Privacy Policy

1. Privacy-First Processing Ritn3D prioritizes local edge processing wherever possible to minimize data exposure. 2. Data We Collect Account information (email, login credentials) Uploaded floor plans Generated 3D models Usage and diagnostic data 3. What We Do NOT Do We do not sell, rent, or trade your data We do not use your data for AI training We do not share data with brokers 4. Data Retention Schedule Floor plan images uploaded for automatic detection: processed in memory to generate your model and not stored on our servers Tracing reference images: when you choose to trace a plan manually, the image you supply is stored with that plan so you can reopen it on your devices. It is removed when you delete the plan or your account. 3D models and preview thumbnails: retained while your account is active. You can delete any project at any time from the app, which permanently removes it from our storage. Account data: retained while your account is active; permanently deleted within 30 days of an account deletion request Usage and analytics data: retained for up to 12 months in aggregated, anonymised form only 5. Cloud & Third-Party Risk While we use secure partners, Ritn3D is not liable for breaches occurring on third-party infrastructure. 6. Subprocessors We use the following third-party services to operate Ritn3D: Google Cloud Platform (storage, compute) — United States Cloudflare (CDN, asset delivery) — United States Firebase / Google (authentication, crash reporting, analytics) — United States Each subprocessor is bound by data processing agreements meeting applicable data protection standards. Payment processing works differently. When you buy a subscription, your payment details are collected by the payment provider, not by us — we never receive or store your card number. Apple App Store / Google Play — purchases made inside our mobile apps Dodo Payments, acting as merchant of record — purchases made on the web or on Windows For the payment data they collect from you directly, these providers act as independent data controllers under their own privacy policies rather than as processors acting on our behalf. That means your rights in respect of that data are exercised against them. We receive only what we need to service your account, such as your email address, subscription status and renewal dates. 7. International Data Transfers Your data may be processed in countries outside your own, including the United States. Where required by applicable law, we rely on standard contractual clauses or equivalent safeguards approved by relevant data protection authorities. 8. Data Breach Notification In the event of a data breach affecting your personal data, we will notify affected users within 72 hours of becoming aware of the breach, where required by applicable law. 9. Data Deletion & Account Removal Users may delete accounts from app settings. Data is permanently purged upon deletion, subject to legal retention obligations. 10. GDPR / CCPA Rights You have the right to: Access your data Delete your data Restrict processing Port your data to another service Withdraw consent at any time Processing is based on contractual necessity and, where applicable, your consent. 11. Security Disclaimer No system is 100% secure. Use of the Service is at your own risk. 12. Contact For privacy-specific inquiries: 📧 [email protected]