Privacy Policy

1. Overview

This Privacy Policy describes how Parker Drouillard ("we," "us," or "our"), operating MyPhoto3D, collects, uses, and protects your personal information. We are committed to handling your data responsibly and in accordance with applicable Canadian privacy legislation, including the Personal Information Protection and Electronic Documents Act (PIPEDA).

2. Information We Collect

We collect the following information when you use the Service:

• Account information — your name and email address, provided through Google or GitHub when you sign in via OAuth
• Payment information — your payment is processed by Square. We do not store your credit card details. We retain a record of the transaction amount, currency, and a payment reference ID provided by Square
• Photos you upload — the photos you submit to generate an STL file
• Order history — records of the items you have ordered and the status of each order
• Usage data — a count of how many STL files you have generated in a given period, used to enforce our fair use policy

3. How We Use Your Information

We use your information solely to operate the Service:

• To authenticate your account via Google or GitHub
• To process your payment through Square
• To generate your requested STL file
• To deliver your STL file by email via Resend
• To enforce fair use limits on your account
• To provide customer support when you contact us

We do not use your information for marketing, advertising, or any purpose beyond operating the Service.

4. Photos

Photos you upload are used exclusively to generate your requested STL file. They are stored temporarily on our servers and are automatically deleted within 24 hours of your order being processed. We do not use your photos to train machine learning models, improve our systems, or for any purpose other than generating your STL file.

5. Third Party Services

We use the following third party services to operate MyPhoto3D:

• Google and GitHub — for account authentication via OAuth. Their respective privacy policies apply to data they collect during sign-in
• Square — for payment processing. Square receives your payment details directly. We do not handle or store your card information. Square's privacy policy applies to data they collect
• Resend — to deliver your STL download link by email. Your email address is transmitted to Resend for this purpose
• Cloudflare — for network security and performance. Cloudflare may process network-level data such as IP addresses as traffic passes through their infrastructure

6. Cookies

We use a single session cookie to keep you signed in. This cookie is strictly necessary for the Service to function and does not track you across other websites. We do not use advertising cookies, analytics cookies, or any third party tracking cookies.

7. Data Retention

• Photos — deleted within 24 hours of order processing
• STL files — deleted within 24 hours of order processing
• Account and order data — retained indefinitely while your account remains active. If you request deletion of your account, we will remove your personal information within a reasonable timeframe

8. Your Rights

Under PIPEDA, you have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your account and associated personal data
• Withdraw consent to the collection and use of your personal information, which will result in termination of your account

To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days.

9. Data Security

We take reasonable technical measures to protect your personal information, including encrypted connections (HTTPS), secure credential storage, and automatic deletion of uploaded files. No method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

9a. Disclosure to Authorities

We do not share your personal information with law enforcement or government authorities except where we are required to do so by law. Notwithstanding any other provision of this Privacy Policy, if we become aware of uploaded content that we reasonably believe constitutes child sexual abuse material (CSAM), we are legally required to report such content to the Canadian Centre for Child Protection at Cybertip.ca and to relevant law enforcement authorities. Such a report may include personal information associated with the relevant account. This reporting obligation takes precedence over our normal data handling practices.

10. Children's Privacy

The Service is intended for users who are 18 years of age or older. We do not knowingly collect personal information from anyone under the age of 18. If you believe a minor has provided us with personal information, please contact us and we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a revised date. Your continued use of the Service after such changes constitutes your acceptance of the updated policy.

12. Contact

If you have any questions or concerns about this Privacy Policy or how we handle your personal information, please contact us at [email protected].