1. Introduction
xrp3d.ai, a product of 3Dimensions.studio operated byTokenCanvasIO, based in Guernsey, Channel Islands("we," "us," or "our"), is committed to protecting your privacy. This Privacy Policy explains how we collect, use, share, and safeguard your personal information when you use our website and services (the "Service").
By using our Service, you consent to the data practices described in this policy.
2. Information We Collect
2.1 Information You Provide
Wallet Address (NFT Tiers Only)
- Your XRP Ledger wallet address for NFT delivery (NFT+IPFS and NFT+Arweave tiers)
- This becomes publicly visible on the blockchain
- Not required for File Only tier
User Content
- 2D images you upload for conversion
- File metadata (name, size, type, upload timestamp)
Payment Information
- For card payments (File Only tier): Processed by MoonPay (we receive only confirmation, not card details)
- For XRP payments (NFT tiers): Transaction hash and wallet address (public blockchain data)
Communications
- Support inquiries and correspondence
- Feedback and survey responses (if you choose to provide them)
2.2 Information We Collect Automatically
Usage Data
- Pages visited and features used
- Time and date of visits
- Service performance metrics
- Referral source
- Tier selected (File Only, NFT+IPFS, or NFT+Arweave)
Device Information
- IP address
- Browser type and version
- Operating system
- Device identifiers
- Screen resolution
Cookies and Tracking
- Session cookies (essential for service functionality)
- Analytics cookies (to understand usage patterns)
- You can control cookies through your browser settings
3. How We Use Your Information
We use collected information to:
Provide the Service
- Process your 2D images
- Generate 3D models using AI technology
- Mint and deliver NFTs to your wallet (NFT tiers only)
- Upload models to IPFS via Pinata (NFT+IPFS tier)
- Upload models to Arweave blockchain (NFT+Arweave tier)
- Maintain service functionality
Process Payments
- Facilitate transactions via MoonPay (File Only tier) or XRP Ledger (NFT tiers)
- Prevent fraud and unauthorized transactions
- Generate receipts and transaction records
Communicate With You
- Respond to support inquiries
- Send service-related notifications
- Provide updates about your generation requests
Improve the Service
- Analyze usage patterns and trends
- Identify and fix technical issues
- Develop new features
- Conduct research (using anonymized data only)
Enforce Our Terms
- Monitor for prohibited content
- Prevent abuse of the Service
- Comply with legal obligations
Marketing (only with your consent)
- Send promotional emails about new features
- Share anonymized examples of generated models
4. How We Share Your Information
Affiliate Information
- XRP wallet address for commission payments
- Referral code and link performance
- Commission earnings and payment history
4.1 Service Providers
We share information with third-party vendors who provide essential services:
Hyper3D (AI Generation Partner)
- Your uploaded 2D image
- Generation parameters
- Purpose: To convert your image into a 3D model
Pinata (IPFS Storage - NFT+IPFS Tier)
- Your generated 3D model file
- File metadata
- Purpose: To store your model on IPFS and provide permanent access
Arweave Network (Permanent Storage - NFT+Arweave Tier)
- Your generated 3D model file
- File metadata
- Purpose: To permanently store your model on the Arweave blockchain
- Note: Once uploaded to Arweave, data is permanent and cannot be deleted
Cloud Infrastructure Providers
- User Content and Generated Models (temporarily)
- Usage data and logs
- Purpose: To host and deliver the Service
MoonPay (Payment Processor - File Only Tier)
- Transaction amount and description
- Customer email (if provided)
- Purpose: To process card payments
- Note: MoonPay handles your card details directly; we never see them
Analytics Providers
- Anonymized usage data
- Purpose: To understand how the Service is used
4.2 Public Blockchain (NFT Tiers Only)
XRP Ledger
- Your wallet address
- NFT metadata (including IPFS CID or Arweave TX ID)
- Transaction details and timestamps
These records are permanent, public, and cannot be deleted.
Arweave Blockchain (NFT+Arweave Tier Only)
- Your 3D model file
- File metadata
Arweave storage is permanent and immutable. Once uploaded, content cannot be deleted or modified.
4.3 Legal Requirements
We may disclose your information if required to:
- Comply with legal obligations or court orders
- Protect our rights or property
- Prevent fraud or security threats
- Protect the safety of users or the public
4.4 Business Transfers
If we undergo a merger, acquisition, or sale of assets, your information may be transferred to the successor entity.
4.5 With Your Consent
We may share information for other purposes with your explicit consent.
