1. Who is responsible
The controller is not yet published, not yet published. For privacy questions, write to dondiviela@maindsolutions.io.
2. What we collect
- Account data: your email address and language preference.
- Design data: the image you upload, your notes, the designs we create and your refinement requests.
- Order data: name, shipping address, email, a phone number only if a carrier needs it, any gift note, and your order history.
- Payment data: handled by Stripe. We receive the payment status and limited details, never your full card number.
- Technical data: security logs and privacy-preserving measurements of performance and usage (page type, device class and a non-reversible identifier that changes daily) and, only if you allow it, how you first found us (the kind of site, the page you arrived on and the date). No advertising trackers.
- Notice data: if you send us an intellectual property notice, your name, email address, any organisation, and the details and statements in your notice.
3. Why we use it and on what legal basis
- To design, produce and deliver your piece and to run your account: performance of our contract with you (Art. 6(1)(b) GDPR).
- To keep invoices and order records: our legal obligations (Art. 6(1)(c) GDPR).
- To keep the service secure, prevent abuse and measure performance: our legitimate interests (Art. 6(1)(f) GDPR).
- To handle intellectual property notices and document how we handled them: our legal obligations and legitimate interests (Art. 6(1)(c) and (f) GDPR).
- Marketing emails, listing a design in a public gallery, sharing your original image and using your images to evaluate or improve our design system: only with your separate consent (Art. 6(1)(a) GDPR), which you can withdraw at any time. None of these is required to order.
- To learn which pages and channels inspire new designs, with the optional first-visit cookie: only with your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time in the cookie policy.
4. AI processing and imagery
Your image and design brief are processed by Anthropic’s AI models to create your design. We send only what the design needs, never your name, address or payment details. Automated checks help decide whether a design can be manufactured, and a person reviews every order before production. As part of the design, your image is also checked for content we don’t make and for logos, well-known characters or famous faces, which we interpret in an original way instead of copying. Design previews are computer-generated renders of 3D files, not photographs; illustrations on our marketing pages are labelled as illustrations.
5. Who processes data for us
- Anthropic: AI design processing of your image, brief and design data.
- Vercel: hosting, computing and file storage for the website and design processing.
- Neon: our database for account, design and order records.
- Mailjet: sending transactional emails, such as sign-in codes, design-ready and order updates.
- Stripe: payment processing and fraud prevention.
Some of these providers may process data outside the European Economic Area. Where they do, transfers rely on appropriate safeguards, such as the European Commission’s standard contractual clauses. Each provider applies its own retention to the data it processes, as described in its terms; we don’t promise that providers retain nothing. Design requests processed asynchronously in batches may be held by the provider while the batch runs, and for the period its terms allow.
5a. The AI partners that sculpt your piece’s relief
To sculpt the relief of your piece, two AI partners process images of your design for us, as our processors: only on our instructions and only to make your piece.
- Venice.ai (USA) redraws the picture you uploaded, re-encoded without hidden metadata, as a photograph of a plaster relief. Venice states that it doesn’t store the images or the results, and that the model providers it works with keep nothing (zero data retention).
- fal (Features and Labels, Inc., USA) turns that relief image, never your original picture, into a height map with the image-to-relief model of Hi3D (Oceano HK Holding Ltd, Hong Kong), which runs on servers in the USA and Malaysia. We ask fal not to keep the request; as soon as the height map is in our own storage, we have fal delete its copies, and any file left on fal’s file servers expires within one hour.
- Both receive only the image and a random request number: never your name, email address, account or file name. Neither may use your images to train or improve AI models.
These partners process data outside the European Economic Area. The transfers rely on the European Commission’s standard contractual clauses (Decision (EU) 2021/914) in our data processing agreements, with additional safeguards: we send as little as possible, encrypted in transit, and have it deleted right after processing. We don’t ask for your consent to these transfers: they are part of creating the design you ask us for (performance of our contract with you, Art. 6(1)(b) GDPR). You can ask for a copy of the safeguards at dondiviela@maindsolutions.io.
The relief image and the height map are stored with your design and deleted with it (section 7). You can delete your images and designs at any time from your account page; we then also ask our partners to delete any copy they still hold. You can complain to the Spanish data protection authority, the Agencia Española de Protección de Datos (aepd.es), or to the supervisory authority of your country (section 8).
6. Production partners and carriers
Our jeweler receives your order details and shipping address to finish and ship your piece. Our external manufacturing partner receives only the production 3D file, with no name, address or email. Carriers receive what they need to deliver your parcel.
7. How long we keep data
- Unfinished drafts: deleted after 30 days of inactivity.
- Designs you don’t order: kept for 7 days after the latest result is ready. We send a final email at least one hour before deletion. A new design request pauses deletion while we work and starts a fresh period; viewing or approving a design alone does not extend it. Active checkouts, paid orders and legal holds are protected.
- Uploaded images: deleted once they are no longer needed for an active design or a documented service purpose.
- Orders, invoices and production and quality records: kept for the periods required by commercial, tax and product-safety law, separately from other data.
- Intellectual property notices and how we handled them: kept as long as needed to deal with them and to document our response, including in any dispute.
- Backups expire on a rolling schedule.
8. Your rights
You can request access to your data, a copy in a portable format, correction, deletion, restriction of processing, or object to processing, and you can withdraw any consent at any time. Your account page lets you export your data and delete your account; you can also email dondiviela@maindsolutions.io. Deleting your account removes your designs and personal data, except records we must keep by law, which we keep separately and only as long as required. You also have the right to complain to a data protection supervisory authority, in particular in your country of residence.
10. Security
Data is encrypted in transit. Private files are only reachable through short-lived, authorised links, and staff access is role-based and logged.
11. Changes
We’ll update this policy when our processing changes; the date of the last update is shown on this page.
Sources
External references for facts on this page.
Spotted something inaccurate? Tell us through our contact page. Contact