Website: text3dlab.com

Company: Itemare OÜ, Registration No. 17309345, Harju maakond, Tallinn, Kesklinna linnaosa, Jõe tn 5, 10151, Estonia

Contact Method: support@text3dlab.com

This policy explains how we collect, use, store and protect your personal data in line with the GDPR.

1. Data We Collect

• Account Data: Email address, username, hashed password, registration date.
• Transaction Data: Order numbers, purchase amounts, currency, timestamps, payment status (we do not store card numbers).
• Prompt & Content Data: Text or image prompts and generated models, stored temporarily to deliver services and ensure compliance with policy.
• Technical Data: IP addresses, device and browser details, log files, usage metrics for security, analytics and fraud prevention.
• Communication Data: Emails, support tickets, feedback and complaints.
• Cookie Data: Information collected via cookies and similar technologies (see Cookie Policy).

2. Purposes & Legal Bases

• Contractual Necessity: To create and manage Accounts, process payments, generate models and provide customer support.
• Legitimate Interests: To prevent fraud, monitor compliance, secure the Service, improve performance and compile aggregated statistics.
• Legal Obligations: To meet tax, accounting and legal reporting obligations and respond to lawful requests.
• Consent: For marketing communications and non‑essential cookies. Users can withdraw consent at any time.

3. Data Sharing

We share your data only as needed:

• Payment Processors: To complete transactions (we do not store card details).
• Hosting & IT Providers: For infrastructure, security and maintenance.
• Analytics Providers: Anonymised usage data may be shared if you consent to analytics cookies.
• Moderation & Safety Tools: Automated systems that detect prohibited content for compliance with our Terms.
• Public Authorities: Where required by law or to report prohibited content (e.g., child exploitation or terrorism).

We do not sell personal data.

4. Data Security

Itemare OÜ employs industry‑standard security measures—encryption, pseudonymisation, secure servers, strict access controls and regular audits—to protect your data against unauthorised access or disclosure. However, no system is completely secure; if a data breach occurs, we will follow statutory notification procedures.

5. Data Retention

• Account Data: Retained while your Account is active and up to three years after closure.
• Transaction Data: Retained for at least five years for accounting and tax compliance.
• Prompt & Content Data: Stored only as long as necessary to provide services, enforce policies and investigate misuse, then deleted or anonymised.
• Technical Logs: Retained up to 12 months for security monitoring.
• Cookie Data: Persistent cookies retained for up to 12 months.

6. Your Rights

You have the right to:

• Be informed about our data processing;
• Access your personal data;
• Rectify inaccurate or incomplete data;
• Erase data under certain circumstances;
• Restrict processing;
• Data portability (receive a copy in a machine‑readable format);
• Object to processing based on legitimate interests or direct marketing;
• Not be subject to automated decision‑making producing legal or significant effects.

To exercise these rights, contact Itemare OÜ using the details provided. We may require proof of identity and will respond within one month. You may also lodge a complaint with the Estonian Data Protection Inspectorate or another supervisory authority.

7. International Transfers

If personal data is transferred outside the European Economic Area, we ensure it is adequately protected through Standard Contractual Clauses, adequacy decisions or similar safeguards.

8. Complaints & Contact

For questions or concerns about this policy, contact Itemare OÜ via the contact method displayed on the Website — support@text3dlab.com. You have the right to file a complaint with a supervisory authority if you believe your data has been processed unlawfully.

9. Updates

We may update this Privacy Policy to reflect changes in law or processing practices. Updated versions will be posted with a new Last Updated date. Continued use of the Service after an update indicates acceptance.