5. Data Retention
User Content (2D Images)
- Retained for 30 days after successful service completion
- May be retained longer if needed to resolve disputes
- Deleted permanently after retention period
Generated 3D Models - By Tier
- File Only: Available for 30 days via My Models page, then deleted
- NFT+IPFS: Stored on IPFS via Pinata indefinitely (as long as Pinata operates)
- NFT+Arweave: Stored permanently on Arweave blockchain (200+ years minimum guarantee)
Transaction Records
- Retained for 7 years for accounting and legal compliance
- Includes payment confirmations and wallet addresses (NFT tiers)
Account Data (if applicable)
- Retained while your account is active
- Deleted within 90 days of account closure (unless legally required to retain)
Blockchain Data (NFT Tiers Only)
- Permanently stored on the XRP Ledger
- Cannot be deleted or modified
Arweave Data (NFT+Arweave Tier Only)
- Permanently stored on Arweave blockchain
- Cannot be deleted, modified, or removed
- Guaranteed storage for 200+ years
6. Data Security
We implement industry-standard security measures:
Technical Safeguards
- Encryption in transit (TLS/SSL)
- Encryption at rest for stored data
- Secure server infrastructure
- Regular security audits
Organizational Safeguards
- Access controls (principle of least privilege)
- Employee training on data protection
- Incident response procedures
Third-Party Security
- Pinata: SOC 2 Type II certified, 99.9% uptime SLA
- Arweave: Decentralized blockchain with cryptographic security
- MoonPay: PCI DSS compliant payment processing
However, no system is 100% secure. We cannot guarantee absolute security and are not liable for unauthorized access despite our best efforts.
7. Your Privacy Rights
Depending on your jurisdiction (e.g., GDPR for EU residents, CCPA for California residents), you may have the following rights:
Access
Request a copy of your personal information
Correction
Update inaccurate or incomplete information
Deletion
Request deletion of your information (subject to legal retention requirements and technical limitations)
Portability
Receive your data in a machine-readable format
Objection
Object to certain processing activities
Restriction
Request limitation of processing
Withdraw Consent
Revoke consent for optional data processing
Important Limitations:
- We cannot delete or alter information recorded on the XRP Ledger (NFT tiers)
- We cannot delete or alter files stored on Arweave blockchain (NFT+Arweave tier)
- We cannot delete files from IPFS that have been propagated across the network (NFT+IPFS tier), though we can unpin from Pinata
- Blockchain and decentralized storage are immutable by design
To exercise your rights, contact us at: support@xrp3d.ai
We will respond within 30 days.
8. International Data Transfers
Our company is based in Guernsey, Channel Islands, and our servers are located in the United Kingdom and European Union. If you access the Service from outside these regions, your information will be transferred internationally.
For EU/EEA Users: Guernsey has been recognized by the European Commission as providing adequate data protection under the UK GDPR and EU GDPR. We ensure appropriate safeguards are in place for all international data transfers.
Decentralized Storage: IPFS and Arweave are globally distributed networks. Your files may be stored and accessed from nodes worldwide.
9. Children's Privacy
Our Service is not intended for users under 18 years of age. We do not knowingly collect information from children. If we learn we have collected information from a child, we will delete it immediately (subject to technical limitations of blockchain and permanent storage systems).
If you believe we have information about a child, contact us at: support@xrp3d.ai
10. Third-Party Links
Our Service may contain links to third-party websites (including IPFS gateways, Arweave explorers, and blockchain explorers). We are not responsible for their privacy practices. We encourage you to review their privacy policies before providing any information.
11. Cookie Policy
Essential Cookies
- Required for service functionality
- Cannot be disabled
Analytics Cookies
- Help us understand usage patterns
- Can be disabled via browser settings
Marketing Cookies
- Used for promotional purposes (only with consent)
- Can be disabled via browser settings
To manage cookies: Use your browser settings or visit our Cookie Preferences page.
12. Do Not Track
Some browsers have "Do Not Track" features. We currently do not respond to Do Not Track signals, but we limit tracking as described in this policy.
13. Permanent Storage Acknowledgment
Critical Information About NFT+Arweave Tier:
By choosing the NFT+Arweave tier, you explicitly acknowledge and consent that your 3D model file will be permanently stored on the Arweave blockchain for 200+ years minimum. This storage is:
- Irreversible: Cannot be deleted, removed, or modified
- Public: Accessible to anyone with the transaction ID
- Permanent: Will outlast most traditional storage solutions
- Immutable: Protected by cryptographic guarantees
Only use NFT+Arweave tier if you are comfortable with permanent, public storage of your 3D model. For less permanent options, consider File Only or NFT+IPFS tiers.
14. Changes to This Policy
We may update this Privacy Policy to reflect:
- Changes in legal requirements
- New features or services
- Feedback from users
Notice of Changes:
- Updated "Last Updated" date
- Notice on website homepage
- Email notification to registered users (for material changes)
Continued use after changes constitutes acceptance of the updated policy.