1. Data Controller

Tekno3D Labs LLC is the data controller for personal data processed through the Platform.
30 N Gould St Ste R, Sheridan, Wyoming 82801, USA
Privacy contact: [email protected]

2. What Data We Collect

2.1 Account Data (Discord OAuth and Hub)

When you log in via Discord OAuth we receive and store your Discord user ID (numeric) and display name. We do not receive your Discord email, password, phone number, or any other Discord account data. When you log in with a Hub account we also store the email address you register with.

2.2 Generation Job Data

Every generation request logs job metadata: your account ID, prompt text, model and provider selected, settings as JSON, credits deducted, your IP address, and timestamp. Where a job is not on the session path in Section 6A, we may also log reference media URLs and a result URL on cloud storage.

Interactive jobs run in the user-controlled session described in Section 6A. For those jobs we do not keep the input files or the output file on our servers or long-term cloud storage after you wipe them or after the 24-hour auto-wipe. Job metadata for those sessions is still logged as above and follows the 30-day retention in Section 6.

2.3 Reference images

The Platform does not operate an Identity Lock, face-swap, or stored face-profile product. We do not keep a reusable face library linked to your account.

If you upload a reference image or reference video, it is used only to run that generation. Those files lock for the job, then wipe when you hit RESET SESSION — New Edit, end the session, or refresh the browser. They are not saved to a gallery and are not used to train models.

Reference media is still sent to the inference provider for that job and to Sightengine for age estimation before generation. That is not long-term storage of a face profile on our systems.

2.4 Voice Data (Interactive Persona)

When you upload an audio clip to clone a voice for an Interactive Persona, your audio is transmitted to Alibaba Cloud DashScope (Qwen Voice Enrollment API). We do not store the raw audio on our servers. The resulting DashScope voice ID is stored linked to your persona.

2.5 Interactive Persona Conversation Data

When you use Interactive Persona chat we store messages sent and received, AI-generated memory summaries for consistency, and persona configuration (name, personality, backstory). All linked to your account ID.

2.6 Payment Data

All payment processing is handled by Stripe, Inc. We do not store card numbers or banking details. We receive from Stripe: payment confirmation, credit amount purchased, and your account ID as checkout metadata. Stripe’s privacy policy: stripe.com/privacy.

2.7 Technical Data

• IP addresses — logged per generation job
• WordPress authentication cookies — session management only
• WooCommerce session cookies — purchase processing only

3. How We Use Your Data

• To authenticate you and maintain your session
• To process generation requests and route them to the appropriate AI provider
• To track and deduct your credit balance
• To deliver the generated file so you can download or wipe it
• To enable Interactive Persona persistence across sessions
• To process subscription payments and manage subscription status
• To detect and prevent abuse, policy violations, and fraud
• To respond to support requests
• To comply with legal obligations

We do not use your data for advertising, marketing profiling, model training on your uploads, or sale to third parties.

4. Data Sharing and Third-Party Processors

We share data only with service providers necessary to operate the Platform:

We do not sell your personal data to any third party.

International transfers: Data sent to providers in the United States and Singapore may not be subject to the same data-protection standards as your home country. Where required by law we rely on Standard Contractual Clauses or equivalent mechanisms.

5. Voice Data

Voice audio uploaded for Interactive Persona is transmitted to Alibaba Cloud DashScope and is not stored on our servers. The DashScope voice ID is stored linked to your persona. Deleting it in persona settings also triggers a deletion request to DashScope.

5A. API Accounts and API Media

API account records store your account ID, display name, email, a SHA-256 hash of your API key, key prefix, balance, rates, and total spend. We cannot recover a lost key. Every API request logs account, model, resolution, duration, amount charged, job status, and timestamp. Prompts follow the same retention as interactive use (Section 6). Media submitted through /upload is stored on Cloudflare R2 in an account-scoped folder and may be deleted through /data/delete. CDN caches may serve a previously cached copy for a limited period after deletion.

The interactive session wipe in Section 6A does not auto-delete API media placed in your account folder through /upload unless you delete it.

Every reference image and video is sent to Sightengine for age estimation before generation. We store the result keyed to a hash of the media URL for thirty days. This processing is required to meet legal and provider obligations and cannot be opted out of while using the Platform.

If you resell API access, we receive no information about your downstream users. You are the data controller for those users.

6. Data Retention

6A. Sessions — You Manage the Files

Interactive generations run in a private session you control. This is separate from the 30-day job-record retention in Section 6.

The session is private. Inputs you submit for that session and the output produced in that session belong to you.

What you can do:

• Generate, then download the file.
• Optionally wipe the generated file from our storage right after download.
• If you do not wipe it, the file auto-wipes within 24 hours.

Reference uploads: lock for the job, then wipe when you hit RESET SESSION — New Edit, when you end the session, or when you refresh the browser. No logout is required. Face uploads are for that job only and are not used for training.

Deleted on wipe / auto-wipe / RESET SESSION:

• Reference files you uploaded for that session
• The generated file we stored so you could download it

Those files are deleted from our servers and cloud object storage. They are not saved to a long-term gallery or account library on our systems. CDN caches may serve a previously cached copy for a short period after deletion. After deletion we cannot restore the file.

Not deleted by session wipe:

• Job metadata (prompt, model, settings, account ID, IP, timestamps) — up to 30 days
• Media already sent to an inference provider or to Sightengine for that job — we cannot retract it from that provider
• Interactive Persona conversation history and voice IDs
• API media in an account folder uploaded via /upload until you delete it

Session files are scoped to your logged-in account and are not listed on a public gallery.

7. Your Rights

Contact [email protected]. We respond within 30 days.

• Access — copy of personal data we hold
• Erasure — account and associated data within 30 days of a verified request
• Rectification — correction of inaccurate data
• Data Portability — machine-readable export
• Object — where we rely on legitimate interest
• Lodge a Complaint — EU/EEA/UK users may contact their DPA (edpb.europa.eu)

8. Cookies

Strictly necessary cookies only: WordPress authentication, WooCommerce checkout session, Discord OAuth session. No advertising, analytics, or cross-site tracking cookies on Platform pages.

9. Third-Party Content Moderation

Alibaba Cloud DashScope applies automated content moderation to requests on their infrastructure. Certain models on our account operate under a commercial agreement in which that provider-level moderation is disabled and our own layer applies instead. Independently of that agreement, DashScope may reject inputs containing identifiable real human faces.

10. Children’s Privacy

The Platform is strictly for adults aged 18 and over. We do not knowingly collect personal data from minors. If we become aware a minor has used the Platform, we will terminate the account and delete associated data. Contact [email protected].

11. Security

• HTTPS for data in transit
• Database access restricted to the application server
• Cloudflare protection for stored assets
• Discord OAuth / Hub accounts — no password database for Discord logins
• IP-based access logging for anomaly detection

In a breach affecting personal data we will notify affected users and relevant authorities as required by law within 72 hours of becoming aware.

12. Updates

Material changes are indicated by an updated “Last Updated” date. Continued use after changes constitutes acceptance.

13. Contact

Tekno3D Labs LLC
30 N Gould St Ste R, Sheridan, Wyoming 82801, USA
Privacy: [email protected]
General: [email protected]
Legal / DMCA: [email protected]