Datenschutzrichtlinie

Interpretation

The words of which the initial letter is capitalized have meanings defined under the following conditions. The following definitions shall have the same meaning regardless of whether they appear in singular or in plural.

Definitions

For the purposes of this Privacy Policy:

• Account means a unique account created for you to access our Service.
• Company (referred to as either "the Company," "We," "Us," or "Our") refers to Carve.
• Cookies are small files placed on your device by a website, used to record aspects of your browsing session.
• Device means any device that can access the Service such as a computer, a phone, or a tablet.
• Personal Data is any information that relates to an identified or identifiable individual.
• Service refers to the Carve website and platform.
• Service Provider means any third party who processes data on behalf of the Company (for example, our payment, storage, or AI inference vendors).
• User Inputs refers to the designs, sketches, CAD files, and photos you upload to the Service.
• User Renders refers to the photorealistic images generated by the Service from your User Inputs.
• Usage Data refers to data collected automatically from the Service infrastructure (for example, the duration of a page visit).
• Website refers to Carve, accessible from https://carve.so.
• You means the individual accessing or using the Service, or the company or other legal entity on behalf of which such individual is accessing or using the Service.

Types of Data Collected

Personal Data

While using our Service, we may ask you to provide us with certain personally identifiable information that can be used to contact or identify you. This information may include:

• Email address
• First name and last name
• Company or practice name (optional)
• Billing information (processed and stored by Stripe)
• Usage Data

User Inputs and Renders

When you use the Service, we store your User Inputs (designs, sketches, CAD exports, photos) and the resulting User Renders in our Wasabi object-storage bucket. These files are encrypted at rest and associated with your account. We do not use User Inputs or User Renders to train our models or those of any third party.

Usage Data

Usage Data is collected automatically. It may include information such as your device's IP address, browser type and version, the pages you visit, the time and date of your visit, the time spent on those pages, unique device identifiers, and other diagnostic data.

Tracking Technologies and Cookies

We use Cookies and similar tracking technologies to track activity on our Service and store certain information such as session state and authentication tokens.

• Browser Cookies. A cookie is a small file placed on your device. You can instruct your browser to refuse cookies or to indicate when a cookie is being sent. If you do not accept cookies, some parts of our Service may not function correctly.
• Web Beacons. Certain sections of our Service and our emails may contain small electronic files known as web beacons that allow us to count users who have visited those pages or opened an email.

The Company may use Personal Data for the following purposes:

• To provide and maintain our Service, including to monitor the usage of our Service and operate the render pipeline on your behalf.
• To manage your Account: managing your registration, authentication, and credit balance.
• To perform a contract: the development, compliance, and fulfilment of the purchase contract for the subscription, credits, or services you have purchased.
• To contact you: by email regarding updates, billing events, or informative communications related to the Service.
• To provide support for any questions, requests, or issues you raise with us.
• For business operations: analysing product usage at an aggregate level to improve reliability, performance, and features.

The Company will retain your Personal Data only for as long as is necessary for the purposes set out in this Privacy Policy. We will retain and use your Personal Data to the extent necessary to comply with our legal obligations, resolve disputes, and enforce our agreements and policies.

User Inputs and User Renders are retained for as long as your account is active, or until you delete them individually from your dashboard. Upon account deletion, all associated files are removed from our storage within 30 days.

You have the right to delete or request that we assist in deleting the Personal Data we have collected about you. You may update, amend, or delete your information at any time by signing in to your Account and visiting the account settings section. You may also contact us to request access to, correct, or delete any personal information you have provided.

The security of your Personal Data is important to us. We use industry-standard encryption in transit (HTTPS/TLS) and at rest for data stored in our databases and object storage. However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your Personal Data, we cannot guarantee its absolute security.

Providers We Use

• Stripe — processes your subscription and credit purchases. Your payment card details are handled directly by Stripe and never stored on our servers.
• Replicate — runs the AI models that produce your renders. User Inputs are sent to Replicate for the duration of the render request and are not retained by Replicate after completion.
• Wasabi — provides S3-compatible object storage for your User Inputs and User Renders. Files are stored encrypted at rest in an EU-hosted region.
• MongoDB Atlas — hosts our primary database, which stores account metadata, credit balances, and render job records.
• Google — provides OAuth-based sign-in. When you sign in with Google, we receive your name, email address, and profile picture.

Our Service does not address anyone under the age of 13. We do not knowingly collect personally identifiable information from anyone under the age of 13. If you are a parent or guardian and you are aware that your child has provided us with Personal Data, please contact us and we will take steps to remove that information.

Our Service may contain links to other websites that are not operated by us. If you click on a third-party link, you will be directed to that third party's site. We strongly advise you to review the Privacy Policy of every site you visit. We have no control over, and assume no responsibility for, the content, privacy policies, or practices of any third-party sites or services.

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date above. You are advised to review this Privacy Policy periodically for any changes.

If you have any questions about this Privacy Policy, you can contact us:

• By email: hello@carve.so