Privacy Policy

Last updated: June 10, 2026

MakeSplat is operated by 3Dish, Portugal ("we"). This policy explains what personal data we process, why, and your rights under the GDPR.

What we collect

• Account data — email address and authentication data, managed by our sign-in provider Clerk.
• Payment data — handled entirely by Stripe; we never see or store card numbers. We store your credit balance and transaction history.
• Content — videos you upload (deleted automatically within 7 days) and the 3D splat files we generate (retained so you can re-download them).
• Usage data — API request logs, scan parameters, processing times, and IP addresses in server logs (retained ~30 days for security and debugging).

Why we process it (legal bases)

• To provide the Service you signed up for — performance of contract (Art. 6(1)(b) GDPR).
• To secure the Service, prevent abuse, and debug failures — legitimate interest (Art. 6(1)(f)).
• To comply with tax and accounting obligations — legal obligation (Art. 6(1)(c)).

We do not sell your data, run ads, or use your content to train AI models.

Processors we rely on

• Clerk (US) — authentication
• Stripe (US/IE) — payments
• Fly.io (US, servers in Paris, FR) — application hosting and database
• Cloudflare (US, EU jurisdictions) — file storage (R2)
• RunPod (US/EU data centers) — GPU processing of your videos
• PostHog (US) — product analytics and session replay

Transfers outside the EEA are covered by EU Standard Contractual Clauses and/or the EU-US Data Privacy Framework where applicable.

Retention

• Uploaded videos: deleted within 7 days, automatically.
• Generated splats: kept until you delete them or close your account.
• Account and billing records: as long as your account exists, plus statutory retention for invoices.
• Server logs: ~30 days.

Your rights

You can access, correct, export, or delete your personal data, object to processing, and lodge a complaint with a supervisory authority (in Portugal: CNPD). To exercise any right, email support@makesplat.com — we respond within 30 days. Deleting your account removes your content and personal data, except records we must keep by law.

Cookies and analytics

We use essential cookies (session/authentication via Clerk) and first-party analytics cookies. No advertising or cross-site tracking cookies. For aggregate site statistics we use Cloudflare Web Analytics (cookieless). We also use PostHog to understand how the product is used — page views, feature usage, and session replays in which typed input is masked by default. This data is used solely to improve MakeSplat and is never sold or shared for advertising.