Privacy Policy

Data controller

The data controller for this website is:

No data protection officer is currently appointed. We process only the limited data described below.

What data we collect and why

• Account data: email address, authentication tokens, and user ID — needed to create and secure your account and to provide the service (legal basis: contract performance).
• 3D models and project data: files uploaded by you or your agent, color mappings, preview settings, and project metadata — stored so you can preview, quote, and request production (legal basis: contract performance).
• Shipping addresses: name, address, and contact details required to deliver physical prints — collected only when you place a production request (legal basis: contract performance).
• Usage analytics: anonymous page-view metrics and aggregate visit data — used to understand how the service is used and to improve it. We do not use third-party advertising cookies or trackers (legal basis: consent for analytics, legitimate interest for essential security and reliability logs).
• API key metadata: hashed key identifiers and scope records — used to authenticate agent requests and protect your account (legal basis: contract performance and legitimate interest in security).

Cookies and storage

We use only essential authentication cookies and local storage to keep you signed in. The cookie banner lets you choose whether to allow analytics. We do not sell tracking data or use advertising cookies.

Hosting and subprocessors

The application is hosted on the Lovable platform. The underlying database, authentication, and storage services are provided by Lovable Cloud. No other third-party services receive your personal data for processing unless required to fulfill a production request (e.g., shipping carriers) and only with your explicit submission.

How long we keep data

We keep your personal data only as long as necessary to provide the service or to comply with legal obligations. Account data and uploaded models are kept until you delete your account or request deletion. You can delete your account and its data from your settings at any time.

Your rights

Under GDPR you have the right to:

• access the personal data we hold about you,
• request correction of inaccurate data,
• request erasure ("right to be forgotten"),
• restrict or object to processing,
• receive your data in a portable format, and
• withdraw consent at any time.

To exercise these rights, contact paul@leviocast.com. We will respond within the time limits required by law.

Changes to this policy

We may update this policy as the service evolves. The latest version is always available at this URL. Material changes will be communicated by email or through the application.