. Where your data is processed
- 9. Security
- 10. Children
- 11. Changes
- 12. Contact
1. Who we are
Kanki3D (the studio at studio.kanki3d.com and the website at kanki3d.com) is run by KANKI 3D LLC, 1004 Edith Ave, Adrian, MO 64720, United States ("we", "us"). Payments are taken by RAWATIB LLC, 8206 Louisiana Boulevard Northeast, Albuquerque, NM 87113, United States, which is the seller of record (see the Terms, section 5). Together they are responsible for the personal data described here.
2. What we collect
- Account: the email address and name your Google account shares when you sign in, your plan, item balance, settings, and when you accepted the Terms (with the IP address you accepted from).
- What you upload and make: the photos you upload, the previews, 3D items, fits and outfits made from them, and the notes you type for a redo.
- Payments: what you bought, when, the amount, taxes, refunds and disputes. Stripe gives us your billing country and a fingerprint of your card (a code that tells whether two payments used the same card, not the card number).
- Downloads: which files your account downloaded and when. Downloaded files carry hidden marks that tie them to your account, so leaked copies can be traced (see the Terms, section 9).
- Technical and security data: IP address, browser type, sign-in sessions, and records of requests our abuse protection refused.
- Waitlist and access requests: the email address, and anything else you type in the form (for example your server or channel name).
- Support: what you send us by email or in a Discord ticket.
3. How we use it
- To run your account and make, store and deliver your items (performing our contract with you).
- To take payments, keep accounting records and handle refunds and disputes (contract and legal obligations).
- To prevent abuse, fraud, account sharing and leaks of items, and to keep the service secure (our legitimate interests).
- To answer support requests, and to send you emails about your account, your access invite or changes to these policies.
- To send news about Kanki3D only if you joined the waitlist or asked for it; every such email has an unsubscribe link.
- To improve the service, for example by checking why an item failed.
We don't sell or rent your personal data and we don't share it for cross-context advertising.
4. Who we share it with
Only with service providers that help us run Kanki3D, under contracts that limit what they may do with it:
- Stripe, for payments (Stripe's own privacy policy applies to the card details you give it);
- Google, for sign-in;
- Cloudflare, for the website, security checks and traffic protection;
- our server hosting and backup storage providers;
- the AI model providers that turn your photos into previews and 3D items (they receive the photos and images needed for that step);
- our email delivery provider, for invites and waitlist emails;
- Discord, if you contact us there.
We may also share data when the law requires it, to protect our rights or users (for example in a leak or fraud case), or with a company that takes over the service, which we would tell you about.
5. Cookies and browser storage
- A sign-in cookie keeps you signed in to the studio (needed for the service).
- If you open a creator or invite link, a cookie remembers that link for 30 days so it can be tied to a new account.
- The studio keeps some settings in your browser's local storage (for example which panels you opened).
- Cloudflare may set cookies for security checks and collects basic traffic statistics.
We don't use advertising or third-party tracking cookies.
6. How long we keep it
- Account data, uploads and items: while your account is open. When you or we close it, we delete your uploads and items from the studio within 30 days.
- Payment, tax and download records: as long as the law requires (usually up to 7 years) or a dispute or leak case needs them.
- Backups: deleted data can stay in encrypted backups for up to 6 months, until they are replaced.
- Waitlist emails: until you unsubscribe or ask us to delete them.
- Security records: up to 12 months.
7. Your rights
Wherever you live, you can ask us for a copy of your personal data, to correct it, to delete it, or to stop sending you news emails. Depending on where you live (for example the EU, the EEA, the UK or California), you may also have the right to receive your data in a portable format, to object to or restrict some uses, and to withdraw consent. We won't treat you differently for using these rights.
Write to [email protected] from your account's email address. We answer within 30 days (or the time your law sets). If you are in the EU, the EEA or the UK and think we got it wrong, you can also complain to your data protection authority.
8. Where your data is processed
We are based in the United States. Our servers, backups and service providers are in the United States and the European Union, and some providers may process data in other countries. Where the law requires it, transfers are covered by safeguards such as the European Commission's Standard Contractual Clauses.
9. Security
The website and studio only work over HTTPS. Card payments are handled by Stripe, which is certified to PCI DSS Level 1, the highest level for payment security; card numbers never reach our servers. Accounts sign in with Google, access to your files is checked on every request, and backups are encrypted. No system is perfectly secure; if a breach affects your data, we will tell you as the law requires.
10. Children
Kanki3D is not for anyone under 16 (see the Terms, section 2). We don't knowingly collect data from children under 16; if you think a child has given us data, write to us and we will delete it.
11. Changes
We will update this policy when what we collect or how we use it changes, and change the date at the top. For important changes we tell you in the studio or by email before they apply.
12. Contact
- Privacy requests: [email protected], or by post to KANKI 3D LLC, 1004 Edith Ave, Adrian, MO 64720, United States.
- Payments: RAWATIB LLC, 8206 Louisiana Boulevard Northeast, Albuquerque, NM 87113, United States, [email protected].
- Everything else: [email protected] or a ticket on our Discord.