Privacy Policy

Illusio 3D — illusio3d.com and the builder at app.illusio3d.com

Who is responsible for your data

Santeri Salmi, Finland, is the controller of the personal data described here. Invoicing, including for credit-pack purchases, is handled through Premium Audio osk (Finnish business ID 2616623-6).

For anything on this page — a question, a request, a complaint — write to [email protected].

We have not appointed a Data Protection Officer, and are not required to.

The short version

Illusio 3D is a design tool. The things you make in it — your screen measurements, your reference photographs, your 3D scenes — are yours. They are stored so that you can come back to them, and they are not read, mined, sold, or used to train anything.

Analytics is off until you turn it on. If you decline, no analytics script is ever loaded.

Everything we store sits on servers in the EU.

What we collect, and why

A session, before you have an account

The builder creates an anonymous session the first time you open it, so that you can start work without signing up. This is a random identifier stored against your browser and on our server. It carries no name, no email, and no address.

If you later create an account, that session becomes your account. If you never do, it stays anonymous.

• Legal basis: our legitimate interest in letting you try the tool without handing over your details first (GDPR Art. 6(1)(f)).
• Kept for: 30 days after your last visit, if you never signed up and never saved anything. Then deleted automatically.

Enforced, not aspirational: a scheduled job deletes them nightly, and skips any session that has credits, has ever purchased, or has left a project, file, preset or bug report behind.

Your account

If you create one, we store your email address and the time you signed in. If you set a password, it is stored as a salted hash by our authentication provider — it is never visible to us, and cannot be recovered, only reset.

• Legal basis: performance of our agreement with you (Art. 6(1)(b)).
• Kept for: as long as the account exists. Delete it and this goes with it.

What you make

Projects you save to the cloud, and the files you upload into them — reference photographs, images, video, 3D models, fonts. Also your saved presets.

Reference photographs deserve a specific mention. They are pictures of real places, often taken on site, and they may show people, signage, or an identifiable location. They are stored privately, readable only by your own account, and we do not look at them except where you have specifically asked us to help with a project.

• Legal basis: performance of our agreement with you (Art. 6(1)(b)).
• Kept for: as long as you keep the project. Deleting a project deletes its files. Deleting your account deletes all of them.

Licences and credits

If you hold a Team licence, we store the email address it is granted to, its expiry date, and an internal note. If you buy export credits, we store the balance and a record of each transaction — which price was bought (as a credit amount, not a currency figure) and Paddle's own transaction and event identifiers, received from Paddle when the purchase completes. Your payment details, billing address and anything else Paddle collects to process the purchase stay with Paddle; see "Who else processes it" below.

A licence is keyed to an email address rather than to an account, so that it can be granted before you sign up and survives you deleting and remaking an account.

• Legal basis: performance of our agreement with you (Art. 6(1)(b)); and, for transaction records, our legal obligations under accounting law (Art. 6(1)(c)).
• Kept for: the life of the licence, plus six years from the end of the accounting year for anything with a payment attached.

Bug reports

When you send feedback from inside the app, we receive your message, the reply address you choose to give (optional), and an automatic snapshot of your setup:

Operating system and version · browser and user-agent string · graphics card and WebGL limits · window and display size · pixel ratio and UI zoom · CPU cores · device memory · language · time zone · online status · app build · which stage and view you were in · your screen resolution and physical size · whether calibration had succeeded · how many objects were in the scene and of what kinds · render settings · theme · whether you were signed in · how long the session had been open.

This exists because "it looks wrong on my machine" is not a fixable report without it. It is shown to you before you send, and nothing about your project's content is included — no text, no images, no geometry.

• Legal basis: our legitimate interest in diagnosing and fixing faults (Art. 6(1)(f)).
• Kept for: 24 months.

A personal video link you were sent

If someone sends you a link to a personal watch page on illusio3d.com/v/…, that link was made for you, using your name and email address, which the sender gave us. When you open it we record that you did, and while you watch we record how far into the video you got and how long you watched. If the sender put a button under the video, we also record whether you pressed it. We also keep your country (taken from the request, never from an address we store), the type of device (phone, tablet or desktop) and the browser family. We do not store your IP address or your browser's full identification string, and we do not put a tracking pixel in the email.

None of this is shown to anyone but the person who sent you the link. It is used only to see whether the video reached you, and it is not used to build a profile or for anything else. These pages are not indexed by search engines, and the video files sit on a separate address with no public listing.

To have your name, email address and everything recorded about you deleted, write to [email protected] — it is deleted in one step, for every link made for your address.

• Legal basis: our legitimate interest in knowing whether a message we sent to you was received (Art. 6(1)(f)). You may object at any time.
• Kept for: 12 months after your last activity on the link, or after the link was made if it was never opened. A scheduled job deletes it nightly.

The Unwrap tool

At app.illusio3d.com/unwrap you can choose a video of a screen and have it flattened. The video is read on your own computer and the flattened file is made there too: it is not uploaded, stored or sent to us, and nothing about its contents is recorded. If you are signed in and export a video without the watermark, the credits spent are recorded as for any other export, with the amount and the date.

Analytics — only if you say yes

We ask once, in a bar at the bottom of the screen. If you allow it, we record product events: an export ran, a template was applied, a purchase completed — together with your user identifier and, if you are signed in, your email address. Never the contents of your work.

If you decline, or simply ignore the bar, the analytics script is never loaded and no identifier is created. Declining is not a setting we then work around.

You can change your mind either way under Settings → Privacy.

• Legal basis: your consent (Art. 6(1)(a)), which you may withdraw at any time.
• Kept for: 12 months.

Stored on your device only

The app keeps a few preferences in your browser's local storage. These never reach us:

illusio3d.theme · illusio3d.uiscale · illusio3d.rail-width · illusio3d.timeline-height · illusio3d.timeline-open · illusio3d.camrig-shut · illusio3d.analytics-consent · illusio3d.trial-resume · illusio3d.lastProject

illusio3d.lastProject holds the identifier of the last project you had open, so reloading the page returns you to it. It is an identifier only — no part of the project itself — and it is meaningless to anyone who cannot already open that project.

Your sign-in token is also held there, which is what keeps you signed in between visits.

We use no advertising cookies and no third-party tracking. If you allow analytics, PostHog sets its own identifier at that point, and not before.

Who else processes it

We use a small number of providers. Four of them are bound by a data processing agreement and may not use your data for their own purposes — Paddle is different, and the paragraph after the table says how.

Paddle is not just a processor working to our instructions. As the Merchant of Record for every credit-pack purchase (see Terms of Service §6), Paddle is an independent controller for your payment data in its own right — it decides its own purposes for holding it: billing, tax, fraud prevention, and its own legal obligations. See Paddle's own privacy notice at https://www.paddle.com/legal/privacy for what that covers.

Where it goes

Everything we store is stored in the EU.

Cloudflare operates a global network, so a request may be served from an edge location outside the EEA, and its logs may be processed there. Where a provider processes personal data outside the EEA, that transfer is covered by the European Commission's Standard Contractual Clauses, which each of the four processors above incorporates into its data processing agreement. Paddle isn't one of the four — as an independent controller it covers its own transfers, described in the privacy notice linked above.

We do not sell your data, and we do not share it with anyone beyond the providers above, except where the law requires it.

Decisions, and whether you have to give us anything

No automated decision-making, and no profiling. Nothing here decides anything about you by machine — not your access, not your pricing, not what you are shown. A Team licence is granted by a person reading your request.

Giving us your email address is necessary to have an account, hold a licence, or buy credits; without it those things cannot work, though the builder itself can be used without an account at all. Everything else is optional: your name and company on a contact-form message help us answer it, a reply address on a bug report is the price of an answer rather than the price of being heard, and analytics is refused by default.

Your rights

Under the GDPR you may ask us to:

• give you a copy of your data, or a portable export of it;
• correct anything wrong;
• delete it — you can delete projects and your whole account from inside the app, and we will do it by hand on request;
• restrict or object to processing we base on legitimate interests, including bug-report diagnostics;
• withdraw consent to analytics, at any time, with no effect on anything else.

Write to [email protected]. We will answer within one month.

We would rather hear from you directly, and will try to put right anything we have got wrong. That is not a condition of anything: you have the right to lodge a complaint with a supervisory authority at any time — in Finland the Office of the Data Protection Ombudsman (Tietosuojavaltuutetun toimisto), https://tietosuoja.fi, or the authority where you live.

Security

Data is encrypted in transit and at rest. Access to your projects and files is enforced at the database level, row by row, so that one account cannot read another's work. Passwords are hashed, never stored in readable form, and cannot be retrieved by us or by anyone with administrative access.

Administrative access to accounts is limited to the controller named at the top of this page, and is used to grant licences, answer bug reports, and honour the requests described above.

Children

Illusio 3D is a professional tool and is not directed at children. We do not knowingly collect data from anyone under 16. If you believe a child has created an account, write to us and we will remove it.

Changes

If we change how we handle your data in a way that matters, we will update this page and, where the change is significant, tell you in the app. The date at the top always reflects the current version.